Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0323.

Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.


Provide references for further information: Can you share references or external links related to CVE-2006-0323?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.service.real.com/realplayer/security/03162006_player/en/'}, {'name': '19358', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19358'}, {'name': 'SUSE-SA:2006:018', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_18_realplayer.html'}, {'name': '19362', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19362'}, {'name': 'ADV-2006-1057', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1057'}, {'name': 'RHSA-2006:0257', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0257.html'}, {'name': '690', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/690'}, {'name': '19365', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19365'}, {'name': 'GLSA-200603-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200603-24.xml'}, {'name': '1015806', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015806'}, {'name': '17202', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17202'}, {'name': '20060411 Realplayer .SWF Multiple Remote Memory Corruption Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/430621/100/0/threaded'}, {'name': 'realnetworks-swf-bo(25408)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25408'}, {'name': '19390', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19390'}, {'name': 'VU#231028', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/231028'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0323?


Explain the CVE ID: What does the identifier CVE-2006-0324 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0324.

SQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter to login.php.


Provide references for further information: Can you share references or external links related to CVE-2006-0324?

{'name': '18560', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18560'}, {'name': 'webspotblogging-login-sql-injection(24222)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24222'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://sourceforge.net/project/shownotes.php?release_id=387180&group_id=156586'}, {'name': '1015522', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015522'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://sourceforge.net/forum/forum.php?forum_id=532233'}, {'name': '20060119 [eVuln] WebspotBlogging Authentication Bypass Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422364/100/0/threaded'}, {'name': 'ADV-2006-0268', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0268'}, {'name': '16319', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16319'}, {'name': '22670', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22670'}, {'name': '356', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/356'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/41/summary.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0324?


Explain the CVE ID: What does the identifier CVE-2006-0325 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0325.

Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary commands via the "cij" parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0325?

{'name': '16336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16336'}, {'name': '18556', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18556'}, {'name': 'ADV-2006-0283', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0283'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.etomite.org/forums/index.php?showtopic=4185'}, {'name': '22693', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22693'}, {'name': '20060127 Etomite CMS "Backdoored"', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423497/100/0/threaded'}, {'name': 'etomite-default-backdoor(24254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24254'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.etomite.org/forums/index.php?showtopic=4291'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.lucaercoli.it/advs/etomite.txt'}, {'name': '20060130 Etomite followup information', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423523/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0325?


Explain the CVE ID: What does the identifier CVE-2006-0327 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0327.

TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1) thumbs.php, (2) showpic.php, or (3) tables.php, which causes them to incorrectly define a variable and reveal the path in an error message when a require function call fails.


Provide references for further information: Can you share references or external links related to CVE-2006-0327?

{'name': '20060119 Re: IRM 015: File system path disclosure on TYPO3 Web Content Manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422390/100/0/threaded'}, {'name': '361', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/361'}, {'name': '22666', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22666'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.typo3.org/view.php?id=2248'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.irmplc.com/advisory015.htm'}, {'name': 'typo3-multiple-path-disclosure(24244)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24244'}, {'name': '22665', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22665'}, {'name': '18546', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18546'}, {'name': 'ADV-2006-0269', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0269'}, {'name': '20060119 IRM 015: File system path disclosure on TYPO3 Web Content Manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422360/100/0/threaded'}, {'name': '22667', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22667'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0327?


Explain the CVE ID: What does the identifier CVE-2006-0328 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0328.

Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename in a (1) GET or (2) SEND request.


Provide references for further information: Can you share references or external links related to CVE-2006-0328?

{'name': '16333', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16333'}, {'name': '362', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/362'}, {'name': '20060119 Critical security advisory #006 tftpd32 Format string', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422405/100/0/threaded'}, {'name': '22661', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22661'}, {'name': 'tftpd32-request-format-string(24250)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24250'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.critical.lt/?vulnerabilities/200'}, {'name': 'VU#632633', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/632633'}, {'name': 'ADV-2006-0263', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0263'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.critical.lt/research/tftpd32_281_dos.txt'}, {'name': '18539', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18539'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0328?


Explain the CVE ID: What does the identifier CVE-2006-0329 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0329.

SQL injection vulnerability in HITSENSER Data Mart Server BS, BS-S, BS-M, BS-L, and EX allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0329?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.hitachi-support.com/security_e/vuls_e/HS05-026_e/index-e.html'}, {'name': 'ADV-2006-0266', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0266'}, {'name': '22669', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22669'}, {'name': 'hitachi-hitsenser-sql-injection(24240)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24240'}, {'name': '16326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16326'}, {'name': '18553', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18553'}, {'name': '1015519', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015519'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0329?


Explain the CVE ID: What does the identifier CVE-2006-0330 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0330.

Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname).


Provide references for further information: Can you share references or external links related to CVE-2006-0330?

