Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0512.

PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by (1) migrate_all_online.sh, (2) migrate_all_offline.sh, (3) migrate_all_netinfo_online.sh, (4) migrate_all_netinfo_offline.sh, (5) migrate_all_nis_online.sh, (6) migrate_all_nis_offline.sh, (7) migrate_all_nisplus_online.sh, and (8) migrate_all_nisplus_offline.sh.


Provide references for further information: Can you share references or external links related to CVE-2006-0512?

{'name': '22243', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22243'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338920'}, {'name': 'DSA-1187', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2006/dsa-1187'}, {'name': 'ADV-2005-2427', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/2427'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0512?


Explain the CVE ID: What does the identifier CVE-2006-0513 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0513.

Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager (TAM) 5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0513?

{'name': '20060203 VSR Advisory: IBM Tivoli Access Manager - Web Server Plug-in File Retrieval Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041930.html'}, {'name': 'IY79724', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg24011562'}, {'name': 'ADV-2006-0442', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0442'}, {'name': '1015582', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015582'}, {'name': 'tivoli-pkmslogout-directory-traversal(24485)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24485'}, {'name': '20060203 VSR Advisory: IBM Tivoli Access Manager - Web Server Plug-in File Retrieval Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423946/100/0/threaded'}, {'name': '412', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/412'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.vsecurity.com/bulletins/advisories/2006/tam-file-retrieval.txt'}, {'name': '18725', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18725'}, {'name': '16494', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16494'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0513?


Explain the CVE ID: What does the identifier CVE-2006-0515 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0515.

Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734.


Provide references for further information: Can you share references or external links related to CVE-2006-0515?

{'name': '20060508 VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045899.html'}, {'name': '25453', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/25453'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.vsecurity.com/bulletins/advisories/2006/cisco-websense-bypass.txt'}, {'name': '20044', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20044'}, {'name': '17883', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17883'}, {'name': 'ADV-2006-1738', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1738'}, {'name': '20060508 PIX/ASA/FWSM Websense/N2H2 Content Filter Bypass', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/sw/netmgtsw/ps2032/tsd_products_security_response09186a00806824ec.html'}, {'name': '1016040', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016040'}, {'name': '1016039', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016039'}, {'name': '20060508 VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/433270/100/0/threaded'}, {'name': 'cisco-websense-content-filtering-bypass(26308)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26308'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0515?


Explain the CVE ID: What does the identifier CVE-2006-0516 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0516.

Unspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in 64-bit mode, allows local users to cause a denial of service (system panic) via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0516?

{'name': '102149', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102149-1'}, {'name': '18671', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18671'}, {'name': 'ADV-2006-0394', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0394'}, {'name': '16460', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16460'}, {'name': '1015557', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015557'}, {'name': 'solaris-x64-kernel-dos(24395)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24395'}, {'name': 'oval:org.mitre.oval:def:1163', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1163'}, {'name': 'oval:org.mitre.oval:def:219', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A219'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0516?


Explain the CVE ID: What does the identifier CVE-2006-0517 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0517.

Multiple SQL injection vulnerabilities in formulaires/inc-formulaire_forum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id_forum, (2) id_article, or (3) id_breve parameters to forum.php3; (4) unspecified vectors related to "session handling"; and (5) when posting "petitions".


Provide references for further information: Can you share references or external links related to CVE-2006-0517?

{'name': '20060131 ZRCSA-200601: SPIP - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0990.html'}, {'name': '16458', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16458'}, {'name': '22845', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22845'}, {'name': '22848', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22848'}, {'name': 'spip-forum-sql-injection(24397)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24397'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/en/advisories/read/id=8650/'}, {'name': '22844', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22844'}, {'name': '1015556', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015556'}, {'name': '24397', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/24397'}, {'name': '18676', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18676'}, {'name': '20060131 ZRCSA-200601: SPIP - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423655/100/0/threaded'}, {'name': 'ADV-2006-0398', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0398'}, {'name': '395', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/395'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0517?


Explain the CVE ID: What does the identifier CVE-2006-0518 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0518.

Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0518?

{'name': 'spip-index-xss(24401)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24401'}, {'name': '22849', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22849'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/en/advisories/read/id=8650/'}, {'name': '18676', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18676'}, {'name': 'ADV-2006-0398', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0398'}, {'name': '16461', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16461'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0518?


Explain the CVE ID: What does the identifier CVE-2006-0519 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0519.

SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via a direct request to inc-messforum.php3, which reveals the path in an error message.


Provide references for further information: Can you share references or external links related to CVE-2006-0519?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/en/advisories/read/id=8650/'}, {'name': '18676', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18676'}, {'name': 'ADV-2006-0398', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0398'}, {'name': 'spip-incmessforum-path-disclosure(24399)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24399'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0519?


