# CVEs published 2006-10-24

20 CVEs were published on October 24, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-5482](https://cve.now/CVE-2006-5482.md): ufs\_vnops.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by calling the ftruncate function on a file type tha (no CVSS)
- [CVE-2006-5483](https://cve.now/CVE-2006-5483.md): p1003\_1b.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by setting a scheduler policy, which should only be s (no CVSS)
- [CVE-2006-5484](https://cve.now/CVE-2006-5484.md): SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, (no CVSS)
- [CVE-2006-5485](https://cve.now/CVE-2006-5485.md): Multiple PHP remote file inclusion vulnerabilities in SpeedBerg 1.2beta1 allow remote attackers to execute arbitrary PHP code via a URL in t (no CVSS)
- [CVE-2006-5486](https://cve.now/CVE-2006-5486.md): Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 all (no CVSS)
- [CVE-2006-4177](https://cve.now/CVE-2006-4177.md): Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2006-5471](https://cve.now/CVE-2006-5471.md): PHP remote file inclusion vulnerability in example/lib/grid3.lib.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attac (no CVSS)
- [CVE-2006-5472](https://cve.now/CVE-2006-5472.md): PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2006-5473](https://cve.now/CVE-2006-5473.md): PHP remote file inclusion vulnerability in Description.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to ex (no CVSS)
- [CVE-2006-5474](https://cve.now/CVE-2006-5474.md): The "forgot password" function in OneOrZero Helpdesk before 1.6.5.4 generates insecure passwords by concatenating the current timestamp with (no CVSS)
- [CVE-2006-5475](https://cve.now/CVE-2006-5475.md): Multiple cross-site scripting (XSS) vulnerabilities in the XML parser in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allow remote atta (no CVSS)
- [CVE-2006-5476](https://cve.now/CVE-2006-5476.md): Cross-site request forgery (CSRF) vulnerability in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows remote attackers to perform unau (no CVSS)
- [CVE-2006-5477](https://cve.now/CVE-2006-5477.md): Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows form submissions to be redirected, which allows remote attackers to obtain arbitrar (no CVSS)
- [CVE-2006-5478](https://cve.now/CVE-2006-5478.md): Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e F (no CVSS)
- [CVE-2006-5479](https://cve.now/CVE-2006-5479.md): The NCP Engine in Novell eDirectory before 8.7.3.8 FTF1 allows remote attackers to cause an unspecified denial of service via a certain "NCP (no CVSS)
- [CVE-2006-5480](https://cve.now/CVE-2006-5480.md): PHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1 allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2006-5481](https://cve.now/CVE-2006-5481.md): Multiple PHP remote file inclusion vulnerabilities in 2le.net Castor PHP Web Builder 1.1.1 allow remote attackers to execute arbitrary PHP c (no CVSS)
- [CVE-2006-4509](https://cve.now/CVE-2006-4509.md): Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote at (no CVSS)
- [CVE-2006-4510](https://cve.now/CVE-2006-4510.md): The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute a (no CVSS)
- [CVE-2006-4573](https://cve.now/CVE-2006-4573.md): Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8\_handle\_comb function in encoding.c) in screen before (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-10-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.