Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5693 State: PUBLISHED Published: 2007-10-29T20:00:00 Last Updated: 2024-08-07T15:39:13.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the edit parameter in an upd cmd action, a different vulnerability than CVE-2007-5492. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27503 - http://securityreason.com/securityalert/3318 - http://www.securityfocus.com/archive/1/482499/100/0/threaded - http://osvdb.org/43604 - http://www.gentoo.org/security/en/glsa/glsa-200711
yfocus.com/archive/1/482499/100/0/threaded - http://osvdb.org/43604 - http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml - http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup - http://www.securityfocus.com/bid/26126 - http://secunia.com/advisories/28008 - http://www.debian.org/security/2007/dsa-1423 - http://www.vupen.com/english/advisories/2007/3768
CVE ID: CVE-2007-5694 State: PUBLISHED Published: 2007-10-29T20:00:00 Last Updated: 2024-08-07T15:39:13.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to read arbitrary files via an absolute path in the dir parameter, a different vulnerability than CVE-2007-5491. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41110 - http://secunia.com/advisories/27503 - http://securityreason.com/securityalert/3318 - http://www.securityfocus.com/archive/1/482499/100/0/threaded - http://www.gentoo.org/security/en/glsa/glsa-20071
/3318 - http://www.securityfocus.com/archive/1/482499/100/0/threaded - http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml - http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup - http://www.securityfocus.com/bid/26126 - http://secunia.com/advisories/28008 - http://www.debian.org/security/2007/dsa-1423 - http://www.vupen.com/english/advisories/2007/3768
CVE ID: CVE-2007-5695 State: PUBLISHED Published: 2007-10-29T20:00:00 Last Updated: 2024-08-07T15:39:13.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in command.php in SiteBar 3.3.8 allows remote attackers to redirect users to arbitrary web sites via a URL in the forward parameter in a Log In action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41581 - http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup - http://secunia.com/advisories/27503 - http://securityreason.com/securityalert/3318 - http://www.securityfocus.com/archive/1/482499/100/0/threaded - http://www.gentoo.org/se
yreason.com/securityalert/3318 - http://www.securityfocus.com/archive/1/482499/100/0/threaded - http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml - http://www.securityfocus.com/bid/26126 - http://secunia.com/advisories/28008 - http://www.debian.org/security/2007/dsa-1423 - http://www.vupen.com/english/advisories/2007/3768
CVE ID: CVE-2007-5696 State: PUBLISHED Published: 2007-10-29T20:00:00 Last Updated: 2024-08-07T15:39:13.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes.php in phpBasic allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, possibly related to the Music module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482680/100/0/threaded - http://securityreason.com/securityalert/3305
CVE ID: CVE-2007-5697 State: PUBLISHED Published: 2007-10-29T21:00:00 Last Updated: 2024-08-07T15:39:13.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PHP Image 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the xarg parameter to (1) xarg_corner.php, (2) xarg_corner_bottom.php, and (3) xarg_corner_top.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40743 - http://osvdb.org/40742 - http://osvdb.org/40744 - https://www.exploit-db.com/exploits/4565 - http://www.securityfocus.com/bid/26187
CVE ID: CVE-2007-5698 State: PUBLISHED Published: 2007-10-29T21:00:00 Last Updated: 2024-08-07T15:39:13.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in default.asp in CREApark GOLD KOY PORTALI allows remote attackers to inject arbitrary web script or HTML via the aranan parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37392 - http://www.securityfocus.com/bid/26191 - http://secunia.com/advisories/27368
CVE ID: CVE-2007-5699 State: PUBLISHED Published: 2007-10-29T21:00:00 Last Updated: 2024-08-07T15:39:13.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer (ESA) 2.5 allows remote attackers to execute arbitrary code via certain data on TCP port 10616 that results in a long argument to the SEARCHREPORT command, a different vector than CVE-2007-2059. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38139 - http://www.securityfocus.com/bid/26189 - https://www.exploit-db.com/exploits/4566
