Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/Sep/msg00001.html - http://docs.info.apple.com/article.html?artnum=306586 - http://www.securityfocus.com/bid/25859 - http://www.securityfocus.com/bid/26444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36855 - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html - http://docs.info.apple.com/article.html?artnum=307041 - http://secunia.com/advisories/26983 - http://www.vupen.com/english/advisories/2007/3868 - http://www.vupen.com/english/advisories/2007/3287 - http://secunia.com/advisories/27643 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html - http://securitytracker.com/id?1018752
CVE ID: CVE-2007-3757 State: PUBLISHED Published: 2007-09-27T21:00:00 Last Updated: 2024-08-07T14:28:52.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iPhone 1.1.1 allows remote user-assisted attackers to trick the iPhone user into making calls to arbitrary telephone numbers via a crafted "tel:" link that causes iPhone to display a different number than the number that will be dialed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25854 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36856 - http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html - http://docs.info.apple.com/article.ht
36856 - http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html - http://docs.info.apple.com/article.html?artnum=306586 - http://osvdb.org/38534 - http://secunia.com/advisories/26983 - http://www.vupen.com/english/advisories/2007/3287 - http://securitytracker.com/id?1018752
CVE ID: CVE-2007-3758 State: PUBLISHED Published: 2007-09-27T22:00:00 Last Updated: 2024-08-07T14:28:52.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and in Mac OS X 10.4 through 10.4.10, allows remote attackers to set Javascript window properties for web pages that are in a different domain, which can be leveraged to conduct cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36857 - http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html - http://docs.info.apple.com/article.htm
6857 - http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html - http://docs.info.apple.com/article.html?artnum=306586 - http://www.securityfocus.com/bid/25857 - http://www.securityfocus.com/bid/26444 - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html - http://docs.info.apple.com/article.html?artnum=307041 - http://secunia.com/advisories/26983 - http://www.vupen.com/english/advisories/2007/3868 - http://www.vupen.com/english/advisories/2007/3287 - http://secunia.com/advisories/27643 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html - http://securitytracker.com/id?1018752
CVE ID: CVE-2007-3759 State: PUBLISHED Published: 2007-09-27T22:00:00 Last Updated: 2024-08-07T14:28:52.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the user does not expect. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html - http://osvdb.org/38532 - http://docs.info.apple.com/article.html?artnum=306586 - http://www.securityfocus.com/bid/25853 - http://secunia.com/advisories/26983 - https://exchange.xforce.ibmcloud.com/vulnerab
://www.securityfocus.com/bid/25853 - http://secunia.com/advisories/26983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36858 - http://securitytracker.com/id?1018752
CVE ID: CVE-2007-3760 State: PUBLISHED Published: 2007-09-27T22:00:00 Last Updated: 2024-08-07T14:28:52.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to inject arbitrary web script or HTML via frame tags. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html - http://docs.info.apple.com/article.html?artnum=306586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36859 - http://www.securityfocus.com/bid/26444
html?artnum=306586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36859 - http://www.securityfocus.com/bid/26444 - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html - http://docs.info.apple.com/article.html?artnum=307041 - http://secunia.com/advisories/26983 - http://www.vupen.com/english/advisories/2007/3868 - http://www.vupen.com/english/advisories/2007/3287 - http://secunia.com/advisories/27643 - http://www.securityfocus.com/bid/25850 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html - http://securitytracker.com/id?1018752
