Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ww.securitytracker.com/id?1019025 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200182-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102947-1 - http://osvdb.org/40827 - http://secunia.com/advisories/27867 - http://www.vupen.com/english/advisories/2007/4043 - http://osvdb.org/40826 - http://www.securityfocus.com/bid/26653
CVE ID: CVE-2007-6217 State: PUBLISHED Published: 2007-12-04T15:00:00 Last Updated: 2024-08-07T15:54:27.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.asp in Irola My-Time (aka Timesheet) 3.5 allow remote attackers to execute arbitrary SQL commands via the (1) login (aka Username) and (2) password parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4649 - http://www.vupen.com/english/advisories/2007/3996 - http://secunia.com/advisories/27798 - http://osvdb.org/38813 - http://aria-security.net/forum
ish/advisories/2007/3996 - http://secunia.com/advisories/27798 - http://osvdb.org/38813 - http://aria-security.net/forum/showthread.php?p=1106 - http://securityreason.com/securityalert/3414 - http://www.securityfocus.com/bid/26548 - http://www.securityfocus.com/archive/1/484107/100/0/threaded
CVE ID: CVE-2007-6218 State: PUBLISHED Published: 2007-12-04T17:00:00 Last Updated: 2024-08-07T15:54:27.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) level parameter to (a) install_module.php and (b) uninstall_module.php in upload/xax/admin/modules/, (c) upload/xax/admin/patch/index.php, and (d) install_module.php and (e) uninstall_module.php in upload/xax/ossigeno/admin/; and the (2) ossigeno parameter to (f) ossigeno_modules/ossigeno-catalogo/xax/ossigeno/catalogo/common.php, different vectors than CVE-2007-5234. Additional
) ossigeno_modules/ossigeno-catalogo/xax/ossigeno/catalogo/common.php, different vectors than CVE-2007-5234. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26654 - http://www.packetstormsecurity.org/0711-exploits/ossigeno22-rfi.txt - http://osvdb.org/44315 - http://osvdb.org/44316 - http://osvdb.org/44314 - http://osvdb.org/44317 - http://osvdb.org/44313 - http://osvdb.org/44312
CVE ID: CVE-2007-6219 State: PUBLISHED Published: 2007-12-04T17:00:00 Last Updated: 2024-08-07T15:54:27.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4059 - http://www-1.ibm.com/support/docview.wss?uid=swg1IY95615 - http://www.securitytracker.com/id?1019026 - http://secunia.com/advisories/27900 - http://www.securityfocus.com/bid/26673 - http://www-1.ibm.com/support/docview.wss?uid=swg24017385
CVE ID: CVE-2007-6220 State: PUBLISHED Published: 2007-12-04T17:00:00 Last Updated: 2024-08-07T15:54:27.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: typespeed before 0.6.4 allows remote attackers to cause a denial of service (application crash) via unspecified network behavior that triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26671 - http://secunia.com/advisories/27905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38807 - http://tobias.eyedacor.org/typespeed/#News - http://tobias.eyedacor.org/typespeed/ChangeLog
CVE ID: CVE-2007-6221 State: PUBLISHED Published: 2007-12-04T17:00:00 Last Updated: 2024-08-07T15:54:27.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38724
CVE ID: CVE-2007-6222 State: PUBLISHED Published: 2007-12-04T17:00:00 Last Updated: 2024-08-07T15:54:27.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CheckCustomerAccess function in functions.php in CRM-CTT Interleave before 4.2.0 (formerly CRM-CTT) does not properly verify user privileges, which allows remote authenticated users with the LIMITTOCUSTOMERS privilege to bypass intended access restrictions and edit non-active user settings. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26685 - http://sourceforge.net/project/shownotes.php?release_id=558
iner: References: - http://www.securityfocus.com/bid/26685 - http://sourceforge.net/project/shownotes.php?release_id=558602&group_id=61096 - http://secunia.com/advisories/27874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38808
CVE ID: CVE-2007-6223 State: PUBLISHED Published: 2007-12-04T17:00:00 Last Updated: 2024-08-07T15:54:27.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL commands via the make_id parameter in a search action in browse mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38832 - https://www.exploit-db.com/exploits/4686
CVE ID: CVE-2007-6224 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T15:54:27.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RealNetworks RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll, as shipped with RealPlayer 11, allows remote attackers to cause a denial of service (browser crash) via a certain argument to the GetSourceTransport method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26660 - http://www.securityfocus.com/archive/1/484401/100/0/threaded - http://securityreason.com/securityalert/3415 - http://www.safehack.com/Advisory/realpdos.txt - https://exchange.xforce.ibmcloud.c
curityreason.com/securityalert/3415 - http://www.safehack.com/Advisory/realpdos.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/38778
CVE ID: CVE-2007-6225 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T15:54:27.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Solaris 10, when 64bit mode is used on the x86 platform, allows local users in a Linux (lx) branded zone to cause a denial of service (panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38799 - http://www.vupen.com/english/advisories/2007/4058 - http://www.securitytracker.com/id?1019034 - http://secunia.com/advisories/27877 - http://sunsolve.sun.com/search/document.do?asse
w.securitytracker.com/id?1019034 - http://secunia.com/advisories/27877 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103153-1 - http://www.securityfocus.com/bid/26672