Explain the CVE ID: What does the identifier CVE-2006-0520 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0520.

SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board (IPB) allows remote attackers to execute arbitrary SQL commands via the site parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-0520?

{'name': 'ADV-2006-0396', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0396'}, {'name': '16447', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16447'}, {'name': '22851', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22851'}, {'name': 'portal-index-sql-injection(24404)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24404'}, {'name': '18664', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18664'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0520?


Explain the CVE ID: What does the identifier CVE-2006-0521 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0521.

Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via certain manipulations of the query parameter, as demonstrated using an IMG SRC tag.


Provide references for further information: Can you share references or external links related to CVE-2006-0521?

{'name': 'browsercrm-results-xss(24390)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24390'}, {'name': 'ADV-2006-0391', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0391'}, {'name': '20060131 BrowserCRM vulnerable for XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423546/100/0/threaded'}, {'name': '18658', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18658'}, {'name': '16435', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16435'}, {'name': '22841', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22841'}, {'name': '393', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/393'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0521?


Explain the CVE ID: What does the identifier CVE-2006-0522 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0522.

SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL.


Provide references for further information: Can you share references or external links related to CVE-2006-0522?

{'name': '1015561', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015561'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2006.02.01.html'}, {'name': '16452', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16452'}, {'name': '18689', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18689'}, {'name': 'symantec-sms-sql-injection(24413)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24413'}, {'name': '22883', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22883'}, {'name': 'ADV-2006-0402', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0402'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0522?


Explain the CVE ID: What does the identifier CVE-2006-0523 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0523.

SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the templatelist variable.


Provide references for further information: Can you share references or external links related to CVE-2006-0523?

{'name': 'mybb-global-sql-injection(24416)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24416'}, {'name': '22903', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22903'}, {'name': 'ADV-2006-0400', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0400'}, {'name': '18678', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18678'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://community.mybboard.net/showthread.php?tid=6418'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0523?


Explain the CVE ID: What does the identifier CVE-2006-0524 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0524.

Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web script or HTML via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0524?

{'name': 'ashnews-ashnews-xss(24365)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24365'}, {'name': '9331', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9331'}, {'name': '22934', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22934'}, {'name': '20060131 Re: ashnews Cross-Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0979.html'}, {'name': '20060130 Re: ashnews Cross-Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0969.html'}, {'name': '20060130 ashnews Cross-Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0955.html'}, {'name': '16426', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16426'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0524?


Explain the CVE ID: What does the identifier CVE-2006-0525 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0525.

Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.


Provide references for further information: Can you share references or external links related to CVE-2006-0525?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/332644.html'}, {'name': '16451', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16451'}, {'name': '1015577', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015577'}, {'name': '1015579', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015579'}, {'name': '20060131 Windows Access Control Demystified', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423587/100/0/threaded'}, {'name': 'VU#953860', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/953860'}, {'name': '18698', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18698'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf'}, {'name': '1015578', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015578'}, {'name': 'adobe-insecure-default-permissions(24464)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24464'}, {'name': 'ADV-2006-0431', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0431'}, {'name': '22908', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22908'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0525?


Explain the CVE ID: What does the identifier CVE-2006-0526 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0526.

The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a DLL file name, which might allow local users to gain privileges via a Trojan horse program.


Provide references for further information: Can you share references or external links related to CVE-2006-0526?

{'name': '16453', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16453'}, {'name': '20060131 Windows Access Control Demystified', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423587/100/0/threaded'}, {'name': 'VU#953860', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/953860'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf'}, {'name': 'aol-insecure-default-permissions(24498)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24498'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0526?


Explain the CVE ID: What does the identifier CVE-2006-0527 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0527.

BIND 4 (BIND4) and BIND 8 (BIND8), if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack.


Provide references for further information: Can you share references or external links related to CVE-2006-0527?

{'tags': ['x_refsource_MISC'], 'url': 'http://computerworld.com/networkingtopics/networking/story/0%2C10801%2C103744%2C00.html'}, {'name': '22888', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22888'}, {'name': 'HPSBTU02095', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00595837'}, {'name': 'ADV-2006-0399', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0399'}, {'name': '1015606', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015606'}, {'name': 'SSRT051045', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/425083/100/0/threaded'}, {'name': '18690', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18690'}, {'name': '438', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/438'}, {'name': 'HPSBUX02097', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/425083/100/0/threaded'}, {'name': '748', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/748'}, {'name': '1015551', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015551'}, {'name': '16455', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16455'}, {'name': '20060216 Recent HP advisories outline BIND problems', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://attrition.org/pipermail/vim/2006-February/000551.html'}, {'name': 'SSRT051007', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00595837'}, {'name': 'tru64-dns-bind-unauth-access(24414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24414'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0527?


