Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-6395 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HashOver 2.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the 'hashover/scripts/widget-output.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96550 - https://github.com/jacobwb/hashover-next/issues/152
CVE ID: CVE-2017-6396 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96553 - https://github.com/WPO-Foundation/webpagetest/issues/820
CVE ID: CVE-2017-6397 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FlightAirMap v1.0-beta.10. The vulnerability exists due to insufficient filtration of user-supplied data in multiple parameters passed to several *-sub-menu.php pages. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ysurac/FlightAirMap/issues/275 - http://www.securityfocus.com/bid/96551
CVE ID: CVE-2017-6398 State: PUBLISHED Published: 2017-03-14T09:02:00 Last Updated: 2024-08-05T15:25:49.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600. An authenticated user can execute a terminal command in the context of the web server user (which is root). Besides, the default installation of IMSVA comes with default administrator credentials. The saveCert.imss endpoint takes several user inputs and performs blacklisting. After that, it uses them as arguments to a predefined operating-system command without proper sanitization. However, because of an improper blacklisting rule
to a predefined operating-system command without proper sanitization. However, because of an improper blacklisting rule, it's possible to inject arbitrary commands into it. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96859 - https://www.rapid7.com/db/modules/exploit/linux/http/trend_micro_imsva_exec
CVE ID: CVE-2017-6399 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client) can occur. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96490 - https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue4
CVE ID: CVE-2017-6400 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged command execution on NetBackup Server and Client can occur (on the local system). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96484 - https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue2
CVE ID: CVE-2017-6401 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96493 - https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue6
CVE ID: CVE-2017-6402 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Denial of service affecting NetBackup server can occur. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96485 - https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue3
CVE ID: CVE-2017-6403 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. NetBackup Cloud Storage Service uses a hardcoded username and password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96500 - https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue10
CVE ID: CVE-2017-6404 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7. There are world-writable log files, allowing destruction or spoofing of log data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96494 - https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue9
CVE ID: CVE-2017-6405 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue7 - http://www.securityfocus.com/bid/96488
CVE ID: CVE-2017-6406 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can occur. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96486 - https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue5
CVE ID: CVE-2017-6407 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client) can occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue1 - http://www.securitytracker.com/id/1037950 - http://www.securityfocus.com/bid/96489
CVE ID: CVE-2017-6408 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbx_exchange can occur when a local user connects to a socket before permissions are secured. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue8 - http://www.securitytracker.com/id/1037950 - http://www.securityfocus.com/bid/96491
CVE ID: CVE-2017-6409 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Unauthenticated CORBA interfaces permit inappropriate access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96504 - http://www.securitytracker.com/id/1037950 - https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue11
CVE ID: CVE-2017-6410 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially including Basic Authentication credentials, a query string, or PATH_INFO), which allows remote attackers to obtain sensitive information via a crafted PAC file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3849 - http://www.securityfocus.com/bid/96515 - https://www.kde.org/info/security/advisory-20170228-1.txt
CVE ID: CVE-2017-6411 State: PUBLISHED Published: 2017-03-06T06:11:00 Last Updated: 2024-08-05T15:25:49.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or firewall configuration or any password. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41478/ - http://www.securityfocus.com/bid/96560
CVE ID: CVE-2017-6412 State: PUBLISHED Published: 2017-03-30T17:00:00 Last Updated: 2024-08-05T15:25:49.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310. Additional Analyst Notes: - CVE Program Container: References: - http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.html - http://www.securityfocus.com/bid/97261 - https://www.qualys.com/2017/02/28/qsa-2017-02-28/qsa-2017-02-28.pdf - https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2
CVE ID: CVE-2017-6413 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-05T15:25:49.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an "AuthType oauth20" configuration, which allows remote attackers to bypass authentication via crafted HTTP traffic. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pingidentity/mod_auth_openidc/blob/master/ChangeLog - https://github.com/pingidentity/mod_auth_openidc/releases/tag/v2.1.6 - https://githu
