# CVEs published 2006-11-30 27 CVEs were published on November 30, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-4514](https://cve.now/CVE-2006-4514.md): Heap-based buffer overflow in the ole\_info\_read\_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before (no CVSS) - [CVE-2006-6178](https://cve.now/CVE-2006-6178.md): Buffer overflow in PCCSRV\\Web\_console\\RemoteInstallCGI\\Wizard.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1087 allows remote attac (no CVSS) - [CVE-2006-6179](https://cve.now/CVE-2006-6179.md): Buffer overflow in PCCSRV\\Web\_console\\RemoteInstallCGI\\CgiRemoteInstall.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1089 allows re (no CVSS) - [CVE-2003-1309](https://cve.now/CVE-2003-1309.md): The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before (no CVSS) - [CVE-2003-1310](https://cve.now/CVE-2003-1310.md): The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges (no CVSS) - [CVE-2006-4396](https://cve.now/CVE-2006-4396.md): The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely create log files, which allows local users to create a (no CVSS) - [CVE-2006-4398](https://cve.now/CVE-2006-4398.md): Multiple buffer overflows in the Apple Type Services (ATS) server in Mac OS X 10.4 through 10.4.8 allow local users to execute arbitrary cod (no CVSS) - [CVE-2006-4400](https://cve.now/CVE-2006-4400.md): Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and earlier allow user-assisted attackers to execute ar (no CVSS) - [CVE-2006-4401](https://cve.now/CVE-2006-4401.md): Unspecified vulnerability in CFNetwork in Mac OS 10.4.8 and earlier allows user-assisted remote attackers to execute arbitrary FTP commands (no CVSS) - [CVE-2006-4402](https://cve.now/CVE-2006-4402.md): Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user-assisted remote attackers to execute arbitrary cod (no CVSS) - [CVE-2006-4403](https://cve.now/CVE-2006-4403.md): The FTP server in Apple Mac OS X 10.4.8 and earlier, when FTP Access is enabled, will crash when a login failure occurs with a valid user na (no CVSS) - [CVE-2006-4404](https://cve.now/CVE-2006-4404.md): The Installer application in Apple Mac OS X 10.4.8 and earlier, when used by a user with Admin credentials, does not authenticate the user b (no CVSS) - [CVE-2006-4406](https://cve.now/CVE-2006-4406.md): Buffer overflow in PPP on Apple Mac OS X 10.4.x up to 10.4.8 and 10.3.x up to 10.3.9, when PPPoE is enabled, allows remote attackers to exec (no CVSS) - [CVE-2006-4407](https://cve.now/CVE-2006-4407.md): The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize encryption ciphers when negotiating the strongest (no CVSS) - [CVE-2006-4408](https://cve.now/CVE-2006-4408.md): The Security Framework in Apple Mac OS X 10.4 through 10.4.8 allows remote attackers to cause a denial of service (resource consumption) via (no CVSS) - [CVE-2006-4409](https://cve.now/CVE-2006-4409.md): The Online Certificate Status Protocol (OCSP) service in the Security Framework in Apple Mac OS X 10.4 through 10.4.8 retrieve certificate r (no CVSS) - [CVE-2006-4410](https://cve.now/CVE-2006-4410.md): The Security Framework in Apple Mac OS X 10.3.9, and 10.4.x before 10.4.7, does not properly search certificate revocation lists (CRL), whic (no CVSS) - [CVE-2006-4411](https://cve.now/CVE-2006-4411.md): The VPN service in Apple Mac OS X 10.3.x through 10.3.9 and 10.4.x through 10.4.8 does not properly clean the environment when executing com (no CVSS) - [CVE-2006-4412](https://cve.now/CVE-2006-4412.md): WebKit in Apple Mac OS X 10.3.x through 10.3.9 and 10.4 through 10.4.8 allows remote attackers to execute arbitrary code via a crafted HTML (no CVSS) - [CVE-2006-6173](https://cve.now/CVE-2006-6173.md): Buffer overflow in the shared\_region\_make\_private\_np function in vm/vm\_unix.c in Mac OS X 10.4.6 and earlier allows local users to execute a (no CVSS) - [CVE-2006-6174](https://cve.now/CVE-2006-6174.md): Cross-site scripting (XSS) vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126 allows remote attackers to inject arbitrary (no CVSS) - [CVE-2006-6175](https://cve.now/CVE-2006-6175.md): Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x before 2.1.4 allows remote attackers to inc (no CVSS) - [CVE-2006-6176](https://cve.now/CVE-2006-6176.md): Cross-site scripting (XSS) vulnerability in admin.php in Blogn before 1.9.4 allows remote attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2006-6177](https://cve.now/CVE-2006-6177.md): SQL injection vulnerability in system/core/users/users.profile.inc.php in Neocrome Seditio 1.10 and earlier allows remote authenticated user (no CVSS) - [CVE-2006-6170](https://cve.now/CVE-2006-6170.md): Buffer overflow in the tls\_x509\_name\_oneline function in the mod\_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other produ (no CVSS) - [CVE-2006-6171](https://cve.now/CVE-2006-6171.md): ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when CommandBufferSize is specified in the configuration file, which (no CVSS) - [CVE-2006-6172](https://cve.now/CVE-2006-6172.md): Buffer overflow in the asmrp\_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/x (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-11-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.