CVE ID: CVE-2007-5700 State: PUBLISHED Published: 2007-10-29T21:00:00 Last Updated: 2024-08-07T15:39:13.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Evaluate LotusScript method in IBM Lotus Domino before 7.0.3 uses an incorrect security context for @ formula commands in some circumstances, which might allow remote authenticated users to gain privileges and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37369 - http://www.vupen.com/english/advisories/2007/3598 - http://www.securityfocus.com/bid/26176 - http://www-1.ibm.com/support/docview.wss?uid
com/english/advisories/2007/3598 - http://www.securityfocus.com/bid/26176 - http://www-1.ibm.com/support/docview.wss?uid=swg21273266 - http://secunia.com/advisories/27321
CVE ID: CVE-2007-5701 State: PUBLISHED Published: 2007-10-29T21:00:00 Last Updated: 2024-08-07T15:39:13.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0.3 allows local users, or attackers with physical access, to obtain sensitive information (passwords) when an administrator enters a "ca activate" or "ca unlock" command with any uppercase character, which bypasses a blacklist designed to suppress password logging, resulting in cleartext password disclosure in the console log and Admin panel. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/su
he console log and Admin panel. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21261095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37372 - http://www.vupen.com/english/advisories/2007/3598 - http://osvdb.org/40952 - http://www.securityfocus.com/bid/26176 - http://secunia.com/advisories/27321
CVE ID: CVE-2007-5702 State: PUBLISHED Published: 2007-10-29T22:00:00 Last Updated: 2024-08-07T15:39:13.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in swamp/action/LoginActions (aka the login box) in the Novell OpenSUSE SWAMP Workflow Administration and Management Platform 1.x allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27390 - http://www.osvdb.org/38203 - http://swamp.svn.sourceforge.net/viewvc/swamp/trunk/swamp/webapps/w
.com/advisories/27390 - http://www.osvdb.org/38203 - http://swamp.svn.sourceforge.net/viewvc/swamp/trunk/swamp/webapps/webswamp/src/java/de/suse/swamp/modules/actions/LoginActions.java?r1=666&r2=700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37399 - http://www.securityfocus.com/bid/26198 - http://www.securityfocus.com/archive/1/482733/100/0/threaded
CVE ID: CVE-2007-5703 State: PUBLISHED Published: 2007-10-29T22:00:00 Last Updated: 2024-08-07T15:39:13.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) Request-spk.xuda and (2) Add-msie-request.xuda in RSA KEON Registration Authority Web Interface 1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3314 - http://www.securityfocus.com/archive/1/482729/100/0/threaded - http://www.kb.cert.org/vuls/id/342793 - http://osvdb.org/38299 - http://osvdb.org/38298 - http://secunia.com/ad
readed - http://www.kb.cert.org/vuls/id/342793 - http://osvdb.org/38299 - http://osvdb.org/38298 - http://secunia.com/advisories/27384 - http://www.vupen.com/english/advisories/2007/3658 - http://www.securitytracker.com/id?1018856 - http://www.securityfocus.com/bid/26196 - http://www.gamasec.net/english/gs07-02.html
CVE ID: CVE-2007-5704 State: PUBLISHED Published: 2007-10-29T22:00:00 Last Updated: 2024-08-07T15:39:13.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the (1) Email Address and (2) Password fields in (a) login.asp and (b) admin_login.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482730/100/0/threaded - http://secunia.com/advisories/27375 - http://www.osvdb.org/38168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37424 - http://www.securityfocus.com/bid/2
://www.osvdb.org/38168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37424 - http://www.securityfocus.com/bid/26192 - http://www.osvdb.org/38167 - http://securityreason.com/securityalert/3313
CVE ID: CVE-2007-5705 State: PUBLISHED Published: 2007-10-29T22:00:00 Last Updated: 2024-08-07T15:39:13.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Settings component in the administration system in Jeebles Directory 2.9.60 allows remote authenticated administrators to execute arbitrary PHP code via unspecified vectors related to settings.inc.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37379 - http://secunia.com/advisories/27345
CVE ID: CVE-2007-5706 State: PUBLISHED Published: 2007-10-29T22:00:00 Last Updated: 2024-08-07T15:39:13.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in download.php in Jeebles Directory 2.9.60 allows remote attackers to read arbitrary files via a full pathname in the query string. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37378 - http://securityreason.com/securityalert/3315 - http://www.securityfocus.com/archive/1/482612/100/0/threaded - http://www.securityfocus.com/bid/26171 - http://secuni
