# CVEs published 2006-12-06

17 CVEs were published on December 6, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6112](https://cve.now/CVE-2006-6112.md): LifeType 1.0.x and 1.1.x have insufficient access control for all of the PHP scripts under (1) class/ and (2) plugins/, which allows remote (no CVSS)
- [CVE-2006-6305](https://cve.now/CVE-2006-6305.md): Unspecified vulnerability in Net-SNMP 5.3 before 5.3.0.1, when configured using the rocommunity or rouser snmpd.conf tokens, causes Net-SNMP (no CVSS)
- [CVE-2006-6333](https://cve.now/CVE-2006-6333.md): The tr\_rx function in ibmtr.c for Linux kernel 2.6.19 assigns the wrong flag to the ip\_summed field, which allows remote attackers to cause (no CVSS)
- [CVE-2006-6328](https://cve.now/CVE-2006-6328.md): Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequen (no CVSS)
- [CVE-2006-6329](https://cve.now/CVE-2006-6329.md): index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile parameter. (no CVSS)
- [CVE-2006-6330](https://cve.now/CVE-2006-6330.md): index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter. (no CVSS)
- [CVE-2006-6331](https://cve.now/CVE-2006-6331.md): metaInfo.php in TorrentFlux 2.2, when $cfg\["enable\_file\_priority"\] is false, allows remote attackers to execute arbitrary commands via shell (no CVSS)
- [CVE-2006-5994](https://cve.now/CVE-2006-5994.md): Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. (no CVSS)
- [CVE-2006-6308](https://cve.now/CVE-2006-6308.md): Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Servic (no CVSS)
- [CVE-2006-6309](https://cve.now/CVE-2006-6309.md): Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read arbitrary (no CVSS)
- [CVE-2006-6310](https://cve.now/CVE-2006-6310.md): Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an invalid src attribute va (no CVSS)
- [CVE-2006-6311](https://cve.now/CVE-2006-6311.md): Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service via a style attribute in an HTML table tag wi (no CVSS)
- [CVE-2006-5855](https://cve.now/CVE-2006-5855.md): Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial o (no CVSS)
- [CVE-2006-5856](https://cve.now/CVE-2006-5856.md): Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section na (no CVSS)
- [CVE-2006-6301](https://cve.now/CVE-2006-6301.md): DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and c (no CVSS)
- [CVE-2006-6302](https://cve.now/CVE-2006-6302.md): fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.de (no CVSS)
- [CVE-2006-6303](https://cve.now/CVE-2006-6303.md): The read\_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows re (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-12-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.