Explain the CVE ID: What does the identifier CVE-2006-0528 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0528.

The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.


Provide references for further information: Can you share references or external links related to CVE-2006-0528?

{'name': '16408', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16408'}, {'name': 'USN-265-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/265-1/'}, {'name': 'SUSE-SR:2006:007', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_07_sr.html'}, {'name': '610', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/610'}, {'name': 'MDKSA-2006:057', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:057'}, {'name': '20060128 gnome evolution mail client inline text file DoS issue', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0925.html'}, {'name': '19504', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19504'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0528?


Explain the CVE ID: What does the identifier CVE-2006-0529 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0529.

Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple CA products, allows remote attackers to cause a denial of service via a crafted message to TCP port 4105.


Provide references for further information: Can you share references or external links related to CVE-2006-0529?

{'name': '16475', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16475'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://supportconnectw.ca.com/public/ca_common_docs/camessagsecurity_notice.asp'}, {'name': '1015571', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015571'}, {'name': 'ADV-2006-0414', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0414'}, {'name': '18681', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18681'}, {'name': 'ca-cam-port4105-dos(24448)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24448'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33581'}, {'name': '21146', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/21146'}, {'name': '20060202 CAID 33581 - CA Message Queuing Denial of Service Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423785/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0529?


Explain the CVE ID: What does the identifier CVE-2006-0530 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0530.

Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple CA products, allows remote attackers to cause a denial of service via spoofed CAM control messages.


Provide references for further information: Can you share references or external links related to CVE-2006-0530?

{'name': '16475', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16475'}, {'name': 'ca-cam-spoofed-message-dos(24449)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24449'}, {'name': '404', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/404'}, {'name': '1015571', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015571'}, {'name': 'ADV-2006-0414', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0414'}, {'name': '18681', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18681'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33581'}, {'name': '20060202 CAID 33581 - CA Message Queuing Denial of Service Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423785/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0530?


Explain the CVE ID: What does the identifier CVE-2006-0531 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0531.

Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool.


Provide references for further information: Can you share references or external links related to CVE-2006-0531?

{'name': 'oval:org.mitre.oval:def:360', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A360'}, {'name': 'oval:org.mitre.oval:def:755', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A755'}, {'name': '16474', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16474'}, {'name': '102140', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102140-1'}, {'name': 'ADV-2006-0430', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0430'}, {'name': '1015567', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015567'}, {'name': '18699', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18699'}, {'name': 'sun-jsam-admin-access(24423)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24423'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0531?


Explain the CVE ID: What does the identifier CVE-2006-0532 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0532.

Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute.


Provide references for further information: Can you share references or external links related to CVE-2006-0532?

{'name': 'ADV-2006-0434', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0434'}, {'name': '20060201 SoftMaker Shop is vulnerable to XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423768'}, {'name': 'softmakershop-image-xss(24451)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24451'}, {'name': '22911', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22911'}, {'name': '18683', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18683'}, {'name': '400', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/400'}, {'name': '16471', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16471'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0532?


Explain the CVE ID: What does the identifier CVE-2006-0533 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0533.

Cross-site scripting (XSS) vulnerability in webmailaging.cgi in cPanel allows remote attackers to inject arbitrary web script or HTML via the numdays parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0533?

{'name': 'ADV-2006-0433', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0433'}, {'name': 'cpanel-scripts-xss(24468)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24468'}, {'name': '20060203 Re: cPanel Multiple Cross Site Scripting', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=113894933522271&w=2'}, {'name': '22906', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22906'}, {'name': '18691', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18691'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0533?


Explain the CVE ID: What does the identifier CVE-2006-0534 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0534.

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attackers to inject arbitrary web script or HTML via the (1) ortak or (2) kat parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0534?

{'name': '401', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/401'}, {'name': '20060202 CyberShop Ultimate E-commerce Script Cross Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423787/100/0/threaded'}, {'name': '18730', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18730'}, {'name': 'cybershop-xss(24454)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24454'}, {'name': '16473', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16473'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0534?


Explain the CVE ID: What does the identifier CVE-2006-0535 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0535.

Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.  NOTE: this candidate does not contain any actionable or distinguishing information.  Perhaps it should not be included in CVE.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-0535?

{'name': '16478', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16478'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0535?


Explain the CVE ID: What does the identifier CVE-2006-0536 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0536.

Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.  NOTE: some sources say that the affected parameter is "date," but the demonstration URL shows that it is "sort".


Provide references for further information: Can you share references or external links related to CVE-2006-0536?

{'name': '20060203 Neomail Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423901/100/0/threaded'}, {'name': '1015581', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015581'}, {'name': 'neomail-neomail-script-xss(24470)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24470'}, {'name': 'ADV-2006-0449', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0449'}, {'name': '22978', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22978'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0536?