{'name': 'gallery-unknown-xss(24247)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24247'}, {'name': '21502', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21502'}, {'name': '22660', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22660'}, {'name': 'DSA-1148', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.us.debian.org/security/2006/dsa-1148'}, {'name': 'GLSA-200601-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200601-13.xml'}, {'name': '18557', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18557'}, {'name': '16334', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16334'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285'}, {'name': '18627', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18627'}, {'name': 'ADV-2006-0282', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0282'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/page/gallery_1_5_2_release'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0330?


Explain the CVE ID: What does the identifier CVE-2006-0331 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0331.

Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments.


Provide references for further information: Can you share references or external links related to CVE-2006-0331?

{'name': '363', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/363'}, {'name': 'changepassword-changepasswd-bo(24258)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24258'}, {'name': '20060119 Change passwd 3.1 (SquirrelMail plugin )', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422414/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.squirrelmail.org/plugin_view.php?id=117'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0331?


Explain the CVE ID: What does the identifier CVE-2006-0332 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0332.

Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may allow remote attackers to upload arbitrary files.


Provide references for further information: Can you share references or external links related to CVE-2006-0332?

{'name': '[listar-dev] 20060119 [EDev] Re: Potential vulnerability -- who to contact?', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=listar-dev&m=113770802408358&w=2'}, {'name': '18524', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18524'}, {'name': 'ADV-2006-0260', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0260'}, {'name': '[listar-dev] 20060115 [EDev] Re: Potential vulnerability -- who to contact?', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=listar-dev&m=113732552708625&w=2'}, {'name': '16317', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16317'}, {'name': 'ecartis-pantomime-bypass-security(24220)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24220'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0332?


Explain the CVE ID: What does the identifier CVE-2006-0333 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0333.

Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) month or (2) year parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2006-0333?

{'name': 'arblog-index-xss(24246)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24246'}, {'name': '20060118 -2- [XSS] in ar-blog v 5.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422386/100/0/threaded'}, {'name': '20060527 Multiple Xss exploits in ar-blog v 5.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/435205/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0333?


Explain the CVE ID: What does the identifier CVE-2006-0334 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0334.

Cross-site scripting (XSS) vulnerability in search.php in My Amazon Store Manager 1.0 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter.  NOTE: some sources claim that the affected parameter is "q", but the only public archive of the original researcher notification shows an XSS manipulation in "Keywords".


Provide references for further information: Can you share references or external links related to CVE-2006-0334?

{'name': '18535', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18535'}, {'name': 'ADV-2006-0252', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0252'}, {'name': 'masm-search-xss(24230)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24230'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/22/22626-my_amazon.txt'}, {'name': '16312', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16312'}, {'name': '22626', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22626'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0334?


Explain the CVE ID: What does the identifier CVE-2006-0335 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0335.

Multiple unspecified vulnerabilities in Kerio WinRoute Firewall before 6.1.4 Patch 1 allow remote attackers to cause a denial of service via multiple unspecified vectors involving (1) long strings received from Active Directory and (2) the filtering of HTML.


Provide references for further information: Can you share references or external links related to CVE-2006-0335?

{'name': '22631', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22631'}, {'name': 'ADV-2006-0247', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0247'}, {'name': '18542', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18542'}, {'name': '16314', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16314'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kerio.com/kwf_history.html'}, {'name': 'kerio-winroute-html-dos(24232)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24232'}, {'name': 'kerio-winroute-activedirectory-dos(24233)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24233'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0335?


Explain the CVE ID: What does the identifier CVE-2006-0336 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0336.

Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service (CPU consumption and hang) via unknown vectors involving "browsing the web".


Provide references for further information: Can you share references or external links related to CVE-2006-0336?

{'name': '22631', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22631'}, {'name': '18589', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18589'}, {'name': '16385', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16385'}, {'name': 'ADV-2006-0324', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0324'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kerio.com/kwf_history.html'}, {'name': 'kerio-winroute-browsing-dos(24317)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24317'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0336?


Explain the CVE ID: What does the identifier CVE-2006-0337 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0337.

Buffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allows remote attackers to execute arbitrary code via crafted ZIP archives.


Provide references for further information: Can you share references or external links related to CVE-2006-0337?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.f-secure.com/security/fsc-2006-1.shtml'}, {'name': '1015510', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015510'}, {'name': '18529', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18529'}, {'name': '22632', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22632'}, {'name': 'fsecure-zip-bo(24198)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24198'}, {'name': '1015509', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015509'}, {'name': '16309', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16309'}, {'name': 'Q-103', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/q-103.shtml'}, {'name': '1015508', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015508'}, {'name': '1015507', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015507'}, {'name': 'ADV-2006-0257', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0257'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0337?


Explain the CVE ID: What does the identifier CVE-2006-0338 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0338.

Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to hide arbitrary files and data via malformed (1) RAR and (2) ZIP archives, which are not properly scanned.