CVE ID: CVE-2007-6226 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T15:54:27.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The American Power Conversion (APC) AP7932 0u 30amp Switched Rack Power Distribution Unit (PDU), with rpdu 3.5.5 and aos 3.5.6, allows remote attackers to bypass authentication and obtain login access by making a login attempt while a different client is logged in, and then resubmitting the login attempt once the other client exits. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019018 - http://www.securityfocus.com/archive/1/484363/100/0/threaded - http://securityreason.com/sec
itytracker.com/id?1019018 - http://www.securityfocus.com/archive/1/484363/100/0/threaded - http://securityreason.com/securityalert/3418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38783 - http://www.securityfocus.com/bid/26636
CVE ID: CVE-2007-6227 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T15:54:27.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU 0.9.0 allows local users of a Windows XP SP2 guest operating system to overwrite the TranslationBlock (code_gen_buffer) buffer, and probably have unspecified other impacts related to an "overflow," via certain Windows executable programs, as demonstrated by qemu-dos.com. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484429/100/0/threaded - http://www.securityfocus.com/bid/26666 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 - https://exchange.xfo
www.securityfocus.com/bid/26666 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38806 - http://secunia.com/advisories/29129
CVE ID: CVE-2007-6228 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T15:54:27.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denial of service (browser crash) via a long argument to the c method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38769 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/058725.html - http://www.securityfocus.com/bid/26656
CVE ID: CVE-2007-6229 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T15:54:27.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the CFG[site][project_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38802 - http://www.securityfocus.com/bid/26681
CVE ID: CVE-2007-6230 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T15:54:27.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the CFG[site][project_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38802 - http://osvdb.org/39694
CVE ID: CVE-2007-6231 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T15:54:27.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the tm_includepath parameter to (1) Classes.inc.php, (2) statistic.inc.php, (3) status.inc.php, (4) status_top_x.inc.php, or (5) libchart-1.1/libchart.php in include/. NOTE: access to include/ is blocked by .htaccess in most deployments that use Apache HTTP Server. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27895 - http://osvdb.org/39692 - ht
Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27895 - http://osvdb.org/39692 - http://osvdb.org/39689 - https://www.exploit-db.com/exploits/4684 - http://www.attrition.org/pipermail/vim/2007-December/001854.html - http://www.securityfocus.com/bid/26678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38801
CVE ID: CVE-2007-6232 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T16:02:34.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38780 - https://www.exploit-db.com/exploits/4681 - http://secunia.com/advisories/27875
CVE ID: CVE-2007-6233 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T16:02:34.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38779 - http://secunia.com/advisories/27875
CVE ID: CVE-2007-6234 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T16:02:34.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in FTP Admin 0.1.0 allows remote attackers to bypass authentication and obtain administrative access via a loggedin parameter with a value of true, as demonstrated by adding a user account. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38782 - https://www.exploit-db.com/exploits/4681 - http://secunia.com/advisories/27875
CVE ID: CVE-2007-6235 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T16:02:34.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484449/100/0/threaded - https://www.exploit-db.com/exploits/4683 - http://www.safehack.com/Advisory/realpdos_au.txt
CVE ID: CVE-2007-6236 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T16:02:34.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Media Player (WMP) allows remote attackers to cause a denial of service (application crash) via a certain AIFF file that triggers a divide-by-zero error, as demonstrated by kr.aiff. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4682 - http://osvdb.org/43715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38797 - http://www.securityfocus.com/bid/26648
CVE ID: CVE-2007-6237 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T16:02:34.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: cp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the authenticated member during a profile update, which allows remote authenticated users to change the e-mail addresses of arbitrary accounts via a modified membercookie parameter, a different vector than CVE-2006-4078. NOTE: this can be leveraged for administrative access by requesting password-reset e-mail through a lostpw action to misc.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27
pw action to misc.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27794 - http://securityreason.com/securityalert/3416 - http://www.securityfocus.com/archive/1/484205/100/0/threaded - http://www.securityfocus.com/bid/26572