Explain the CVE ID: What does the identifier CVE-2006-0537 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0537.

Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to execute arbitrary code via a long RCPT TO argument.


Provide references for further information: Can you share references or external links related to CVE-2006-0537?

{'name': '1466', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1466'}, {'name': '408', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/408'}, {'name': '18687', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18687'}, {'tags': ['x_refsource_MISC'], 'url': 'http://downloads.securityfocus.com/vulnerabilities/exploits/exchangepop3.pl'}, {'name': 'ADV-2006-0437', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0437'}, {'name': '20060203 Exchangepop3 rcpt buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-02/0040.html'}, {'name': '16485', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16485'}, {'name': '22907', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22907'}, {'name': 'exchangepop3-rcptto-bo(24477)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24477'}, {'name': '1015580', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015580'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0537?


Explain the CVE ID: What does the identifier CVE-2006-0538 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0538.

CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote attackers to cause a denial of service (possibly CPU consumption) via a SYN flood with malformed TCP packets from multiple connections.


Provide references for further information: Can you share references or external links related to CVE-2006-0538?

{'name': '407', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/407'}, {'name': 'ironmail-tcpsyn-flood-dos(24445)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24445'}, {'name': '16465', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16465'}, {'name': '1015555', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015555'}, {'name': '20060203 IronMail-5.0.1-Denial of-Service-Protection-Lets-Remote-Users-Deny-Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423898/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0538?


Explain the CVE ID: What does the identifier CVE-2006-0539 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0539.

The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument, which causes Linux glibc to report heap memory corruption, possibly because a strcpy in the strdup2 function can "overwrite some data."


Provide references for further information: Can you share references or external links related to CVE-2006-0539?

{'name': '20060201 Fcrontab - memory corruption on heap.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423697/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://fcron.free.fr/news.php#a20060206a.xml'}, {'name': 'fcron-syslog-bo(24444)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24444'}, {'name': '20060201 Fcrontab - memory corruption on heap.', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0999.html'}, {'name': 'ADV-2006-0435', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0435'}, {'name': '2006-0036', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2006/0036'}, {'name': '18719', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18719'}, {'name': '16467', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16467'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.trustix.org/show_bug.cgi?id=1754'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://fcron.free.fr/doc/en/changes.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0539?


Explain the CVE ID: What does the identifier CVE-2006-0540 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0540.

Multiple SQL injection vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to execute arbitrary SQL commands via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0540?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.evuln.com/vulns/54/summary.html'}, {'name': 'vanillaguestbook-messages-sql-injection(24412)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24412'}, {'name': '20060201 [eVuln] Vanilla Guestbook Multiple XSS & SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423957/100/0/threaded'}, {'name': '16464', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16464'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0540?


Explain the CVE ID: What does the identifier CVE-2006-0541 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0541.

Multiple cross-site scripting (XSS) vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "posting new messages."


Provide references for further information: Can you share references or external links related to CVE-2006-0541?

{'name': 'vanillaguestbook-name-xss(24411)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24411'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.evuln.com/vulns/54/summary.html'}, {'name': '20060201 [eVuln] Vanilla Guestbook Multiple XSS & SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423957/100/0/threaded'}, {'name': '16464', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16464'}, {'name': '20060227 Re: [eVuln] Vanilla Guestbook Multiple XSS & SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426200/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0541?


Explain the CVE ID: What does the identifier CVE-2006-0542 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0542.

Multiple SQL injection vulnerabilities in config.php in NukedWeb GuestBookHost 2005.04.25 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameters.


Provide references for further information: Can you share references or external links related to CVE-2006-0542?

{'name': '16545', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16545'}, {'name': 'ADV-2006-0465', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0465'}, {'name': '20060209 [eVuln] GuestBookHost Authentication Bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424714/100/0/threaded'}, {'name': '18761', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18761'}, {'name': 'guestbookhost-login-sql-injection(24406)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24406'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.evuln.com/vulns/56/summary.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0542?


Explain the CVE ID: What does the identifier CVE-2006-0543 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0543.

Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash) via an AIM message containing the Mac encoded Rich Text Format (RTF) escape sequences (1) \'d1, (2) \'d2, (3) \'d3, (4) \'d4, and (5) \'d5.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-0543?

{'name': '22877', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22877'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0543?


Explain the CVE ID: What does the identifier CVE-2006-0544 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0544.

urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" (dash of hyphen) characters.


Provide references for further information: Can you share references or external links related to CVE-2006-0544?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/advisory/sp-x23-advisory.txt'}, {'name': '16463', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0544?