Provide references for further information: Can you share references or external links related to CVE-2006-0338?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.f-secure.com/security/fsc-2006-1.shtml'}, {'name': 'fsecure-rar-zip-scan-bypass(24199)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24199'}, {'name': '1015510', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015510'}, {'name': '18529', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18529'}, {'name': '22633', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22633'}, {'name': '1015509', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015509'}, {'name': '16309', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16309'}, {'name': 'Q-103', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/q-103.shtml'}, {'name': '1015508', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015508'}, {'name': '1015507', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015507'}, {'name': 'ADV-2006-0257', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0257'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0338?


Explain the CVE ID: What does the identifier CVE-2006-0339 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0339.

Buffer overflow in BitComet Client 0.60 allows remote attackers to execute arbitrary code, when the publisher's name link is clicked, via a long publisher URI in a torrent file.


Provide references for further information: Can you share references or external links related to CVE-2006-0339?

{'name': '18522', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18522'}, {'name': '20060118 Fortinet Advisory: BitComet URI Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422361/100/0/threaded'}, {'name': '20060118 Fortinet Advisory: BitComet URI Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0669.html'}, {'name': 'ADV-2006-0251', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0251'}, {'name': '357', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/357'}, {'name': '20060122 BitComet URI Proof of Concept', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-01/0442.html'}, {'name': '22625', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22625'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bitcomet.com/doc/changelog.htm'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.fortinet.com/FortiGuardCenter/FSA-2006-07.html'}, {'name': '16311', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16311'}, {'name': 'bitcomet-torrent-publisher-bo(24229)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24229'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0339?


Explain the CVE ID: What does the identifier CVE-2006-0340 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0340.

Unspecified vulnerability in Stack Group Bidding Protocol (SGBP) support in Cisco IOS 12.0 through 12.4 running on various Cisco products, when SGBP is enabled, allows remote attackers on the local network to cause a denial of service (device hang and network traffic loss) via a crafted UDP packet to port 9900.


Provide references for further information: Can you share references or external links related to CVE-2006-0340?

{'name': '18490', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18490'}, {'name': '20060118 IOS Stack Group Bidding Protocol Crafted Packet DoS', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20060118-sgbp.shtml'}, {'name': 'ADV-2006-0248', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0248'}, {'name': '358', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/358'}, {'name': '16303', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16303'}, {'name': 'cisco-ios-sgbp-dos(24182)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24182'}, {'name': '22624', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22624'}, {'name': '1015501', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015501'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0340?


Explain the CVE ID: What does the identifier CVE-2006-0341 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0341.

Cross-site scripting (XSS) vulnerability in WCONSOLE.DLL in Rockliffe MailSite 5.x and 6.1.22 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string.


Provide references for further information: Can you share references or external links related to CVE-2006-0341?

{'name': '16330', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16330'}, {'name': 'ADV-2006-0284', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0284'}, {'name': 'mailsite-wconsole-xss(24256)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24256'}, {'name': '20060120 RockLiffe MailSite wconsole.dll Denial of Service/Script Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=113777628702043&w=2'}, {'name': '22677', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22677'}, {'name': '18551', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18551'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0341?


Explain the CVE ID: What does the identifier CVE-2006-0342 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0342.

RockLiffe MailSite HTTP Mail management agent (httpma) 7.0.3.1 allows remote attackers to cause a denial of service (CPU consumption and crash) via a malformed query string containing special characters such as "|".


Provide references for further information: Can you share references or external links related to CVE-2006-0342?

{'name': 'ADV-2006-0284', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0284'}, {'name': '20060120 RockLiffe MailSite wconsole.dll Denial of Service/Script Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=113777628702043&w=2'}, {'name': '22678', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22678'}, {'name': '18551', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18551'}, {'name': 'mailsite-wconsole-dos(24255)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24255'}, {'name': '16331', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16331'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0342?


Explain the CVE ID: What does the identifier CVE-2006-0343 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0343.

Unspecified vulnerability in the Port Discovery Standard and Advanced features in Hitachi JP1/NetInsight II allows attackers to stop the Port Discovery service via unknown vectors involving "invalid format data".


Provide references for further information: Can you share references or external links related to CVE-2006-0343?

{'name': '16327', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16327'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.hitachi-support.com/security_e/vuls_e/HS05-027_e/index-e.html'}, {'name': 'hitachi-jp1netinsight-port-dos(24243)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24243'}, {'name': 'ADV-2006-0267', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0267'}, {'name': '22676', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22676'}, {'name': '1015520', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015520'}, {'name': '18538', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18538'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0343?


Explain the CVE ID: What does the identifier CVE-2006-0344 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0344.

Directory traversal vulnerability in Intervations FileCOPA FTP Server 1.01 allows remote attackers to read and write arbitrary files via a .. (dot dot) in the (1) STOR and (2) RETR commands.


Provide references for further information: Can you share references or external links related to CVE-2006-0344?

{'name': '18550', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18550'}, {'name': 'filecopa-ftp-directory-traversal(24257)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24257'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nii.co.in/vuln/filecopa.html'}, {'name': '22694', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22694'}, {'name': 'ADV-2006-0285', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0285'}, {'name': '16335', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16335'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0344?