CVE ID: CVE-2007-3761 State: PUBLISHED Published: 2007-09-27T22:00:00 Last Updated: 2024-08-07T14:28:52.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1 allows remote attackers to inject arbitrary web script or HTML by causing Javascript events to be applied to a frame in another domain. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25851 - http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html - http://docs.info.apple.com/article.html?artnum=306586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36860 - http://osvdb.org/38530 -
.com/article.html?artnum=306586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36860 - http://osvdb.org/38530 - http://secunia.com/advisories/26983 - http://www.vupen.com/english/advisories/2007/3287
CVE ID: CVE-2007-3762 State: PUBLISHED Published: 2007-07-18T17:00:00 Last Updated: 2024-08-07T14:28:52.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a long (1) voice or (2) video RTP frame. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35466 - http://secunia.com/advisories/26099 - http://www.securitytracker.co
exchange.xforce.ibmcloud.com/vulnerabilities/35466 - http://secunia.com/advisories/26099 - http://www.securitytracker.com/id?1018407 - http://security.gentoo.org/glsa/glsa-200802-11.xml - http://secunia.com/advisories/29051 - http://bugs.gentoo.org/show_bug.cgi?id=185713 - http://www.vupen.com/english/advisories/2007/2563 - http://www.debian.org/security/2007/dsa-1358 - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://ftp.digium.com/pub/asa/ASA-2007-014.pdf - http://www.securityfocus.com/bid/24949
CVE ID: CVE-2007-3763 State: PUBLISHED Published: 2007-07-18T17:00:00 Last Updated: 2024-08-07T14:28:52.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted (1) LAGRQ or (2) LAGRP frame that contains information elements of IAX frames, which results in a NULL pointer dereference when Asterisk does not properly set an associated variable. Additional Analyst Notes: - CVE Program Container: References: - htt
erisk does not properly set an associated variable. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.digium.com/pub/asa/ASA-2007-015.pdf - http://secunia.com/advisories/26099 - http://www.securityfocus.com/bid/24950 - http://www.securitytracker.com/id?1018407 - http://security.gentoo.org/glsa/glsa-200802-11.xml - http://secunia.com/advisories/29051 - http://bugs.gentoo.org/show_bug.cgi?id=185713 - http://www.vupen.com/english/advisories/2007/2563 - http://www.debian.org/security/2007/dsa-1358 - http://www.novell.com/linux/security/advisories/2007_15_sr.html
CVE ID: CVE-2007-3764 State: PUBLISHED Published: 2007-07-18T17:00:00 Last Updated: 2024-08-07T14:28:52.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a certain data length value in a crafted packet, which results in an "overly large memcpy." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26099 - http://www.securityfocus.com/bid/24950 - http://www.securitytr
iner: References: - http://secunia.com/advisories/26099 - http://www.securityfocus.com/bid/24950 - http://www.securitytracker.com/id?1018407 - http://security.gentoo.org/glsa/glsa-200802-11.xml - http://secunia.com/advisories/29051 - http://bugs.gentoo.org/show_bug.cgi?id=185713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35478 - http://www.vupen.com/english/advisories/2007/2563 - http://ftp.digium.com/pub/asa/ASA-2007-016.pdf - http://www.debian.org/security/2007/dsa-1358 - http://www.novell.com/linux/security/advisories/2007_15_sr.html
CVE ID: CVE-2007-3765 State: PUBLISHED Published: 2007-07-18T17:00:00 Last Updated: 2024-08-07T14:28:52.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted STUN length attribute in a STUN packet sent on an RTP port. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26099 - http://www.securityfocus.com/bid/24950 - http://www.securitytracker.com/id?1018407 - http://ftp.digium.com/pub/asa/ASA-2007-017.pdf - https://exchange.
