CVE-2006-6481

CVE-2006-6481 affects ClamAV 0.88.6. The vulnerability allows a remote attacker to cause a denial of service through crafted multipart/mixed content that leads to a stack overflow and application crash. This is described as a different vulnerability from CVE-2006-5874 and CVE-2006-6406. The provi...

CVE-2006-5873

Buffer overflow in the clusterprocessheartbeat function in cluster.c in layer 2 tunneling protocol network server l2tpns before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet...

CVE-2006-5873

CVE-2006-5873 affects l2tpns: Buffer overflow in cluster_process_heartbeat() of cluster.c can cause remote denial of service via a large heartbeat packet. Connected sources confirm the issue in l2tpns before 2.1.21. Debian security advisories indicate the patch is in 2.1.21-1 (unstable) with 2.0....

MS06-074: Vulnerability in SNMP Could Allow Remote Code Execution (926247)

The remote host contains a flaw in its SNMP service that could allow remote code execution. Tenable Network Security, Inc. include"compat.inc"; if description scriptid23837; scriptversion"1.27"; scriptcvsdate"Date: 2018/11/15 20:50:30"; scriptcveid"CVE-2006-5583"; scriptbugtraqid21537;...

CVE-2006-6480

CVE-2006-6480 affects AnnonceScriptHP 2.0. The vulnerability is in admin/admin_membre/fiche_membre.php, where the idmembre parameter allows remote attackers to obtain sensitive information, specifically passwords for arbitrary users. The provided sources confirm the affected component and the dat...

CVE-2006-6478

CVE-2006-6478 describes multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0. The affected components are (a) email.php (id parameter), (b) voirannonce.php (no parameter), (c) admin/admin_membre/fiche_membre.php (idmembre), and (d) admin/admin_annonce/okvalannonce.php and (e) admin/admin...

CVE-2006-5873

Buffer overflow in the clusterprocessheartbeat function in cluster.c in layer 2 tunneling protocol network server l2tpns before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet...

CVE-2006-6479

CVE-2006-6479 documents multiple XSS flaws in AnnonceScriptHP 2.0, allowing remote attackers to inject arbitrary script or HTML via the email parameter. Affected files are: erreurinscription.php, Templates/admin.dwt.php, Templates/commun.dwt.php, membre.dwt.php, and admin/admin_config/Aide.php. T...

Microsoft Security Bulletin MS06-073 Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution (925674)

Microsoft Security Bulletin MS06-073 Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution 925674 Published: December 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Visual Studio 2005 Impact of Vulnerability: Remote Code Execution Maximum...

MS06-072: Cumulative Security Update for Internet Explorer (925454)

The remote host is missing the IE cumulative security update 925454. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Note that Microsoft has re-released this hotfix as its initial version contained a buffer overflo...

MS06-078: Vulnerability in Windows Media Format Could Allow Remote Code Execution (923689/925398)

The remote host is running Windows Media Player/Series. There is a vulnerability in the remote version of this software which may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, one attacker would need to set up a rogue ASF/ASX file and send it to a victim on...

CVE-2006-5873

Buffer overflow in the clusterprocessheartbeat function in cluster.c in layer 2 tunneling protocol network server l2tpns before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet...

CVE-2006-5871

CVE-2006-5871 affects the Linux kernel (notably 2.6.8 and 2.4.x prior to 2.4.34) where UNIX extensions are enabled. The vulnerability arises because smbfs ignores certain mount options, allowing a client to end up using server-specified uid, gid, and mode settings. Connected records (e.g., Debian...

MailEnable IMAPD (2.34/2.35) Login Request Buffer Overflow

MailEnable's IMAP server contains a buffer overflow vulnerability in the Login command. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MailEnable IMAPD 2.34/2.35 Login Request Buffer Overflow'...

CVE-2006-6472

The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 configures port 443 to be always active, which has unknown impact and remote attack vectors...

CVE-2006-6466

Multiple cross-site scripting XSS vulnerabilities in WBmap.php in WikyBlog 1.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 key, 2 d, 3 l, or 4 v parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2006-6472

The CVE-2006-6472 entry relates to the httpd.conf configuration in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000, where port 443 is configured to be always active. This describes a configuration issue with unknown impact and rem...

CVE-2006-6465

WikyBlog v1.3.2 and earlier exposes a directory traversal risk in WBmap.php via the l parameter. The vulnerability is described as allowing remote inclusion/execution of local files, with the note that the l parameter is validated by ctype_alpha before use, which CVE disputes. Affected software i...

CVE-2006-6471

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 use weak permissions for certain files, which allows unspecified file access...

CVE-2006-6466

Multiple cross-site scripting XSS vulnerabilities in WBmap.php in WikyBlog 1.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 key, 2 d, 3 l, or 4 v parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...