Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1232 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:35.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SQLiteManager 1.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in a SQLiteManager_currentTheme cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32693 - http://secunia.com/advisories/24296 - http://osvdb.org/33801 - http://www.securityfocus.com/archive/1/461304/100/0/threaded - http://securityreason.com/securityalert/2366 - http://www.securityfocus.com/bid/22727
CVE ID: CVE-2007-1233 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:35.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the stwc_counter_verzeichniss parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32681 - https://www.exploit-db.com/exploits/3379 - http://secunia.com/advisories/24280 - http://www.securityfocus.com/bid/22723 - http://osvdb.org/33777
CVE ID: CVE-2007-1234 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:35.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in sitex allow remote attackers to inject arbitrary web script or HTML via (1) the sxYear parameter to calendar.php, (2) the search parameter to search.php, (3) the linkid parameter to redirect.php, or (4) the page parameter to calendar_events.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461305/100/0/threaded - http://osvdb.org/33161 - http://osvdb.org/33158 - http://securityreason.com/securityalert/2373 - http:/
100/0/threaded - http://osvdb.org/33161 - http://osvdb.org/33158 - http://securityreason.com/securityalert/2373 - http://www.securityfocus.com/archive/1/465849/100/200/threaded - http://osvdb.org/33159 - http://osvdb.org/33160
CVE ID: CVE-2007-1235 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:35.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in sitex allows remote attackers to upload arbitrary PHP code via an avatar filename with a double extension such as .php.jpg, which fails verification and is saved as a .php file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461305/100/0/threaded - http://osvdb.org/33157 - http://securityreason.com/securityalert/2373
CVE ID: CVE-2007-1236 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:35.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: sitex allows remote attackers to obtain sensitive information via a request with a numerical value for the (1) sxMonth[] or (2) sxYear[] parameter to calendar.php, or the (3) page[] parameter to calendar_events.php, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33156 - http://www.securityfocus.com/archive/1/461305/100/0/threaded - http://osvdb.org/33155 - http://securityreason.com/securityalert/2373
CVE ID: CVE-2007-1237 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:34.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: sitex allows remote attackers to obtain potentially sensitive information via a ' (quote) value for certain parameters, as demonstrated by parameters used in forum and search, which forces a SQL error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461305/100/0/threaded - http://osvdb.org/33154 - http://securityreason.com/securityalert/2373
CVE ID: CVE-2007-1238 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:35.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service (application crash) by attempting to insert a corrupted WMF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461373/100/0/threaded - http://osvdb.org/34489 - http://securityvulns.com/Qdocument120.html
CVE ID: CVE-2007-1239 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:35.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (application crash) via a file with a (1) corrupted XML format or a (2) corrupted XLS format, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461373/100/0/threaded - http://www.securityfocus.com/bid/22717 - http://securityvulns.com/news/Microsoft/Excel/XML/DoS.html
CVE ID: CVE-2007-1240 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:34.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject arbitrary web script or HTML via (1) the searchkey parameter to index.php, or the (2) sn or (3) ri parameter to modules/htmlframechat/index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22719 - https://exchange.xforce.ibmcloud.com/vulnerabil
rogram Container: References: - http://www.securityfocus.com/bid/22719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32842 - http://downloads.securityfocus.com/vulnerabilities/exploits/22719.html - http://osvdb.org/35995 - http://osvdb.org/35996
CVE ID: CVE-2007-1241 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:35.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/22728.html - http://osvdb.org/35994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32839 - http://www.securityfocus.com/bid/22
ttp://osvdb.org/35994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32839 - http://www.securityfocus.com/bid/22728
CVE ID: CVE-2007-1242 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:34.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in system/index.php in Audins Audiens 3.3 allows remote attackers to execute arbitrary SQL commands via the PHPSESSID cookie. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32837 - http://osvdb.org/34631 - http://www.securityfocus.com/bid/22728
CVE ID: CVE-2007-1243 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:34.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Audins Audiens 3.3 allows remote attackers to bypass authentication and perform certain privileged actions, possibly an uninstall of the product, by calling unistall.php with the values cnf=disinstalla and status=on. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22728 - http://osvdb.org/33792 - http://secunia.com/advisories/24254 - https://exchange.xforce.ibmclou
rityfocus.com/bid/22728 - http://osvdb.org/33792 - http://secunia.com/advisories/24254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32707