d/24950 - http://www.securitytracker.com/id?1018407 - http://ftp.digium.com/pub/asa/ASA-2007-017.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/35480 - http://www.vupen.com/english/advisories/2007/2563
CVE ID: CVE-2007-3768 State: PUBLISHED Published: 2007-07-15T21:00:00 Last Updated: 2024-08-07T14:28:52.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service (restart) via a malformed response to a PASV command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26061 - http://osvdb.org/37909 - http://securityreason.com/securityalert/2883 - http://www.vupen.com/english/advisories/2007/2528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35376 - http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20070710/98374694/
e.ibmcloud.com/vulnerabilities/35376 - http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20070710/98374694/attachment-0030.txt - http://marc.info/?l=full-disclosure&m=118409539009277&w=2
CVE ID: CVE-2007-3769 State: PUBLISHED Published: 2007-07-15T21:00:00 Last Updated: 2024-08-07T14:28:52.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the mirrored server management interface in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to inject arbitrary web script or HTML via a malformed response without a status code, which is reflected to the user in the resulting error message. NOTE: this can be leveraged for root access via a sequence of steps involving web script that creates a new FTP user account. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26061 - http://li
ccount. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26061 - http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20070710/98374694/attachment-0031.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/35378 - http://www.vupen.com/english/advisories/2007/2528 - http://osvdb.org/37911 - http://marc.info/?l=full-disclosure&m=118409539009277&w=2
CVE ID: CVE-2007-3770 State: PUBLISHED Published: 2007-07-15T21:00:00 Last Updated: 2024-08-07T14:28:52.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35379 - http://www.securityfocus.com/bid/24889 - http://osvdb.org/38082 - http://secunia.com/advisories/26392 - http://secunia.com/advisories/26418 - http://www.ubunt
- http://osvdb.org/38082 - http://secunia.com/advisories/26392 - http://secunia.com/advisories/26418 - http://www.ubuntu.com/usn/usn-497-1 - http://www.debian.org/security/2007/dsa-1393 - http://security.gentoo.org/glsa/glsa-200708-07.xml - http://bugs.gentoo.org/show_bug.cgi?id=184886 - http://secunia.com/advisories/26037 - http://secunia.com/advisories/27374
CVE ID: CVE-2007-3771 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T14:28:52.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service (service crash) via a long (1) To, (2) From, or (3) Subject header in an outbound SMTP e-mail message. NOTE: the original vendor advisory referenced CVE-2006-3456, but this was an error. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018371 - http://secunia.com/advisories/26036
otes: - CVE Program Container: References: - http://securitytracker.com/id?1018371 - http://secunia.com/advisories/26036 - http://securitytracker.com/id?1018367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35354 - http://www.vupen.com/english/advisories/2007/2506 - http://www.securityfocus.com/bid/24802 - http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11b.html - http://osvdb.org/36115
CVE ID: CVE-2007-3772 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T14:28:52.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in news/show.php in PsNews 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the newspath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4174 - http://osvdb.org/37684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35374
CVE ID: CVE-2007-3773 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T14:28:52.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators. Additional Analyst Notes: - CVE Program Container: References: - http://chxsecurity.org/advisories/adv-2-mid.txt - http://www.securityfocus.com/archive/1/473192/100/0/threaded - http://osvdb.org/38692 - http://securityreason.com/securityalert/2896
CVE ID: CVE-2007-3774 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T14:28:52.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dvbbs 7.1.0 SP1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Data/Dvbbs7.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39747 - http://securityreason.com/securityalert/2886 - http://www.securityfocus.com/archive/1/473374/100/0/threaded
CVE ID: CVE-2007-3775 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T14:28:52.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allows remote attackers to cause a denial of service (loss of cluster services) via unspecified vectors, aka (1) CSCsj09859 and (2) CSCsj19985. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018368 - http://www.osvdb.org/36123 - http://www.cisco.com/warp/public/707/cisco-sa-20070711-voip.shtml - http://secunia.com/advisories/26039 - http://www.securit
://www.cisco.com/warp/public/707/cisco-sa-20070711-voip.shtml - http://secunia.com/advisories/26039 - http://www.securityfocus.com/bid/24867 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35341 - http://www.vupen.com/english/advisories/2007/2511
CVE ID: CVE-2007-3776 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T14:28:52.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka (1) CSCsj20668 and (2) CSCsj25962. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018368 - http://www.cisco.com/warp/public/707/cisco-sa-20070711-voip.shtml - http://secunia.com/advisories/26039 - http://www.securityfocus.com/bid/24
warp/public/707/cisco-sa-20070711-voip.shtml - http://secunia.com/advisories/26039 - http://www.securityfocus.com/bid/24867 - http://www.vupen.com/english/advisories/2007/2511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35344 - http://osvdb.org/36124
CVE ID: CVE-2007-3777 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T14:28:52.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic DeviceIoControl handler. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35345 - http://securitytracker.com/id?1018362 - http://securityreason.
