Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5825 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the ws_addarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to execute arbitrary code via a stats method action to /xml-rpc with format string specifiers in the (1) username or (2) password portion of base64-encoded data on the "Authorization: Basic" HTTP header line. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1597 - http://www.securityfocus.com/bid/26310 - http://www.securityfocu
ences: - http://www.debian.org/security/2008/dsa-1597 - http://www.securityfocus.com/bid/26310 - http://www.securityfocus.com/archive/1/483209/100/0/threaded - http://www.securityfocus.com/archive/1/483214/100/0/threaded - http://secunia.com/advisories/28269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38243 - http://sourceforge.net/project/shownotes.php?group_id=98211&release_id=548679 - http://bugs.gentoo.org/show_bug.cgi?id=200110 - http://secunia.com/advisories/30661 - http://www.gentoo.org/security/en/glsa/glsa-200712-18.xml
CVE ID: CVE-2007-5826 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote attackers to create or overwrite arbitrary files with arbitrary contents via a full pathname in the second argument to the HttpDownloadFile method, a different product than CVE-2007-4420. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27462 - http://www.vupen.com/english/advisories/2007/3710 - https://www.exploit-db.com/exploits/4598 - https://exchange.xforce.ib
ttp://www.vupen.com/english/advisories/2007/3710 - https://www.exploit-db.com/exploits/4598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38223 - http://osvdb.org/38415 - http://www.securityfocus.com/bid/26308 - http://shinnai.altervista.org/exploits/txt/TXT_3kXDua0a0Tl5Vm5LU3ms.html
CVE ID: CVE-2007-5827 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: iSCSI Enterprise Target (iscsitarget) 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38228 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448873 - http://www.securityfocus.com/bid/26299 - http://osvdb.org/42037
CVE ID: CVE-2007-5828 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CSRF protection module that is included with the product. However, CVE considers this an issue because the default configuration does not use this module Additional Analyst Notes: - CVE Program Container: References: - http://www.secur
configuration does not use this module Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482983/100/0/threaded - http://securityreason.com/securityalert/3338 - http://osvdb.org/45285
CVE ID: CVE-2007-5829 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions (group writable), which allows local admin users to gain root privileges by replacing unspecified files, which are executed when a user with physical access inserts a disk and the "Show Progress During Mount Scans" option is enabled. Additional Analyst Notes: - CVE Program Container: References: - http://securityresponse.sym
t Scans" option is enabled. Additional Analyst Notes: - CVE Program Container: References: - http://securityresponse.symantec.com/avcenter/security/Content/2007.11.02.html - http://securitytracker.com/id?1018890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38229 - http://secunia.com/advisories/27488 - http://www.securityfocus.com/bid/26253 - http://securitytracker.com/id?1018889 - http://www.vupen.com/english/advisories/2007/3698 - http://osvdb.org/40864
CVE ID: CVE-2007-5830 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the administrative interface in Avaya Messaging Storage Server (MSS) 3.1 before SP1, and Message Networking (MN) 3.1, allows remote attackers to cause a denial of service via unspecified vectors related to "input validation." Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2007-415.htm - http://osvdb.org/38482 - http://secunia.com/advisories/27505 - http://www.securityfocus.com/bid/26295
CVE ID: CVE-2007-5831 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in fileSystem.do in SSL-Explorer before 0.2.14 allows remote attackers to access arbitrary files via directory traversal sequences in the path parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25512 - http://sourceforge.net/forum/forum.php?forum_id=700251 - http://osvdb.org/36914
CVE ID: CVE-2007-5832 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in selectLanguage.do in SSL-Explorer before 0.2.15 allows remote attackers to inject (1) headers or (2) body data in an HTTP transaction, a different vulnerability than CVE-2007-2907. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45291 - http://sourceforge.net/project/shownotes.php?group_id=116065&release_id=530959 - http://secunia.com/advisories/25512 - http://sourceforge.net/forum/forum.php?for
php?group_id=116065&release_id=530959 - http://secunia.com/advisories/25512 - http://sourceforge.net/forum/forum.php?forum_id=723987
CVE ID: CVE-2007-5833 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BosDev BosMarket Business Directory System allow remote authenticated users to inject arbitrary web script or HTML via (1) user info (account details) or (2) a post. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482732/100/0/threaded - http://securityreason.com/securityalert/3343
CVE ID: CVE-2007-5834 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:46:59.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BosDev BosNews 4 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in a news post. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482732/100/0/threaded - http://osvdb.org/39062 - http://securityreason.com/securityalert/3343