CVE ID: CVE-2007-1244 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:35.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attackers to perform privileged actions as administrators, as demonstrated using the delete action in wp-admin/post.php. NOTE: this issue can be leveraged to perform cross-site scripting (XSS) attacks and steal cookies via the post parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32703 - http://archives.neohapsis.com/archives/fulldisclosur
ces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32703 - http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0583.html - http://www.securityfocus.com/archive/1/461351/100/0/threaded - http://www.securityfocus.com/bid/22735 - http://secunia.com/advisories/24566 - http://osvdb.org/33787 - http://www.gentoo.org/security/en/glsa/glsa-200703-23.xml - http://osvdb.org/33788
CVE ID: CVE-2007-1245 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:35.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 3.99 allows remote attackers to cause a denial of service (application crash) via a malformed WMF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461373/100/0/threaded - http://osvdb.org/34487 - http://securityvulns.com/news/IrfanView/WMF/DoS.html - http://securityvulns.com/Qdocument120.html
CVE ID: CVE-2007-1246 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:35.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DMO_VideoDecoder_Open function in loader/dmo/DMO_VideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than CVE-2007-1387. Additional Analyst Notes: - CVE Program Container: References: - http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c - http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052738.html -
player/trunk/loader/dmo/DMO_VideoDecoder.c - http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052738.html - http://www.novell.com/linux/security/advisories/2007_5_sr.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:057 - http://www.novell.com/linux/security/advisories/2007_007_suse.html - http://www.securityfocus.com/archive/1/466691/30/6900/threaded - http://secunia.com/advisories/24995 - http://secunia.com/advisories/24866 - http://secunia.com/advisories/24462 - http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c?r1=22019&r2=22204 - http://secunia.com/advisories/29601 - http://www.ubuntu.com/usn/usn-433-1 - http://secunia.com/advisories/24448
22204 - http://secunia.com/advisories/29601 - http://www.ubuntu.com/usn/usn-433-1 - http://secunia.com/advisories/24448 - http://www.vupen.com/english/advisories/2007/0794 - http://secunia.com/advisories/24446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32747 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:055 - http://secunia.com/advisories/25462 - http://www.debian.org/security/2008/dsa-1536 - http://security.gentoo.org/glsa/glsa-200704-09.xml - http://secunia.com/advisories/24444 - http://secunia.com/advisories/24443 - http://security.gentoo.org/glsa/glsa-200705-21.xml - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.4491
glsa/glsa-200705-21.xml - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.449141 - http://secunia.com/advisories/24897 - http://www.securityfocus.com/bid/22771
CVE ID: CVE-2007-1247 State: PUBLISHED Published: 2007-03-03T20:00:00 Last Updated: 2024-08-07T12:50:35.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in aWeb Labs aWebNews 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the path_to_news parameter to (1) listing.php or (2) visview.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33824 - http://www.securityfocus.com/archive/1/461684/100/0/threaded - http://osvdb.org/33825 - http://www.vupen.com/english/advisories/2007/0808 - http://www.securityfocus.com/archive/1/461680/100/0/threaded - http://www.securityfocus.com/b
ish/advisories/2007/0808 - http://www.securityfocus.com/archive/1/461680/100/0/threaded - http://www.securityfocus.com/bid/22781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32770 - http://secunia.com/advisories/24351 - http://securityreason.com/securityalert/2365
CVE ID: CVE-2007-1248 State: PUBLISHED Published: 2007-03-03T20:00:00 Last Updated: 2024-08-07T12:50:35.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) cid, (2) uid, and (3) nid parameters to (a) news.php, and the nid parameter to (b) rating.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24334 - http://www.securityfocus.com/bid/22783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32772 - http://securityreason.com/securityalert/2343 - http://www.securityfocus.
nge.xforce.ibmcloud.com/vulnerabilities/32772 - http://securityreason.com/securityalert/2343 - http://www.securityfocus.com/archive/1/461672/100/0/threaded - http://www.vupen.com/english/advisories/2007/0818
CVE ID: CVE-2007-1249 State: PUBLISHED Published: 2007-03-03T20:00:00 Last Updated: 2024-08-07T12:50:34.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: MoveSortedContentAction in C1 Financial Services Contelligent 9.1.4 does not check "the additional environment security configuration," which allows remote attackers with write permissions to reorder components. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32775 - http://www.securityfocus.com/bid/22785 - http://www.vupen.com/english/advisories/2007/0814 - http://www.contelligent.com/contell/cms/c1web/contelligent/site/contelligent/changelog.html?fromRelea
sories/2007/0814 - http://www.contelligent.com/contell/cms/c1web/contelligent/site/contelligent/changelog.html?fromRelease=9.1.4 - http://secunia.com/advisories/24364 - http://osvdb.org/33497
CVE ID: CVE-2007-1250 State: PUBLISHED Published: 2007-03-03T20:00:00 Last Updated: 2024-08-07T12:50:35.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461811/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32756 - http://osvdb.org/33846 - http://www.securityfocus.com/archive/1/461638/100/0/threaded - http://www.securityfocus.com/archive/1/461673/100/0/threaded - http://www.vupen