ps://exchange.xforce.ibmcloud.com/vulnerabilities/35345 - http://securitytracker.com/id?1018362 - http://securityreason.com/securityalert/2887 - http://www.securityfocus.com/bid/24870 - http://www.securityfocus.com/archive/1/473360/100/0/threaded - http://secunia.com/advisories/25998 - http://www.vupen.com/english/advisories/2007/2518
CVE ID: CVE-2007-3778 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T14:28:52.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the messageSignedText parameter to the gpg_check_sign_pgp_mime function in gpg_hook_functions.php. NOTE: a parameter value can be set in the contents of an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26035 - http://osvdb.org/37931 - http://lists.immunitysec.com/pipermail/dailydave/2007-July/004456.html - http
dvisories/26035 - http://osvdb.org/37931 - http://lists.immunitysec.com/pipermail/dailydave/2007-July/004456.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=330 - http://www.securityfocus.com/bid/24874 - http://www.attrition.org/pipermail/vim/2007-July/001704.html - http://www.vupen.com/english/advisories/2007/2513 - http://lists.immunitysec.com/pipermail/dailydave/2007-July/004452.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35363 - http://www.attrition.org/pipermail/vim/2007-July/001710.html
CVE ID: CVE-2007-3779 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T14:28:52.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP local file inclusion vulnerability in gpg_pop_init.php in the G/PGP (GPG) Plugin before 20070707 for Squirrelmail allows remote attackers to include and execute arbitrary local files, related to the MOD parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.braverock.com/gpg/statcvs/commit_log.html - http://www.braverock.com/gpg/cvs/viewcvs.cgi/gpg/gpg_pop_init.php.diff?r1=1.14&r2=1.15 - http://osvdb.org/37930 - http://www.attrition.org/pipermail/vim/2007-July/001703.html
CVE ID: CVE-2007-3780 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T14:28:52.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mysql.com/bug.php?id=28984 - http://secunia.com/advisories/26710 - http://secunia.com/advisories/27823 - http://www.redhat.com/support/errata/RHSA-2007-0875.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:177 - http://www.novell.com/linux/security/advisories/2007_19_sr.h
/www.mandriva.com/security/advisories?name=MDKSA-2007:177 - http://www.novell.com/linux/security/advisories/2007_19_sr.html - http://www.securitytracker.com/id?1018629 - http://www.redhat.com/support/errata/RHSA-2007-0894.html - http://secunia.com/advisories/26073 - http://secunia.com/advisories/26621 - http://secunia.com/advisories/26498 - http://osvdb.org/36732 - http://lists.mysql.com/announce/470 - http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html - http://www.securityfocus.com/bid/25017 - http://www.securityfocus.com/archive/1/473874/100/0/threaded - http://www.vupen.com/english/advisories/2008/1000/references - http://security.gentoo.org/glsa/glsa-200708-10.xml - http://secunia.c
upen.com/english/advisories/2008/1000/references - http://security.gentoo.org/glsa/glsa-200708-10.xml - http://secunia.com/advisories/26987 - http://secunia.com/advisories/25301 - http://www.debian.org/security/2007/dsa-1413 - https://issues.rpath.com/browse/RPL-1536 - https://usn.ubuntu.com/528-1/ - http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html - http://secunia.com/advisories/27155 - http://secunia.com/advisories/26430 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11058
CVE ID: CVE-2007-3781 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T14:28:52.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mysql.com/bug.php?id=25578 - http://secunia.com/advisories/28343 - http://osvdb.org/37783 - http://www.redhat.com/support/errata/RHSA-2007-0894.html - http://secunia.com/advisories/26073 - http://secunia.com/advisories/