Explain the CVE ID: What does the identifier CVE-2006-0545 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0545.

SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0545?

{'name': '20060325 UBBThreads<=5.5.1+6.0.2+6.0 br5+6.0.1 SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-03/0494.html'}, {'name': '22808', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22808'}, {'name': '16520', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16520'}, {'name': '1015549', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015549'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cyberlords.net/advisories/cl_ubb.txt'}, {'name': 'ubbthreads-showflat-sql-injection(24381)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24381'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0545?


Explain the CVE ID: What does the identifier CVE-2006-0546 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0546.

Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via "evilcode" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in the key parameter.  NOTE: it is not clear whether this vulnerability is associated with an online service or application service provider.  If so, then it should not be included in CVE.


Provide references for further information: Can you share references or external links related to CVE-2006-0546?

{'name': '20060128 Ege Internet Web Desing Remote Command Exucetion', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423365/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0546?


Explain the CVE ID: What does the identifier CVE-2006-0547 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0547.

Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit logging, including statements to create new privileged database accounts, via a modified AUTH_ALTER_SESSION attribute in the authentication phase of the Transparent Network Substrate (TNS) protocol.  NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle.  It is possible that this is the same issue as Oracle Vuln# DB18 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0265.


Provide references for further information: Can you share references or external links related to CVE-2006-0547?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html'}, {'name': 'TA06-018A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-018A.html'}, {'name': '20060117 Oracle DBMS - Access Control Bypass in Login', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041464.html'}, {'name': 'VU#871756', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/871756'}, {'name': 'oracle-login-command-execute(24184)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24184'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.imperva.com/application_defense_center/papers/oracle-dbms-01172006.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0547?


Explain the CVE ID: What does the identifier CVE-2006-0548 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0548.

SQL injection vulnerability in the Oracle Text component of Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle.  It is possible that this is the same issue as Oracle Vuln# DB15 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0260.


Provide references for further information: Can you share references or external links related to CVE-2006-0548?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf'}, {'name': 'oracle-january2006-update(24321)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24321'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html'}, {'name': 'VU#150332', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/150332'}, {'name': 'TA06-018A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-018A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0548?


Explain the CVE ID: What does the identifier CVE-2006-0549 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0549.

SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle.  It is possible that this is the same issue as Oracle Vuln# DB05 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0260.  However, there are some inconsistencies that make this unclear, and there is also a possibility that this is related to DB06, which is subsumed by CVE-2006-0259.


Provide references for further information: Can you share references or external links related to CVE-2006-0549?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_metadata_util.html'}, {'name': 'VU#629316', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/629316'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf'}, {'name': 'oracle-january2006-update(24321)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24321'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html'}, {'name': 'TA06-018A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-018A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0549?


Explain the CVE ID: What does the identifier CVE-2006-0550 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0550.

Buffer overflow in an unspecified Oracle Client utility might allow remote attackers to execute arbitrary code or cause a denial of service.  NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle.  It is possible that this is the same issue as Oracle Vuln# DBC02 from the January 2006 CPU, in which case this would be a duplicate of CVE-2006-0283.  However, there are enough inconsistencies that the mapping can not be made authoritatively.


Provide references for further information: Can you share references or external links related to CVE-2006-0550?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf'}, {'name': 'oracle-january2006-update(24321)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24321'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html'}, {'name': 'VU#999268', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/999268'}, {'name': 'TA06-018A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-018A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0550?


Explain the CVE ID: What does the identifier CVE-2006-0551 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0551.

SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remote attackers to execute arbitrary SQL commands via unknown vectors.  NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle.  It is possible that this is the same issue as Oracle Vuln# DB06 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0259 or, if it is DB05, subsumed by CVE-2006-0260.


Provide references for further information: Can you share references or external links related to CVE-2006-0551?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf'}, {'name': 'oracle-january2006-update(24321)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24321'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html'}, {'name': 'TA06-018A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-018A.html'}, {'name': 'VU#983340', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/983340'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0551?


Explain the CVE ID: What does the identifier CVE-2006-0552 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0552.

Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11.


Provide references for further information: Can you share references or external links related to CVE-2006-0552?

{'name': '22549', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22549'}, {'name': 'oracle-january2006-update(24321)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24321'}, {'name': '18493', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18493'}, {'name': 'ADV-2006-0323', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0323'}, {'name': '16287', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16287'}, {'name': 'VU#545804', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/545804'}, {'name': '1015499', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015499'}, {'name': 'ADV-2006-0243', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0243'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html'}, {'name': '18608', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18608'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0552?


Explain the CVE ID: What does the identifier CVE-2006-0553 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0553.

PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the backend protocol" using a crafted SET ROLE to other database users, a different vulnerability than CVE-2006-0678.