- http://www.securityfocus.com/archive/1/482612/100/0/threaded - http://www.securityfocus.com/bid/26171 - http://secunia.com/advisories/27345
CVE ID: CVE-2007-5707 State: PUBLISHED Published: 2007-10-30T19:00:00 Last Updated: 2024-08-07T15:39:13.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27683 - http://www.securitytracker.com/id?1018924 - http://secunia.com/advisories/29461 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5119 - http://www.mandriva.com/security/advisories?name=M
461 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5119 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:215 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10183 - http://secunia.com/advisories/29682 - http://secunia.com/advisories/27756 - http://security.gentoo.org/glsa/glsa-200803-28.xml - http://www.debian.org/security/2008/dsa-1541 - http://www.novell.com/linux/security/advisories/2007_24_sr.html - http://secunia.com/advisories/27596 - http://www.vupen.com/english/advisories/2009/3184 - http://www.openldap.org/lists/openldap-announce/200710/msg00001.html - http://secunia.com/advisories/27424 - http://www.redhat.com/suppor
ap.org/lists/openldap-announce/200710/msg00001.html - http://secunia.com/advisories/27424 - http://www.redhat.com/support/errata/RHSA-2007-1038.html - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://www.ubuntu.com/usn/usn-551-1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=440632 - http://www.vupen.com/english/advisories/2007/3645 - http://www.redhat.com/support/errata/RHSA-2007-1037.html - http://www.securityfocus.com/bid/26245 - http://www.redhat.com/archives/fedora-package-announce/2007-November/msg00460.html - http://support.apple.com/kb/HT3937 - http://secunia.com/advisories/27587 - http://secunia.com/advisories/27868
CVE ID: CVE-2007-5708 State: PUBLISHED Published: 2007-10-30T19:00:00 Last Updated: 2024-08-07T15:39:13.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service (segmentation fault) via unknown vectors that prevent the array from being null terminated. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27683 - http://www.mandriva.com/security/advisories?name=MDVSA-200
ontainer: References: - http://secunia.com/advisories/27683 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:058 - http://secunia.com/advisories/29461 - http://secunia.com/advisories/29225 - http://secunia.com/advisories/29682 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5163 - http://secunia.com/advisories/27756 - http://security.gentoo.org/glsa/glsa-200803-28.xml - http://www.debian.org/security/2008/dsa-1541 - http://www.novell.com/linux/security/advisories/2007_24_sr.html - http://www.openldap.org/lists/openldap-announce/200710/msg00001.html - http://secunia.com/advisories/27424 - http://www.ubuntu.com/usn/usn-551-1 - http://www.vupen.com/english/advisories/200
http://secunia.com/advisories/27424 - http://www.ubuntu.com/usn/usn-551-1 - http://www.vupen.com/english/advisories/2007/3645 - http://www.securityfocus.com/bid/26245 - http://www.redhat.com/archives/fedora-package-announce/2007-November/msg00460.html - http://secunia.com/advisories/27868
CVE ID: CVE-2007-5709 State: PUBLISHED Published: 2007-10-30T19:00:00 Last Updated: 2024-08-07T15:39:13.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary code via a long file name in an M3U file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38160 - http://osvdb.org/41998 - http://secunia.com/advisories/27270 - https://www.exploit-db.com/exploits/4583
CVE ID: CVE-2007-5710 State: PUBLISHED Published: 2007-10-30T19:00:00 Last Updated: 2024-08-07T15:39:13.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the posts_columns array parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26228 - http://osvdb.org/38279 - http://www.vupen.com/english/advisories/2007/3640 - http://secunia.com/advisories/27407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38166 - http://www.waraxe.us/advisory-59.html - http://wordpress.or
https://exchange.xforce.ibmcloud.com/vulnerabilities/38166 - http://www.waraxe.us/advisory-59.html - http://wordpress.org/development/2007/10/wordpress-231/ - http://www.securityfocus.com/archive/1/482905/100/0/threaded
CVE ID: CVE-2007-5711 State: PUBLISHED Published: 2007-10-30T19:00:00 Last Updated: 2024-08-07T15:39:13.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Massive Entertainment World in Conflict 1.001 and earlier allows remote attackers to cause a denial of service (failed assertion and daemon crash) via a large packet to TCP or UDP port 48000. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/wicassert-adv.txt - http://secunia.com/advisories/27417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37462 - http://www.vupen.com/english/advisories/2007/3636 - http://osvdb.org/39019 - http://aluigi.org/poc/wicassert.zip