us.com/archive/1/461638/100/0/threaded - http://www.securityfocus.com/archive/1/461673/100/0/threaded - http://www.vupen.com/english/advisories/2007/0807 - http://www.securityfocus.com/bid/22768 - https://www.exploit-db.com/exploits/3390 - http://secunia.com/advisories/24368
CVE ID: CVE-2007-1251 State: PUBLISHED Published: 2007-03-03T20:00:00 Last Updated: 2024-08-07T12:50:34.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the new_warning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVENTLOG is enabled, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the message handling. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24357 - http://sourceforge.net/project/shownotes.php?release_id=490561 - http://www.securityfocus.com/bid/22786 - https://exchange.xforce.ibmcloud.com/vulnerabi
hownotes.php?release_id=490561 - http://www.securityfocus.com/bid/22786 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32777 - http://www.vupen.com/english/advisories/2007/0815 - http://aluigi.altervista.org/adv/netrekfs-adv.txt - http://www.securityfocus.com/archive/1/461755/100/0/threaded
CVE ID: CVE-2007-1252 State: PUBLISHED Published: 2007-03-03T20:00:00 Last Updated: 2024-08-07T12:50:35.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32781 - http://www.securityfocus.com/bid/22782 - http://www.vupen.com/english/advisories/2007/0799 - http://www.securitytracker.com/id?101771
curityfocus.com/bid/22782 - http://www.vupen.com/english/advisories/2007/0799 - http://www.securitytracker.com/id?1017716 - ftp://ftp.symantec.com/public/english_us_canada/products/symantec_mail_security/5.0_smtp/updates/release_notes_p175.txt - http://osvdb.org/33840 - http://secunia.com/advisories/24371 - http://www.kb.cert.org/vuls/id/875633
CVE ID: CVE-2007-1253 State: PUBLISHED Published: 2007-03-03T20:00:00 Last Updated: 2024-08-07T12:50:34.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used in (b) Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted (1) KML or (2) KMZ file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24233 - http://secunia.com/secunia_research/2007-39/advisory/ - http://www.securityfocus.com/bid/22770 - http://secunia.com/advisories/24991 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
w.securityfocus.com/bid/22770 - http://secunia.com/advisories/24991 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32778 - http://www.vupen.com/english/advisories/2007/0798 - http://secunia.com/secunia_research/2007-40/advisory/ - http://secunia.com/advisories/24232 - http://security.gentoo.org/glsa/glsa-200704-19.xml - http://osvdb.org/33836 - http://www.securitytracker.com/id?1017714
CVE ID: CVE-2007-1254 State: PUBLISHED Published: 2007-03-03T20:00:00 Last Updated: 2024-08-07T12:50:35.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitrary SQL commands and obtain privileges via the p_skin parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24255 - http://securityreason.com/securityalert/2364 - http://www.securityfocus.com/archive/1/460947/100/0/threaded - http://osvdb.org/33537 - https://www.exploit-db.com/exploits/3352
CVE ID: CVE-2007-1255 State: PUBLISHED Published: 2007-03-03T20:00:00 Last Updated: 2024-08-07T12:50:35.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated administrators to execute arbitrary PHP code by uploading a crafted GIF smiley image with a .php extension via the uploadimage parameter to admin.php, which can be later accessed via a direct request for the file in smileys/. NOTE: this can be leveraged with a separate SQL injection issue for remote unauthenticated attacks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com
for remote unauthenticated attacks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24255 - http://securityreason.com/securityalert/2364 - http://osvdb.org/33538 - http://www.securityfocus.com/archive/1/460947/100/0/threaded - https://www.exploit-db.com/exploits/3352
CVE ID: CVE-2007-1256 State: PUBLISHED Published: 2007-03-03T20:00:00 Last Updated: 2024-08-07T12:50:35.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of CVE-2007-1092. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=117259225402112&w=2 - http://marc.info/?l=full-disclosure&m=117258301222007&w=2 - http://www.securityfocus.com/archive/1/461437/100/0/threa
- http://marc.info/?l=full-disclosure&m=117258301222007&w=2 - http://www.securityfocus.com/archive/1/461437/100/0/threaded - http://osvdb.org/35913
CVE ID: CVE-2007-1257 State: PUBLISHED Published: 2007-03-03T20:00:00 Last Updated: 2024-08-07T12:50:35.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtml - http://www.kb.cert.org/vuls/id/472412 - http://www.vupen.com/english/advisories/2007/0783 - http://secunia.com/advisories/24344 - http://www.securityfocus.com/bid/22751 - http://osvdb.org/33066
sories/2007/0783 - http://secunia.com/advisories/24344 - http://www.securityfocus.com/bid/22751 - http://osvdb.org/33066 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32750 - http://www.securitytracker.com/id?1017710
CVE ID: CVE-2007-1258 State: PUBLISHED Published: 2007-03-03T20:00:00 Last Updated: 2024-08-07T12:50:35.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 6500 and Cisco 7600 series systems; allows remote attackers on a local network segment to cause a denial of service (software reload) via a certain MPLS packet. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5869 - http://osvdb.org/33067 - http://www.vupen.com/english/advisories/2
earch/definition/oval%3Aorg.mitre.oval%3Adef%3A5869 - http://osvdb.org/33067 - http://www.vupen.com/english/advisories/2007/0782 - http://secunia.com/advisories/24348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32748 - http://www.cisco.com/warp/public/707/cisco-sa-20070228-mpls.shtml - http://www.securitytracker.com/id?1017709