Provide references for further information: Can you share references or external links related to CVE-2006-0553?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3'}, {'name': 'ADV-2006-0605', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0605'}, {'name': '18890', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18890'}, {'name': 'VU#567452', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/567452'}, {'name': '16649', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16649'}, {'name': '[pgsql-announce] 20060214 Minor Releases 7.3 thru 8.1 Available to Fix Security Issue', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-announce/2006-02/msg00008.php'}, {'name': '1015636', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015636'}, {'name': 'postgresql-setrole-privilege-elevation(24718)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24718'}, {'name': 'OpenPKG-SA-2006.004', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://www.openpkg.org/security/OpenPKG-SA-2006.004-postgresql.html'}, {'name': '20060215 PostgreSQL security releases 8.1.3, 8.0.7, 7.4.12, 7.3.14', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425037/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0553?


Explain the CVE ID: What does the identifier CVE-2006-0554 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0554.

Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data.


Provide references for further information: Can you share references or external links related to CVE-2006-0554?

{'name': 'kernel-ftruncate-information-disclosure(24999)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24999'}, {'name': 'ADV-2006-2554', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/2554'}, {'name': '19220', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19220'}, {'name': 'MDKSA-2006:150', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:150'}, {'name': 'ADV-2006-0804', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0804'}, {'name': 'SUSE-SA:2006:028', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006-05-31.html'}, {'name': 'DSA-1103', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1103'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.5'}, {'name': '20398', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20398'}, {'name': 'MDKSA-2006:059', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:059'}, {'name': '19083', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19083'}, {'name': 'USN-263-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/263-1/'}, {'name': '16921', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16921'}, {'name': '20914', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20914'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0554?


Explain the CVE ID: What does the identifier CVE-2006-0555 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0555.

The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client panic) via unknown attack vectors related to the use of O_DIRECT (direct I/O).


Provide references for further information: Can you share references or external links related to CVE-2006-0555?

{'name': 'FEDORA-2006-131', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm'}, {'name': 'RHSA-2006:0493', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0493.html'}, {'name': 'ADV-2006-2554', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/2554'}, {'name': '19220', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19220'}, {'name': '21745', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21745'}, {'name': 'kernel-odirect-dos(25000)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25000'}, {'name': 'ADV-2006-0804', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0804'}, {'name': 'SUSE-SA:2006:028', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006-05-31.html'}, {'name': 'DSA-1103', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1103'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.5'}, {'name': '20237', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20237'}, {'name': '20398', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20398'}, {'name': 'oval:org.mitre.oval:def:9932', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9932'}, {'name': 'MDKSA-2006:059', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:059'}, {'name': '19083', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19083'}, {'name': '16922', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16922'}, {'name': '19108', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19108'}, {'name': 'USN-263-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/263-1/'}, {'name': '20914', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20914'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0555?


Explain the CVE ID: What does the identifier CVE-2006-0556 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0556.


Provide references for further information: Can you share references or external links related to CVE-2006-0556?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0556?


Explain the CVE ID: What does the identifier CVE-2006-0557 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0557.

sys_mbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod variable before making certain computations for the get_nodes function, which has unknown impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0557?

{'name': '1015752', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015752'}, {'name': 'ADV-2006-2554', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/2554'}, {'name': 'USN-281-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/281-1/'}, {'name': '23895', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23895'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lkml.org/lkml/2006/2/27/355'}, {'name': '16924', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16924'}, {'name': 'linux-get-nodes-dos(25204)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25204'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=636f13c174dd7c84a437d3c3e8fa66f03f7fda63'}, {'name': 'SUSE-SA:2006:028', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006-05-31.html'}, {'name': '19955', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19955'}, {'name': 'DSA-1103', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1103'}, {'name': 'RHBA-2007-0304', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHBA-2007-0304.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=184510'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=636f13c174dd7c84a437d3c3e8fa66f03f7fda63'}, {'name': '20398', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20398'}, {'name': 'MDKSA-2006:059', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:059'}, {'name': 'oval:org.mitre.oval:def:9674', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9674'}, {'name': '20914', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20914'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0557?


Explain the CVE ID: What does the identifier CVE-2006-0558 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0558.

perfmon (perfmon.c) in Linux kernel on IA64 architectures allows local users to cause a denial of service (crash) by interrupting a task while another process is accessing the mm_struct, which triggers a BUG_ON action in the put_page_testzero function.


Provide references for further information: Can you share references or external links related to CVE-2006-0558?