CVE ID: CVE-2007-5712 State: PUBLISHED Published: 2007-10-30T19:00:00 Last Updated: 2024-08-07T15:39:13.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3660 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html - http:/
lish/advisories/2007/3660 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html - http://www.debian.org/security/2008/dsa-1640 - http://secunia.com/advisories/27435 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00243.html - http://www.securityfocus.com/bid/26227 - http://sourceforge.net/forum/forum.php?forum_id=749199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38143 - http://www.djangoproject.com/weblog/2007/oct/26/security-fix - http://secunia.com/advisories/31961 - http://www.vupen.com/english/advisories/2007/3661 - http://secunia.com/advisories/27597
CVE ID: CVE-2007-5713 State: PUBLISHED Published: 2007-10-30T19:00:00 Last Updated: 2024-08-07T15:39:13.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the GeoIP module in the AMX Mod X 1.76d plugin for Half-Life Server might allow attackers to execute arbitrary code or cause a denial of service via unspecified input related to geolocation, which triggers an error message from the (1) geoip_code2 or (2) geoip_code3 function, leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41980 - http://bugs.alliedmods.net/?do=details&task_id=519 - http://www.securityfocus.com/bid/26218 - http://wiki.alliedmod
80 - http://bugs.alliedmods.net/?do=details&task_id=519 - http://www.securityfocus.com/bid/26218 - http://wiki.alliedmods.net/AMX_Mod_X_1.8.0_Changes - http://secunia.com/advisories/27411
CVE ID: CVE-2007-5714 State: PUBLISHED Published: 2007-10-30T19:00:00Z Last Updated: 2024-09-17T04:23:55.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default password and valid login shell, which might allow remote attackers to obtain login access and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200710-25.xml - http://secunia.com/advisories/27366
CVE ID: CVE-2007-5715 State: PUBLISHED Published: 2007-10-30T19:00:00 Last Updated: 2024-08-07T15:39:13.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: DenyHosts 2.6 processes OpenSSH sshd "not listed in AllowUsers" log messages with an incorrect regular expression that does not match an IP address, which might allow remote attackers to avoid detection and blocking when making invalid login attempts with a username not present in AllowUsers, as demonstrated by the root username, a different vulnerability than CVE-2007-4323. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=237449 - http://osvdb.org/45298 - http://bugs
ogram Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=237449 - http://osvdb.org/45298 - http://bugs.gentoo.org/show_bug.cgi?id=181213
CVE ID: CVE-2007-5716 State: PUBLISHED Published: 2007-10-30T21:00:00 Last Updated: 2024-08-07T15:39:13.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Internet Protocol (IP) functionality in Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors, probably related to a UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27395 - http://www.vupen.com/english/advisories/2007/3653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38148 - http://www.securityfocus.com/bid/26248 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitr
8148 - http://www.securityfocus.com/bid/26248 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3270 - http://osvdb.org/40816 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200851-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103087-1 - http://www.securitytracker.com/id?1018870
CVE ID: CVE-2007-5717 State: PUBLISHED Published: 2007-10-30T21:00:00 Last Updated: 2024-08-07T15:39:13.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) on x86 before firmware 2.70 allows remote attackers to execute arbitrary commands as root on the Service Processor (SP) via unspecified vectors, a different vulnerability than CVE-2007-5170. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3652 - http://osvdb.org/40835 - http://www.securityfocus.com/bid/26250 - http://secunia.com/advisories/27416 - http://www.securitytracke
vdb.org/40835 - http://www.securityfocus.com/bid/26250 - http://secunia.com/advisories/27416 - http://www.securitytracker.com/id?1018869 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200667-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38149 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103127-1