Explain the CVE ID: What does the identifier CVE-2006-0345 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0345.

Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php.  NOTE: the id/viewprofile.php issue is already covered by CVE-2005-4058.


Provide references for further information: Can you share references or external links related to CVE-2006-0345?

{'name': '16306', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16306'}, {'name': '22740', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22740'}, {'name': '1015517', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015517'}, {'name': 'saralblog-search-sql-injection(24218)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24218'}, {'name': '20060118 [eVuln] SaralBlog XSS & Multiple SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-01/0372.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/40/summary.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0345?


Explain the CVE ID: What does the identifier CVE-2006-0346 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0346.

Cross-site scripting (XSS) vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via a website field in a new comment to view.php, which is not properly handled in the comment function in functions.php.


Provide references for further information: Can you share references or external links related to CVE-2006-0346?

{'name': '16306', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16306'}, {'name': 'saralblog-view-xss(24219)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24219'}, {'name': '27907', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27907'}, {'name': '1015517', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015517'}, {'name': '20060118 [eVuln] SaralBlog XSS & Multiple SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-01/0372.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/40/summary.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0346?


Explain the CVE ID: What does the identifier CVE-2006-0347 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0347.

Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the elog directory via "../" (dot dot) sequences in the URL.


Provide references for further information: Can you share references or external links related to CVE-2006-0347?

{'name': '16315', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16315'}, {'name': 'elog-dotdot-directory-traversal(24224)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24224'}, {'name': '18783', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18783'}, {'name': 'ADV-2006-0262', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0262'}, {'name': '18533', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18533'}, {'name': 'DSA-967', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-967'}, {'tags': ['x_refsource_MISC'], 'url': 'http://midas.psi.ch/elog/download/ChangeLog'}, {'name': '22647', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22647'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0347?


Explain the CVE ID: What does the identifier CVE-2006-0348 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0348.

Format string vulnerability in the write_logfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service (server crash) via unknown attack vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-0348?

{'name': '22646', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22646'}, {'name': '16315', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16315'}, {'name': '18783', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18783'}, {'name': 'elog-elogd-format-string(24221)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24221'}, {'name': 'ADV-2006-0262', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0262'}, {'name': '18533', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18533'}, {'name': 'DSA-967', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-967'}, {'tags': ['x_refsource_MISC'], 'url': 'http://midas.psi.ch/elog/download/ChangeLog'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0348?


Explain the CVE ID: What does the identifier CVE-2006-0349 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0349.

SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to blog.php.


Provide references for further information: Can you share references or external links related to CVE-2006-0349?

{'name': '1015505', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015505'}, {'name': '16305', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16305'}, {'name': '22751', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22751'}, {'name': '20060118 [eVuln] eggblog Multiple SQL Injection & XSS Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-01/0371.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/39/summary.html'}, {'name': 'eggblog-blog-sql-injection(24210)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24210'}, {'name': '18212', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18212'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0349?


Explain the CVE ID: What does the identifier CVE-2006-0350 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0350.

Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field to topic.php.


Provide references for further information: Can you share references or external links related to CVE-2006-0350?

{'name': '1015505', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015505'}, {'name': '22752', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22752'}, {'name': '16305', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16305'}, {'name': '20060118 [eVuln] eggblog Multiple SQL Injection & XSS Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-01/0371.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/39/summary.html'}, {'name': '18212', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18212'}, {'name': 'eggblog-topic-xss(24209)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24209'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0350?


Explain the CVE ID: What does the identifier CVE-2006-0351 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0351.

Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0351?

{'name': 'DSA-963', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-963'}, {'name': 'mydns-query-dos(24228)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24228'}, {'name': '18653', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18653'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://mydns.bboy.net/download/changelog.html'}, {'name': '18641', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18641'}, {'name': '16431', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16431'}, {'name': 'GLSA-200601-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200601-16.xml'}, {'name': '18532', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18532'}, {'name': 'ADV-2006-0256', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0256'}, {'name': '1015521', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015521'}, {'name': '22636', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22636'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0351?


Explain the CVE ID: What does the identifier CVE-2006-0352 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0352.

The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information (login credentials) via a direct request.  NOTE: It was later reported that 1.1.2 is also affected.


Provide references for further information: Can you share references or external links related to CVE-2006-0352?

{'name': 'flog-data-directory-insecure(24193)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24193'}, {'name': '20060117 [eVuln] Flog Information Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422268/100/0/threaded'}, {'name': '20070105 Flog 1.1.2 Remote Admin Password Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/456069/100/0/threaded'}, {'name': 'flog-admin-info-disclosure(31307)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31307'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/38/summary/bt/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0352?


Explain the CVE ID: What does the identifier CVE-2006-0353 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0353.

unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys.


Provide references for further information: Can you share references or external links related to CVE-2006-0353?