{'name': '19737', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19737'}, {'name': 'ADV-2006-2554', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/2554'}, {'name': 'ADV-2006-1444', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1444'}, {'name': 'oval:org.mitre.oval:def:10177', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10177'}, {'name': 'DSA-1103', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1103'}, {'name': '[linux-ia64] [PATCH 1/1] ia64: perfmon.c trips BUG_ON in put_page_testzero', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=linux-ia64&m=113882384921688'}, {'name': '26709', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26709'}, {'name': 'RHSA-2007:0774', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0774.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=185082'}, {'name': '17482', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17482'}, {'name': '20914', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20914'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0558?


Explain the CVE ID: What does the identifier CVE-2006-0559 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0559.

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed.


Provide references for further information: Can you share references or external links related to CVE-2006-0559?

{'name': '16742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16742'}, {'name': 'webshield-smtp-format-string(25621)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25621'}, {'name': '24366', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24366'}, {'name': '20060404 SYMSA-2006-002: McAfee WebShield SMTP Format String Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429812/100/0/threaded'}, {'name': '671', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/671'}, {'name': '1015861', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015861'}, {'name': '19491', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19491'}, {'name': 'ADV-2006-1219', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1219'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0559?


Explain the CVE ID: What does the identifier CVE-2006-0560 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0560.


Provide references for further information: Can you share references or external links related to CVE-2006-0560?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0560?


Explain the CVE ID: What does the identifier CVE-2006-0561 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0561.

Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functions to obtain the plaintext version of the master key.


Provide references for further information: Can you share references or external links related to CVE-2006-0561?

{'name': '16743', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16743'}, {'name': '20060508 Response to Symantec SYMSA-2006-003 Cisco Secure ACS for Windows - Administrator Password Disclosure', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sr-20060508-acs.shtml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.symantec.com/enterprise/research/SYMSA-2006-003.txt'}, {'name': '1016042', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016042'}, {'name': '25892', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/25892'}, {'name': 'ADV-2006-1741', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1741'}, {'name': 'cisco-acs-admin-password-disclosure(26307)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26307'}, {'name': '20060508 SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/433286/100/0/threaded'}, {'name': '20060508 Re: SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/433301/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0561?


Explain the CVE ID: What does the identifier CVE-2006-0562 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0562.

Cross-site scripting (XSS) vulnerability in problem.php in PluggedOut Blog 1.9.9c allows remote attackers to inject arbitrary web script or HTML via the data parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0562?

{'tags': ['x_refsource_MISC'], 'url': 'http://hamid.ir/security/pluggedoutblog.txt'}, {'name': '20060206 VERIFY Pluggedout Blog 1.9.9c problem.php XSS', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://attrition.org/pipermail/vim/2006-February/000530.html'}, {'name': 'ADV-2006-0440', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0440'}, {'name': '18726', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18726'}, {'name': 'pluggedoutblog-problem-xss(24482)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24482'}, {'name': '1015586', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015586'}, {'name': '20060204 PluggedOut Blog SQL injection and XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423948/100/0/threaded'}, {'name': '22927', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22927'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0562?


Explain the CVE ID: What does the identifier CVE-2006-0563 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0563.

SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid parameter in a comment_add action.


Provide references for further information: Can you share references or external links related to CVE-2006-0563?

{'name': '415', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/415'}, {'name': '22926', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22926'}, {'name': '20060206 VERIFY Pluggedout Blog 1.9.9c exec.php SQL injection', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://attrition.org/pipermail/vim/2006-February/000531.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hamid.ir/security/pluggedoutblog.txt'}, {'name': 'pluggedoutblog-exec-sql-injection(24480)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24480'}, {'name': 'ADV-2006-0440', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0440'}, {'name': '18726', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18726'}, {'name': '1015586', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015586'}, {'name': '20060204 PluggedOut Blog SQL injection and XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423948/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0563?


Explain the CVE ID: What does the identifier CVE-2006-0564 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0564.

Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field.


Provide references for further information: Can you share references or external links related to CVE-2006-0564?

{'name': '18740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18740'}, {'name': '22941', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22941'}, {'name': '1015585', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015585'}, {'name': 'mshtmlhelp-workshop-hhp-bo(24481)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24481'}, {'tags': ['x_refsource_MISC'], 'url': 'http://users.pandora.be/bratax/advisories/b008.html'}, {'name': 'VU#124460', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/124460'}, {'name': 'ADV-2006-0446', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0446'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0564?


Explain the CVE ID: What does the identifier CVE-2006-0565 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0565.

PHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the $GLOBALS[path] parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0565?

{'name': '410', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/410'}, {'name': '22921', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22921'}, {'name': 'loudblog-backendsettings-file-include(24479)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24479'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/loudblog_04_incl_xpl.html'}, {'name': '556', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/556'}, {'name': '18722', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18722'}, {'name': '1015583', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015583'}, {'name': '16495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16495'}, {'name': 'ADV-2006-0441', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0441'}, {'name': '20060204 LoudBlog <= 0.4 arbitrary remote inclusion', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423947/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0565?