CVE ID: CVE-2007-5835 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which allows remote attackers to cause a denial of service (overwritten files) and possibly obtain administrative access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482732/100/0/threaded - http://securityreason.com/securityalert/3343
CVE ID: CVE-2007-5836 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Amazing Flash AFCommerce allows remote attackers to execute arbitrary SQL commands via the firstname parameter to an unspecified component, a different issue than CVE-2006-3794. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38345 - http://www.securityfocus.com/bid/26282
CVE ID: CVE-2007-5837 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1477 - http://www.vupen.com/english/advisories/2007/3679 - http://www.securityfocus.com/bid/26273 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38191 - http://secunia.com/advisories/28671 - http://secunia.com/advisories/27454 - http://bugs.d
ud.com/vulnerabilities/38191 - http://secunia.com/advisories/28671 - http://secunia.com/advisories/27454 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448721
CVE ID: CVE-2007-5838 State: PUBLISHED Published: 2007-11-06T19:00:00 Last Updated: 2024-08-07T15:47:00.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018876 - http://www.irmplc.com/index.php/111-Vendor-Alerts - http://www.vupen.com/english/advisories/2007/3673 - http://www.irmplc.com/index.php/152-Advisory-022 - http://secunia.com/advisories/2
en.com/english/advisories/2007/3673 - http://www.irmplc.com/index.php/152-Advisory-022 - http://secunia.com/advisories/27412 - http://www.symantec.com/avcenter/security/Content/2007.10.31a.html - http://www.securityfocus.com/bid/26265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38180
CVE ID: CVE-2007-5839 State: PUBLISHED Published: 2007-11-06T19:00:00 Last Updated: 2024-08-07T15:47:00.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: The e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the (1) HOSTNAME or (2) IRCHOST command. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449149 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.285737 - http://secunia.com/advisories/34870 - http://secunia.com/advisories/27463 - http://www.securityfocus.com/bid/26326 -
- http://secunia.com/advisories/34870 - http://secunia.com/advisories/27463 - http://www.securityfocus.com/bid/26326 - http://secunia.com/advisories/31180 - http://www.vupen.com/english/advisories/2007/3714 - http://osvdb.org/42061 - http://security.gentoo.org/glsa/glsa-200807-12.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/38262
CVE ID: CVE-2007-5840 State: PUBLISHED Published: 2007-11-06T21:00:00 Last Updated: 2024-08-07T15:47:00.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in starnet/themes/c-sky/main.inc.php in Fred Stuurman SyndeoCMS 2.5.01 allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter, a different vector than CVE-2006-4920.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26321 - https://www.exploit-db.com/exploits/4607 - http://www.vupen.com/english/advisories/2007/3748 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38244 - http://secunia.com/advisories
nglish/advisories/2007/3748 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38244 - http://secunia.com/advisories/27527 - http://www.syndeocms.org/forum/index.php?topic=1737.0 - http://osvdb.org/38406
CVE ID: CVE-2007-5841 State: PUBLISHED Published: 2007-11-06T21:00:00 Last Updated: 2024-08-07T15:47:00.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/index.php in nuBoard 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the site parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38253 - http://www.securityfocus.com/bid/26322 - http://www.vupen.com/english/advisories/2007/3753 - https://www.exploit-db.com/exploits/4606
CVE ID: CVE-2007-5842 State: PUBLISHED Published: 2007-11-06T21:00:00 Last Updated: 2024-08-07T15:47:00.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter to (1) admincp/auth/secure.php or (2) admincp/auth/checklogin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38254 - http://www.vupen.com/english/advisories/2007/3752 - https://www.exploit-db.com/exploits/4605 - http://osvdb.org/38490 - http://osvdb
upen.com/english/advisories/2007/3752 - https://www.exploit-db.com/exploits/4605 - http://osvdb.org/38490 - http://osvdb.org/38489
CVE ID: CVE-2007-5843 State: PUBLISHED Published: 2007-11-06T21:00:00 Last Updated: 2024-08-07T15:47:00.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the pathdot parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38480 - http://www.vupen.com/english/advisories/2007/3751 - https://www.exploit-db.com/exploits/4604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38251 - http://www.securityfocus.com/bid/26316
CVE ID: CVE-2007-5844 State: PUBLISHED Published: 2007-11-06T21:00:00 Last Updated: 2024-08-07T15:47:00.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the selskin parameter to index.php. NOTE: this can be leveraged for remote file inclusion by including inc/boxleft.inc and specifying a URL in the xposbox[L][] array parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38255 - http://www.securityfocus.com/bid/26315 - https://www.exploit-db.com/e
change.xforce.ibmcloud.com/vulnerabilities/38255 - http://www.securityfocus.com/bid/26315 - https://www.exploit-db.com/exploits/4602 - http://www.vupen.com/english/advisories/2007/3750
CVE ID: CVE-2007-5845 State: PUBLISHED Published: 2007-11-06T21:00:00 Last Updated: 2024-08-07T15:47:00.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter. NOTE: this can be leveraged to bypass authentication and upload arbitrary files by including admin/inc/upload.inc and specifying certain multipart/form-data input for admin/inc/upload.inc. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38492 - http://retrogod.altervista.org/guppy_4516_cmd.html - https://