{'name': '16357', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16357'}, {'name': '[lsh-bugs] SECURITY: lshd leaks fd:s to user shells', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.lysator.liu.se/pipermail/lsh-bugs/2006q1/000467.html'}, {'name': '18623', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18623'}, {'name': '22695', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22695'}, {'name': 'lsh-file-descriptor-leak(24263)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24263'}, {'name': 'DSA-956', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-956'}, {'name': 'ADV-2006-0301', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0301'}, {'name': '18564', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18564'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0353?


Explain the CVE ID: What does the identifier CVE-2006-0354 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0354.

Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of spoofed ARP packets, which creates a large ARP table that exhausts memory, aka Bug ID CSCsc16644.


Provide references for further information: Can you share references or external links related to CVE-2006-0354?

{'name': '339', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/339'}, {'name': 'oval:org.mitre.oval:def:5680', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5680'}, {'name': '22375', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22375'}, {'name': 'ADV-2006-0176', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0176'}, {'name': '18430', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18430'}, {'name': '20060112 Access Point Memory Exhaustion from ARP Attacks', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20060112-wireless.shtml'}, {'name': 'cisco-aironet-arp-dos(24086)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24086'}, {'name': '16217', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16217'}, {'name': '1015483', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015483'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0354?


Explain the CVE ID: What does the identifier CVE-2006-0355 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0355.

Helmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command and an NLST command.


Provide references for further information: Can you share references or external links related to CVE-2006-0355?

{'name': 'homeftp-long-command-dos(24152)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24152'}, {'name': '20060114 [KAPDA::#21] - HomeFtp v1.1 Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/421869/100/0/threaded'}, {'name': '16238', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16238'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-202.html'}, {'name': '350', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/350'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0355?


Explain the CVE ID: What does the identifier CVE-2006-0356 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0356.

Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command.


Provide references for further information: Can you share references or external links related to CVE-2006-0356?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-211.html'}, {'name': 'homeftpserver-long-command-dos(24227)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24227'}, {'name': '20060115 Homeftp r1.0.7 Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422033/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0356?


Explain the CVE ID: What does the identifier CVE-2006-0357 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0357.

Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified denial of service via a long string that does not contain a valid FTP command.


Provide references for further information: Can you share references or external links related to CVE-2006-0357?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-210.html'}, {'name': 'cerberus-long-command-dos(24226)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24226'}, {'name': '20060115 Cerberus FTP Server 2.32 Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422162/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cerberusftp.com/cerberus-releasenotes.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0357?


Explain the CVE ID: What does the identifier CVE-2006-0358 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0358.

Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute arbitrary SQL commands via the search parameter in (1) index.php and (2) search.php. NOTE: This issue might overlap CVE-2004-0663.2.


Provide references for further information: Can you share references or external links related to CVE-2006-0358?

{'name': '16279', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16279'}, {'name': '10172', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10172'}, {'tags': ['x_refsource_MISC'], 'url': 'http://web.archive.org/web/20050303003128/http://powerportal.sourceforge.net/'}, {'name': 'powerportal-search-index-xss(24196)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24196'}, {'name': '27957', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27957'}, {'name': '20060117 PowerPortal Cross-Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422151/100/0/threaded'}, {'name': '27958', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27958'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0358?


Explain the CVE ID: What does the identifier CVE-2006-0359 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0359.

Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device crash) via SIP INVITE commands with a long header field name sent during startup and (2) cause a denial of service (device hang or crash) via SIP INVITE commands with a long header field name sent during a call.


Provide references for further information: Can you share references or external links related to CVE-2006-0359?

{'name': 'ADV-2006-0259', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0259'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.donews.com/zwell/archive/2006/01/17/698810.aspx'}, {'name': '20060116 CounterPath eyeBeam Handing SIP header Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422009/100/0/threaded'}, {'name': '16253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16253'}, {'name': 'eyebeam-sip-header-bo(24181)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24181'}, {'name': '18516', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18516'}, {'name': '354', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/354'}, {'name': '20060921 Re: CounterPath eyeBeam Handing SIP header Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/446573/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0359?


Explain the CVE ID: What does the identifier CVE-2006-0360 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0360.

MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication.


Provide references for further information: Can you share references or external links related to CVE-2006-0360?

{'name': '18512', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18512'}, {'name': '20060116 MPM HP-180W VoIP wireless desktop phone undocumented port UDP/9090', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041437.html'}, {'name': 'mpn-hp180w-default-port(24147)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24147'}, {'name': '16285', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16285'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0360?


Explain the CVE ID: What does the identifier CVE-2006-0361 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0361.

Cross-site scripting (XSS) vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an <a> tag in the comment parameter, which strips most tags but not <a>.


Provide references for further information: Can you share references or external links related to CVE-2006-0361?

{'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/32/exploit'}, {'name': '18464', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18464'}, {'name': '16246', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16246'}, {'name': 'bit5blog-addcomment-xss(24129)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24129'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/32/summary/'}, {'name': '20060115 [eVuln] Bit 5 Blog JavaScript Insertion Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/421994/100/0/threaded'}, {'name': '22446', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22446'}, {'name': 'ADV-2006-0195', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0195'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0361?


