# CVEs published 2006-12-06

17 CVEs were published on December 6, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6112](https://cve.now/CVE-2006-6112.md): LifeType 1.0.x and 1.1.x have insufficient access control for all of the PHP scripts under (1) class/ and (2) plugins/, which allows… (no CVSS)
- [CVE-2006-6305](https://cve.now/CVE-2006-6305.md): Unspecified vulnerability in Net-SNMP 5.3 before 5.3.0.1, when configured using the rocommunity or rouser snmpd.conf tokens, causes… (no CVSS)
- [CVE-2006-6333](https://cve.now/CVE-2006-6333.md): The tr\_rx function in ibmtr.c for Linux kernel 2.6.19 assigns the wrong flag to the ip\_summed field, which allows remote attackers to… (no CVSS)
- [CVE-2006-6328](https://cve.now/CVE-2006-6328.md): Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via… (no CVSS)
- [CVE-2006-6329](https://cve.now/CVE-2006-6329.md): index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile parameter. (no CVSS)
- [CVE-2006-6330](https://cve.now/CVE-2006-6330.md): index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter. (no CVSS)
- [CVE-2006-6331](https://cve.now/CVE-2006-6331.md): metaInfo.php in TorrentFlux 2.2, when $cfg\["enable\_file\_priority"\] is false, allows remote attackers to execute arbitrary commands via… (no CVSS)
- [CVE-2006-5994](https://cve.now/CVE-2006-5994.md): Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. (no CVSS)
- [CVE-2006-6308](https://cve.now/CVE-2006-6308.md): Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web… (no CVSS)
- [CVE-2006-6309](https://cve.now/CVE-2006-6309.md): Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read… (no CVSS)
- [CVE-2006-6310](https://cve.now/CVE-2006-6310.md): Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an invalid src attribute… (no CVSS)
- [CVE-2006-6311](https://cve.now/CVE-2006-6311.md): Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service via a style attribute in an HTML table tag… (no CVSS)
- [CVE-2006-5855](https://cve.now/CVE-2006-5855.md): Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial… (no CVSS)
- [CVE-2006-5856](https://cve.now/CVE-2006-5856.md): Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section… (no CVSS)
- [CVE-2006-6301](https://cve.now/CVE-2006-6301.md): DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and… (no CVSS)
- [CVE-2006-6302](https://cve.now/CVE-2006-6302.md): fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the… (no CVSS)
- [CVE-2006-6303](https://cve.now/CVE-2006-6303.md): The read\_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-12-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.