CVE-2005-3994

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3967. Reason: This candidate is a duplicate of CVE-2005-3967. Notes: All CVE users should reference CVE-2005-3967 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Hot Links SQL 3.x XSS vuln.

Hot Links SQL 3.x XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/hot-links-sql-3x-xss-vuln.html vendor:http://www.mrcgiguy.com/hlsqldetails.shtml affected version:3.1.x and prior Product Description: irectory style index allows for easy...

Hot Links Pro 3.x XSS vuln.

Hot Links Pro 3.x XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/hot-links-pro-3x-xss-vuln.html vendor:http://www.mrcgiguy.com/hl3details.shtml affected version:3.x and prior Product Description: Directory style index allows for easy...

CVE-2005-3990

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-3619. Reason: This candidate is a duplicate of CVE-2006-3619. Notes: All CVE users should reference CVE-2006-3619 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-3990

CVE-2005-3990 is rejected/not used and does not represent an active vulnerability entry.

CVE-2005-3965

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-2607. Reason: This candidate is a duplicate of CVE-2004-2607. Notes: All CVE users should reference CVE-2004-2607 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-3965

CVE-2005-3965 is marked as a duplicate of CVE-2004-2607 (Rejected reason in description). Connected documents confirm CVE-2004-2607 exists and describes a numeric casting discrepancy in sdla_xfer for Linux kernels (2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1) that can allow local users to read ker...

CVE-2006-0018

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3899. Reason: This candidate is a duplicate of CVE-2005-3899. Notes: All CVE users should reference CVE-2005-3899 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-3898

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3567. Reason: This candidate is a reservation duplicate of CVE-2005-3567. Notes: All CVE users should reference CVE-2005-3567 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2006-0018

Summary: CVE-2005-3899 (Google Talk) describes a vulnerability in the automatic update feature where remote attackers can poison a target's DNS cache and cause a large update file to be sent, triggering CPU and memory exhaustion during signature verification (BenjiBug). The related entry CVE-2006...

CVE-2005-3637

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3530. Reason: This candidate is a duplicate of CVE-2005-3530. Notes: All CVE users should reference CVE-2005-3530 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2002-2160

Summary: CVE-2002-2160 is a duplicate of CVE-2002-1798 (DO NOT USE THIS CANDIDATE NUMBER). The connected records describe the underlying issue in MidiCart PHP, PHP Plus, and PHP Maxi. Affected software (as documented): MidiCart PHP, PHP Plus, and PHP Maxi. Vulnerability details (from connected CV...

CVE-2005-3637

CVE-2005-3637 is a duplicate of CVE-2005-3530 and is not a separate active entry. Connected data show CVE-2005-3530 documents a Cross-site scripting (XSS) vulnerability in Antville 1.1 that allows remote injection of arbitrary web script/HTML via the notfound.skin error document. Affected version...

CVE-2002-2136

CVE-2002-2136 is rejected/not used; duplicate of CVE-2002-1590.

CVE-2002-2147

CVE-2002-2147 is a duplicate of CVE-2002-1828. The exposed detail confirms Savant Webserver 3.1 is affected: remote attackers can crash the server by sending an HTTP GET request with a negative Content-Length value, causing a denial of service. This is supported by CVE records and OpenVAS/Nessus ...

CVE-2002-2135

CVE-2002-2135 is a duplicate of CVE-2002-1618. The connected CVE-2002-1618 describes a vulnerability in HP-UX JFS/JFS3.1 and OnlineJFS where the sticky bit is not properly enforced on JFS filesystems (HP-UX 10.20, 11.00, 11.04), potentially allowing attackers to bypass filesystem-restrictions. Th...

CVE-2002-2157

CVE-2002-1660 affects calendar.php in vBulletin prior to 2.2.0, allowing remote attackers to execute arbitrary commands via shell metacharacters in the command parameter. This represents the concrete vulnerability detail referenced by CVE-2002-2157 via duplication; CVE-2157 is a duplicate and poi...

CVE-2002-2194

CVE-2002-2194 is a duplicate of CVE-2002-1589. The connected CVE-2002-1589 describes Solaris 8 vulnerability where the 0x02 bit (TEST, KMF_DEADBEEF, or deadbeef) in kmem_flags enables local users to trigger a denial of service (system panic). No exploitation status or patch details are provided i...

CVE-2005-3561

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2954. Reason: This candidate is a reservation duplicate of CVE-2005-2954. Notes: All CVE users should reference CVE-2005-2954 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2005-3563

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2956. Reason: This candidate is a duplicate of CVE-2005-2956. Notes: All CVE users should reference CVE-2005-2956 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...