Explain the CVE ID: What does the identifier CVE-2006-0362 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0362.

TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service (CPU consumption) via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header.


Provide references for further information: Can you share references or external links related to CVE-2006-0362?

{'name': '1015511', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015511'}, {'name': '22504', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22504'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.eweek.com/article2/0%2C1759%2C1912048%2C00.asp'}, {'name': '18515', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18515'}, {'tags': ['x_refsource_MISC'], 'url': 'http://isc.sans.org/diary.php?storyid=1042'}, {'name': 'tippingpoint-ips-http-traffic-dos(24200)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24200'}, {'name': '16299', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16299'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0362?


Explain the CVE ID: What does the identifier CVE-2006-0363 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0363.

The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated by the "MSN Password Recovery.exe" program.  NOTE: it could be argued that local-only password recovery is inherently insecure because the decryption methods and keys must be stored somewhere on the local system, and are thus inherently accessible with varying degrees of effort.  Perhaps this issue should not be included in CVE.


Provide references for further information: Can you share references or external links related to CVE-2006-0363?

{'name': '20060113 Re: MSN Messenger Password Decrypter for WinXP/2003', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/421921/100/0/threaded'}, {'name': '20060117 Re: MSN Messenger Password Decrypter for WinXP/2003', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422283/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.msn-password-recovery.com/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0363?


Explain the CVE ID: What does the identifier CVE-2006-0364 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0364.

Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as demonstrated by "&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116".


Provide references for further information: Can you share references or external links related to CVE-2006-0364?

{'name': 'ADV-2006-0255', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0255'}, {'name': 'mybb-html-signature-xss(24225)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24225'}, {'name': '16308', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16308'}, {'name': '20060118 MyBB Signature HTML Code Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-01/0332.html'}, {'name': '22628', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22628'}, {'name': '18544', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18544'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0364?


Explain the CVE ID: What does the identifier CVE-2006-0365 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0365.

Cross-site scripting (XSS) vulnerability in XMB (aka extreme message board) allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element.


Provide references for further information: Can you share references or external links related to CVE-2006-0365?

{'name': '27920', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27920'}, {'name': 'xmbforum-imgsrc-xss(24208)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24208'}, {'name': '20060118 XMB Forum HTML Code Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422277/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'https://docs.xmbforum2.com/index.php?title=Security_Issue_History'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0365?


Explain the CVE ID: What does the identifier CVE-2006-0366 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0366.

Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a BBCode img tag.


Provide references for further information: Can you share references or external links related to CVE-2006-0366?

{'name': '20060117 Phpclanwebsite BBCode IMG Tag XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422265/100/0/threaded'}, {'name': '20060118 Phpclanwebsite BBCode IMG Tag XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'https://archive.cert.uni-stuttgart.de/bugtraq/2006/01/msg00343.html'}, {'name': '16300', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16300'}, {'name': '18541', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18541'}, {'name': 'ADV-2006-0254', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0254'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0366?


Explain the CVE ID: What does the identifier CVE-2006-0367 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0367.

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."


Provide references for further information: Can you share references or external links related to CVE-2006-0367?

{'name': '18501', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18501'}, {'name': '20060118 Cisco Call Manager Privilege Escalation', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml'}, {'name': '16293', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16293'}, {'name': 'cisco-callmanager-ccmadmin-gain-priv(24172)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24172'}, {'name': '1015502', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015502'}, {'name': 'ADV-2006-0250', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0250'}, {'name': '22621', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22621'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0367?


Explain the CVE ID: What does the identifier CVE-2006-0368 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0368.

Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of service (fill the Windows Service Manager communication queue) via a large number of TCP connections to port 2001, 2002, or 7727.


Provide references for further information: Can you share references or external links related to CVE-2006-0368?

{'name': '1015503', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015503'}, {'name': 'ADV-2006-0249', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0249'}, {'name': '20060118 Cisco Call Manager Denial of Service', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmdos.shtml'}, {'name': 'cisco-callmanager-port-connection-dos(24180)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24180'}, {'name': '16295', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16295'}, {'name': '22623', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22623'}, {'name': '22622', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22622'}, {'name': '359', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/359'}, {'name': '18494', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18494'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0368?


Explain the CVE ID: What does the identifier CVE-2006-0369 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0369.

MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query that created the VIEW.  NOTE: this issue has been disputed by third parties, saying that the availability of the schema is a normal and sometimes desired aspect of database access


Provide references for further information: Can you share references or external links related to CVE-2006-0369?

{'name': '20060122 Re: MySQL 5.0 information leak?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423180/30/7310/threaded'}, {'name': '20060123 RE: MySQL 5.0 information leak?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423228/100/0/threaded'}, {'name': '20060120 MySQL 5.0 information leak?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422491/100/0/threaded'}, {'name': '20060124 Re: MySQL 5.0 information leak?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423204/100/0/threaded'}, {'name': '20060121 Re: MySQL 5.0 information leak?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422698/100/0/threaded'}, {'name': '20060121 RE: MySQL 5.0 information leak?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422592/100/0/threaded'}, {'name': '20060128 Re: MySQL 5.0 information leak?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423432/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0369?