CVE ID: CVE-2007-6238 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T16:02:34.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple QuickTime 7.2 on Windows XP allows remote attackers to execute arbitrary code via unknown attack vectors, probably a different vulnerability than CVE-2007-6166. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release advisories with actionable information. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine. However, the organization has stated
for tracking purposes, but duplicates with other CVEs are difficult to determine. However, the organization has stated that this is different than CVE-2007-6166. Additional Analyst Notes: - CVE Program Container: References: - http://wslabi.com/wabisabilabi/showBidInfo.do?code=ZD-00000185 - http://www.securityfocus.com/bid/26682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38852 - http://www.securitytracker.com/id?1019039 - http://wabisabilabi.blogspot.com/2007/11/quicktime-zeroday-vulnerability-still.html
CVE ID: CVE-2007-6239 State: PUBLISHED Published: 2007-12-04T18:00:00 Last Updated: 2024-08-07T16:02:35.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28091 - http://secunia.com/advisories/28412 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00507.html - http://www.debian.org/security/2008/dsa-14
www.redhat.com/archives/fedora-package-announce/2007-December/msg00507.html - http://www.debian.org/security/2008/dsa-1482 - http://secunia.com/advisories/28814 - http://www.kb.cert.org/vuls/id/232881 - http://security.gentoo.org/glsa/glsa-200903-38.xml - http://www.securityfocus.com/bid/26687 - http://www.redhat.com/support/errata/RHSA-2007-1130.html - http://secunia.com/advisories/28109 - http://www.squid-cache.org/Advisories/SQUID-2007_2.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2008:002 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10915 - http://secunia.com/advisories/28403 - http://secunia.com/advisories/27910 - http://secur
Aorg.mitre.oval%3Adef%3A10915 - http://secunia.com/advisories/28403 - http://secunia.com/advisories/27910 - http://security.gentoo.org/glsa/glsa-200801-05.xml - http://www.vupen.com/english/advisories/2007/4066 - http://secunia.com/advisories/28350 - https://bugzilla.redhat.com/show_bug.cgi?id=410181 - http://www.securitytracker.com/id?1019036 - http://secunia.com/advisories/28381 - http://bugs.gentoo.org/show_bug.cgi?id=201209 - http://secunia.com/advisories/34467 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00497.html - http://www.ubuntu.com/usn/usn-565-1 - http://www.squid-cache.org/Versions/v2/2.6/changesets/11780.patch - http://lists.opensuse.org/opensuse-s
usn/usn-565-1 - http://www.squid-cache.org/Versions/v2/2.6/changesets/11780.patch - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
CVE ID: CVE-2007-6240 State: PUBLISHED Published: 2007-12-05T11:00:00 Last Updated: 2024-08-07T16:02:34.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in active.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL commands via the BuildTime parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39002 - http://www.securityfocus.com/archive/1/484541/100/0/threaded - http://secunia.com/advisories/27911 - http://www.securityfocus.com/bid/26688 - https://www.exploit-db.com/exploits/4687
CVE ID: CVE-2007-6241 State: PUBLISHED Published: 2007-12-05T11:00:00Z Last Updated: 2024-09-17T03:07:26.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014. Additional Analyst Notes: - CVE Program Container: References: - http://www.beehiveforum.net/news.php - http://secunia.com/advisories/27909
CVE ID: CVE-2007-6242 State: PUBLISHED Published: 2007-12-20T01:00:00 Last Updated: 2024-08-07T16:02:34.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vectors, related to "input validation errors." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html - http://secunia.com/advisories/28157 - http://secunia.com/advisories/30507 - http://secunia.com/advisories/28570 - http://www.vupen.com/english/advisories/2008/1724/references - http://www.us-cert.gov/cas/tec
nia.com/advisories/28570 - http://www.vupen.com/english/advisories/2008/1724/references - http://www.us-cert.gov/cas/techalerts/TA07-355A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39128 - http://www.securityfocus.com/bid/26951 - http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9188 - http://secunia.com/advisories/28161 - http://www.redhat.com/support/errata/RHSA-2007-1126.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 - http://www.vupen.com/english/advisories/2007/4258 - http://securitytracker.com/id?1019116 - http://secunia.com/advisories/28213 - http
en.com/english/advisories/2007/4258 - http://securitytracker.com/id?1019116 - http://secunia.com/advisories/28213 - http://www.adobe.com/support/security/bulletins/apsb07-20.html
CVE ID: CVE-2007-6243 State: PUBLISHED Published: 2007-12-20T01:00:00 Last Updated: 2024-08-07T16:02:36.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid= - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html - http://secunia.com/advisories
34256&poid= - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html - http://secunia.com/advisories/29865 - http://secunia.com/advisories/33390 - http://secunia.com/advisories/30507 - http://secunia.com/advisories/28570 - http://www.adobe.com/support/security/bulletins/apsb08-11.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11069 - http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://secunia.com/advisories/32702 - http://www.vupen.com/english/advisories/2008/1724/references - http://www.us-cert.gov/cas/techalerts/TA07-355A.html - http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml - http://www.redhat.