Program Container: References: - http://osvdb.org/38492 - http://retrogod.altervista.org/guppy_4516_cmd.html - https://www.exploit-db.com/exploits/3221 - https://www.exploit-db.com/exploits/4602
CVE ID: CVE-2007-5846 State: PUBLISHED Published: 2007-11-06T21:00:00 Last Updated: 2024-08-07T15:47:00.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large max-repeaters value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27965 - http://sourceforge.net/project/shownotes.php?release_id=528095&group_id=12694 - http://www.ubuntu.com/usn/usn-564-1 - http://secunia.com/advisories/28413 - http://osvdb.org/38904 - http://www.mandriva.com/security/advisories?name=MDKSA-
- http://secunia.com/advisories/28413 - http://osvdb.org/38904 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:225 - http://www.vupen.com/english/advisories/2007/3802 - http://secunia.com/advisories/27733 - http://secunia.com/advisories/27685 - http://sourceforge.net/tracker/index.php?func=detail&aid=1712988&group_id=12694&atid=112694 - http://www.securityfocus.com/archive/1/490917/100/0/threaded - http://bugs.gentoo.org/show_bug.cgi?id=198346 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00613.html - http://security.gentoo.org/glsa/glsa-200711-31.xml - http://www.novell.com/linux/security/advisories/2007_25_sr.html - https://kb.pulsesecure.net/arti
a/glsa-200711-31.xml - http://www.novell.com/linux/security/advisories/2007_25_sr.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730 - http://www.securitytracker.com/id?1018918 - http://secunia.com/advisories/29785 - http://secunia.com/advisories/27558 - http://www.securityfocus.com/bid/26378 - http://www.vupen.com/english/advisories/2008/1234/references - http://www.redhat.com/support/errata/RHSA-2007-1045.html - http://secunia.com/advisories/28825 - http://www.debian.org/security/2008/dsa-1483 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11258 - http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/tags/Ext-5-4-1/net-snmp/
ition/oval%3Aorg.mitre.oval%3Adef%3A11258 - http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/tags/Ext-5-4-1/net-snmp/agent/snmp_agent.c?view=log - http://lists.vmware.com/pipermail/security-announce/2008/000014.html - http://secunia.com/advisories/27740 - http://secunia.com/advisories/27689
CVE ID: CVE-2007-5847 State: PUBLISHED Published: 2007-12-19T21:00:00 Last Updated: 2024-08-07T15:47:00.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4238 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://secunia.com/advisories/28136 - http://www.securityfocus.com/bid/26910 - http://securitytracker.com/id?1019106 - http://lists.apple.com/archi
es/28136 - http://www.securityfocus.com/bid/26910 - http://securitytracker.com/id?1019106 - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39095 - http://docs.info.apple.com/article.html?artnum=307179
CVE ID: CVE-2007-5848 State: PUBLISHED Published: 2007-12-19T21:00:00 Last Updated: 2024-08-07T15:47:00.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CUPS in Apple Mac OS X 10.4.11 allows local admin users to execute arbitrary code via a crafted URI to the CUPS service. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28344 - http://www.vupen.com/english/advisories/2007/4238 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://secunia.com/advisories/28441 - http://secunia.com/advisories/28136 - https://exchange.xforc
summary_report.html - http://secunia.com/advisories/28441 - http://secunia.com/advisories/28136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39096 - http://www.securityfocus.com/bid/26910 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00003.html - http://www.securityfocus.com/archive/1/485829/100/0/threaded - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:050 - https://issues.rpath.com/browse/RPL-2009 - http://docs.info.apple.com/article.html?artnum=307179 - http://secunia.com/advisories/28636
CVE ID: CVE-2007-5849 State: PUBLISHED Published: 2007-12-19T21:00:00 Last Updated: 2024-08-07T15:47:00.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.cups.org/str.php?L2589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39101 - http://www.vupen.com/english/advisories/2007/4238 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://secunia.com/adviso
upen.com/english/advisories/2007/4238 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://secunia.com/advisories/28129 - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://secunia.com/advisories/28441 - http://secunia.com/advisories/28136 - http://secunia.com/advisories/28113 - http://secunia.com/advisories/28200 - http://www.ubuntu.com/usn/usn-563-1 - http://www.gentoo.org/security/en/glsa/glsa-200712-14.xml - http://www.securityfocus.com/bid/26910 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00003.html - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00908.html - http://lists.apple.com/archive
ml - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00908.html - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://secunia.com/advisories/28676 - http://www.debian.org/security/2007/dsa-1437 - http://docs.info.apple.com/article.html?artnum=307179 - http://secunia.com/advisories/28386 - http://bugs.gentoo.org/show_bug.cgi?id=201570 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:036 - http://secunia.com/advisories/28636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39097 - http://www.vupen.com/english/advisories/2007/4242 - http://www.securityfocus.com/bid/26917