Explain the CVE ID: What does the identifier CVE-2006-0370 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0370.

Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes.


Provide references for further information: Can you share references or external links related to CVE-2006-0370?

{'name': '22679', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22679'}, {'name': '20060120 [eVuln] RCBlog Directory Traversal & Sensitive Information Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422499/100/0/threaded'}, {'name': '1015523', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015523'}, {'name': '18547', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18547'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/42/summary.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.fluffington.com/index.php?page=rcblog'}, {'name': 'rcblog-data-config-insecure-directories(24249)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24249'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0370?


Explain the CVE ID: What does the identifier CVE-2006-0371 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0371.

Directory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote attackers to read arbitrary .txt files, possibly including one that stores the administrator's account name and password, via a .. (dot dot) in the post parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0371?

{'name': '20060120 [eVuln] RCBlog Directory Traversal & Sensitive Information Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422499/100/0/threaded'}, {'name': '16342', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16342'}, {'name': '1015523', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015523'}, {'name': 'rcblog-index-directory-traversal(24248)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24248'}, {'name': '22680', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22680'}, {'name': '20060218 RCblog exploit [fun]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425392/100/0/threaded'}, {'name': 'rcblog-index-file-include(27042)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/27042'}, {'name': '18547', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18547'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/42/summary.html'}, {'name': '20060611 RCblog 1.03 Directory Traversal [index.php]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/436784/30/4500/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.fluffington.com/index.php?page=rcblog'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0371?


Explain the CVE ID: What does the identifier CVE-2006-0372 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0372.

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the (1) blogphp_username or (2) blogphp_password parameter in a cookie.


Provide references for further information: Can you share references or external links related to CVE-2006-0372?

{'name': '16340', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16340'}, {'name': '20060121 BlogPHP config.php SQL injection login bypassed', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422593/100/0/threaded'}, {'name': '20060120 BlogPHP config.php SQL injection login bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422484/100/0/threaded'}, {'name': '22738', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22738'}, {'name': '365', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/365'}, {'name': '20060120 BlogPHP config.php SQL injection login bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422483/100/0/threaded'}, {'name': 'blogphp-index-bypass-security(24131)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24131'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0372?


Explain the CVE ID: What does the identifier CVE-2006-0373 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0373.

Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-0373?

{'name': '27918', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27918'}, {'name': '16302', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16302'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0373?


Explain the CVE ID: What does the identifier CVE-2006-0374 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0374.

Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which (1) might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB remote debugging ONCRPC (aka wdbrpc) on UDP 17185, (2) reflect network data using echo (TCP 7), or (3) gain access without authentication using rlogin (TCP 513).


Provide references for further information: Can you share references or external links related to CVE-2006-0374?

{'name': 'act-p202s-default-port(24149)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24149'}, {'name': '18514', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18514'}, {'name': '20060116 ACT P202S VoIP wireless phone multiple undocumented ports/services', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html'}, {'name': '16288', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16288'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0374?


Explain the CVE ID: What does the identifier CVE-2006-0375 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0375.

Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol (NTP) server in Taiwan, which could allow remote attackers to provide false time information, block access to time information, or conduct other attacks.


Provide references for further information: Can you share references or external links related to CVE-2006-0375?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0375?


Explain the CVE ID: What does the identifier CVE-2006-0376 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0376.

The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user when (1) it establishes an association with a station in ad hoc (aka peer-to-peer) mode or (2) a station in ad hoc mode establishes an association with it, which allows remote attackers to put unexpected wireless communication into place.


Provide references for further information: Can you share references or external links related to CVE-2006-0376?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.theta44.org/karma/'}, {'name': '1015489', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015489'}, {'name': '349', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/349'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nmrc.org/pub/advise/20060114.txt'}, {'name': 'windows-wireless-adhoc-unauth-access(24157)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24157'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5YP0D2KHHO.html'}, {'name': '20060114 [NMRC Advisory] Microsoft Windows Wireless Exposure on Laptops', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/421868/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0376?


Explain the CVE ID: What does the identifier CVE-2006-0377 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0377.

CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select command, aka "IMAP injection."


Provide references for further information: Can you share references or external links related to CVE-2006-0377?

{'name': 'MDKSA-2006:049', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:049'}, {'name': 'RHSA-2006:0283', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0283.html'}, {'name': '19176', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19176'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squirrelmail.org/security/issue/2006-02-15'}, {'name': 'FEDORA-2006-133', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00004.html'}, {'name': 'SUSE-SR:2006:005', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_05_sr.html'}, {'name': '20210', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20210'}, {'name': 'ADV-2006-0689', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0689'}, {'name': '18985', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18985'}, {'name': 'oval:org.mitre.oval:def:11470', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11470'}, {'name': '19205', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19205'}, {'name': 'squirrelmail-mailbox-imap-injection(24849)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24849'}, {'name': '19960', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19960'}, {'name': '16756', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16756'}, {'name': '19130', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19130'}, {'name': '20060501-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc'}, {'name': 'DSA-988', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-988'}, {'name': '19131', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19131'}, {'name': 'GLSA-200603-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200603-09.xml'}, {'name': '1015662', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015662'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0377?