Explain the CVE ID: What does the identifier CVE-2006-0566 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0566.

The LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote attackers to cause a denial of service (application crash) via LDAP messages that contain Distinguished Names (DN) fields with a large number of elements.


Provide references for further information: Can you share references or external links related to CVE-2006-0566?

{'name': '18701', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18701'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gleg.net/advisory_cg2.shtml'}, {'name': 'communigate-ldap-bo(24409)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24409'}, {'name': 'ADV-2006-0444', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0444'}, {'name': '20060204 ProtoVer LDAP vs CommuniGate Pro 5.0.7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423968/100/0/threaded'}, {'name': '1015587', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015587'}, {'name': '22932', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22932'}, {'name': '416', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/416'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.stalker.com/CommuniGatePro/History.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0566?


Explain the CVE ID: What does the identifier CVE-2006-0567 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0567.

Directory traversal vulnerability in Files Xaraya module before 0.5.1, when the Archive Directory field on the Modify Config page is blank, allows remote attackers to access files outside of the web root via ".." (dot dot) sequences.


Provide references for further information: Can you share references or external links related to CVE-2006-0567?

{'name': 'files-archive-directory-directory-traversal(24393)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24393'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xaraya.curtisfarnham.com/articles/Files_0.5.1_-_Security_Fix_and_other_things'}, {'name': 'ADV-2006-0371', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0371'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0567?


Explain the CVE ID: What does the identifier CVE-2006-0568 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0568.

Cross-site scripting (XSS) vulnerability in throw.main in Outblaze allows remote attackers to inject arbitrary web script or HTML via the file parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0568?

{'name': 'ADV-2006-0439', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0439'}, {'name': '22909', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22909'}, {'name': '411', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/411'}, {'name': '20060203 Outblaze Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423915/100/0/threaded'}, {'name': 'outblaze-email-thrownmain-xss(24476)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24476'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.morx.org/outblazeXSS.txt'}, {'name': '20060202 Outblaze Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0024.html'}, {'name': '18710', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18710'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0568?


Explain the CVE ID: What does the identifier CVE-2006-0569 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0569.

Cross-site scripting (XSS) vulnerability in user_class.php in Papoo 2.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username field during the registration of a new account.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-0569?

{'name': '22913', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22913'}, {'name': 'ADV-2006-0438', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0438'}, {'name': '18721', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18721'}, {'name': 'papoo-username-xss(24500)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24500'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0569?


Explain the CVE ID: What does the identifier CVE-2006-0570 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0570.

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the username parameter in check.php and (2) unknown attack vectors in the administrative interface.


Provide references for further information: Can you share references or external links related to CVE-2006-0570?

{'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/61/summary.html'}, {'name': '18791', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18791'}, {'name': '16587', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16587'}, {'name': '427', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/427'}, {'name': '20060212 [eVuln] phpstatus Authentication Bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424842/100/0/threaded'}, {'name': 'ADV-2006-0450', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0450'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0570?


Explain the CVE ID: What does the identifier CVE-2006-0571 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0571.

Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface.


Provide references for further information: Can you share references or external links related to CVE-2006-0571?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0571?


Explain the CVE ID: What does the identifier CVE-2006-0572 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0572.

phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication.


Provide references for further information: Can you share references or external links related to CVE-2006-0572?

{'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/61/summary.html'}, {'name': '18791', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18791'}, {'name': '16587', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16587'}, {'name': '427', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/427'}, {'name': '20060212 [eVuln] phpstatus Authentication Bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424842/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0572?


Explain the CVE ID: What does the identifier CVE-2006-0573 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0573.

Multiple cross-site scripting (XSS) vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to (a) editquota.html or (b) dodelpop.html; (2) showtree parameter to (c) diskusage.html; or the (3) mon, (4) year, (5) target, or (6) domain parameter to (d) stats/detailbw.html.


Provide references for further information: Can you share references or external links related to CVE-2006-0573?

{'name': 'ADV-2006-0433', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0433'}, {'name': 'cpanel-scripts-xss(24468)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24468'}, {'name': '20060203 cPanel Multiple Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=113898556313924&w=2'}, {'name': '22938', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22938'}, {'name': '22939', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22939'}, {'name': '22937', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22937'}, {'name': '20060202 cPanel Multiple Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0025.html'}, {'name': '22936', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22936'}, {'name': '18695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18695'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0573?


Explain the CVE ID: What does the identifier CVE-2006-0574 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0574.

Cross-site scripting (XSS) vulnerability in mime/handle.html in cPanel 10 allows remote attackers to inject arbitrary web script or HTML via the (1) file extension or (2) mime-type.