Explain the CVE ID: What does the identifier CVE-2006-0378 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0378.

Cross-site scripting (XSS) vulnerability in Netrix X-Site Manager allows remote attackers to inject arbitrary web script or HTML via the product_id parameter, as originally demonstrated for a custom mp3players_details.php program.  NOTE: the name of the affected program might be installation-dependent, but it has been identified as "product_details.php" by some sources.


Provide references for further information: Can you share references or external links related to CVE-2006-0378?

{'name': 'ADV-2006-0253', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0253'}, {'name': '18537', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18537'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/22/22634-x-site.txt'}, {'name': '22634', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22634'}, {'name': '16313', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16313'}, {'name': 'xsitemanager-productdetails-xss(24234)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24234'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0378?


Explain the CVE ID: What does the identifier CVE-2006-0379 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0379.

FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory.


Provide references for further information: Can you share references or external links related to CVE-2006-0379?

{'name': 'FreeBSD-SA-06:06', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc'}, {'name': '18599', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18599'}, {'name': '1015541', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015541'}, {'name': '22730', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22730'}, {'name': 'bsd-buffer-initialization-disclosure(24338)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24338'}, {'name': '16373', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16373'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0379?


Explain the CVE ID: What does the identifier CVE-2006-0380 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0380.

A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory.


Provide references for further information: Can you share references or external links related to CVE-2006-0380?

{'name': 'FreeBSD-SA-06:06', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc'}, {'name': '18599', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18599'}, {'name': '1015541', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015541'}, {'name': '22731', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22731'}, {'name': 'bsd-buffer-length-disclosure(24340)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24340'}, {'name': '16373', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16373'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0380?


Explain the CVE ID: What does the identifier CVE-2006-0381 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0381.

A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a packet fragment to be inserted twice.


Provide references for further information: Can you share references or external links related to CVE-2006-0381?

{'name': '16375', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16375'}, {'name': '1015542', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015542'}, {'name': '18609', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18609'}, {'name': 'bsd-pf-fragment-dos(24337)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24337'}, {'name': 'FreeBSD-SA-06:07', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:07.pf.asc'}, {'name': '22732', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22732'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf_norm.c.diff?r1=1.103&r2=1.104'}, {'name': 'NetBSD-SA2006-004', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-004.txt.asc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0381?


Explain the CVE ID: What does the identifier CVE-2006-0382 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0382.

Apple Mac OS X 10.4.5 and allows local users to cause a denial of service (crash) via an undocumented system call.


Provide references for further information: Can you share references or external links related to CVE-2006-0382?

{'name': 'macosx-system-call-dos(24682)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24682'}, {'name': '18907', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18907'}, {'name': 'ADV-2006-0597', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0597'}, {'name': '23190', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23190'}, {'name': '1015634', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015634'}, {'name': '16654', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16654'}, {'name': 'APPLE-SA-2006-02-14', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Feb/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0382?


Explain the CVE ID: What does the identifier CVE-2006-0383 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0383.

IPSec when used with VPN networks in Mac OS X 10.4 through 10.4.5 allows remote attackers to cause a denial of service (application crash) via unspecified vectors involving the "incorrect handling of error conditions".


Provide references for further information: Can you share references or external links related to CVE-2006-0383?

{'name': 'macosx-vpn-dos(25025)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25025'}, {'name': '19064', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19064'}, {'name': '16907', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16907'}, {'name': 'ADV-2006-0791', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0791'}, {'name': 'APPLE-SA-2006-03-01', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html'}, {'name': 'TA06-062A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-062A.html'}, {'name': '23643', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23643'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303382'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0383?


Explain the CVE ID: What does the identifier CVE-2006-0384 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0384.

automount in Mac OS X 10.4.5 and earlier allows remote file servers to cause a denial of service (unresponsiveness) or execute arbitrary code via unspecified vectors that cause automount to "mount file systems with reserved names".


Provide references for further information: Can you share references or external links related to CVE-2006-0384?

{'name': '23640', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23640'}, {'name': '1015709', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015709'}, {'name': '19064', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19064'}, {'name': '16907', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16907'}, {'name': 'ADV-2006-0791', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0791'}, {'name': 'APPLE-SA-2006-03-01', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html'}, {'name': 'TA06-062A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-062A.html'}, {'name': 'macosx-automount-execute-code(25021)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25021'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303382'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0384?


Explain the CVE ID: What does the identifier CVE-2006-0386 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0386.

FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, which allows local users to access protected files when FileVault is enabled.