uth_openidc/blob/master/ChangeLog - https://github.com/pingidentity/mod_auth_openidc/releases/tag/v2.1.6 - https://github.com/pingidentity/mod_auth_openidc/commit/21e3728a825c41ab41efa75e664108051bb9665e - http://www.securityfocus.com/bid/96549 - https://access.redhat.com/errata/RHSA-2019:2112 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EJXBG3DG2FUYFGTUTSJFMPIINVFKKB4Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V3HIGXMUKJGOBMAQAQPGC7G5YYWSUVA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTWUMQ46GZY3O4WU4JCF333LN53R2XQH/
CVE ID: CVE-2017-6414 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:25:49.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the vcard_apdu_new function in card_7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service (host memory consumption) via vectors related to allocating a new APDU object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96541 - http://www.openwall.com/lists/oss-security/2017/03/01/11 - https://bugzilla.redhat.com/show_bug.cgi?id=1427833 - https://access.redhat.com/errata/RHSA-2017:2408 - https://cgit.freedesktop.org/spice/libcacar
/show_bug.cgi?id=1427833 - https://access.redhat.com/errata/RHSA-2017:2408 - https://cgit.freedesktop.org/spice/libcacard/commit/?id=9113dc6a303604a2d9812ac70c17d076ef11886c - https://cgit.freedesktop.org/spice/libcacard/tree/NEWS?id=aaa5251791bf0b1640afcba77a7d79ea23c42d53
CVE ID: CVE-2017-6415 State: PUBLISHED Published: 2017-03-02T01:00:00 Last Updated: 2024-08-05T15:25:49.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DEX file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96523 - https://github.com/radare/radare2/issues/6872 - https://github.com/radareorg/radare2/commit/68338b71a563b24e62617bb629059adc0c94b230
CVE ID: CVE-2017-6416 State: PUBLISHED Published: 2017-03-06T02:00:00 Last Updated: 2024-08-05T15:25:49.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SysGauge 1.5.18. A buffer overflow vulnerability in SMTP connection verification leads to arbitrary code execution. The attack vector is a crafted SMTP daemon that sends a long 220 (aka "Service ready") string. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41479/ - http://www.securityfocus.com/bid/96568
CVE ID: CVE-2017-6417 State: PUBLISHED Published: 2017-03-21T16:00:00 Last Updated: 2024-08-05T15:25:49.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite 15.0 (and earlier), Internet Security Suite 15.0 (and earlier), and Free Security Suite 15.0 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avira process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier
oducts do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack. Additional Analyst Notes: - CVE Program Container: References: - http://cybellum.com/doubleagent-taking-full-control-antivirus/ - http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/ - http://w
g-full-control-antivirus/ - http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/ - http://www.securityfocus.com/bid/97021
CVE ID: CVE-2017-6418 State: PUBLISHED Published: 2017-08-07T03:00:00 Last Updated: 2024-08-05T15:25:49.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/heap-overflow/clamav_email_crash.md - https://bugzilla.clamav.net/show_bug.cgi?id=11797 - http://www.securityfocus.com/bid/100154 - https://github.com/vrtadmin/clamav-devel/commit/586a5180287262070637c8943f2f7efd652e4a2c - https://security.gentoo.org/glsa/201804
thub.com/vrtadmin/clamav-devel/commit/586a5180287262070637c8943f2f7efd652e4a2c - https://security.gentoo.org/glsa/201804-16
CVE ID: CVE-2017-6419 State: PUBLISHED Published: 2017-08-07T03:00:00 Last Updated: 2024-08-05T15:25:49.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted CHM file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/02/msg00014.html - http://www.debian.org/security/2017/dsa-3946 - https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/heap-overflow/clamav_chm_crash.md - https://bugzilla.c
- https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/heap-overflow/clamav_chm_crash.md - https://bugzilla.clamav.net/show_bug.cgi?id=11701 - https://security.gentoo.org/glsa/201804-16 - https://github.com/vrtadmin/clamav-devel/commit/a83773682e856ad6529ba6db8d1792e6d515d7f1
CVE ID: CVE-2017-6420 State: PUBLISHED Published: 2017-08-07T03:00:00 Last Updated: 2024-08-05T15:25:49.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.clamav.net/show_bug.cgi?id=11798 - https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/use-after-free/clamav-use-after-free-pe.md - https://security.gentoo.org/glsa/201804-16 - https://github.com/vrtadmin/clamav-devel/commit/dfc00cd3301a42b571454b51a6102eecf
//security.gentoo.org/glsa/201804-16 - https://github.com/vrtadmin/clamav-devel/commit/dfc00cd3301a42b571454b51a6102eecf58407bc
CVE ID: CVE-2017-6421 State: PUBLISHED Published: 2017-08-16T15:00:00Z Last Updated: 2024-09-17T01:01:00.314Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Copy without Checking Size of Input in Touch Description: In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user and can lead to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=be42c7ff1f0396484882451fd18f47144c8f1b6b - http://www.securitytracker.com/
aurora.org/quic/la//kernel/msm-4.4/commit/?id=be42c7ff1f0396484882451fd18f47144c8f1b6b - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2017-6423 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-17T03:48:44.324Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm kyro L2 driver. Product: Android. Versions: Android kernel. Android ID: A-32831370. References: QC-CR#1103158. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97387 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2017-6424 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-16T16:48:42.158Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-32086742. References: QC-CR#1102648. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97396 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2017-6425 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-16T20:42:47.194Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-32577085. References: QC-CR#1103689. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97362 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2017-6426 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-17T01:21:59.030Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in the Qualcomm SPMI driver. Product: Android. Versions: Android kernel. Android ID: A-33644474. References: QC-CR#1106842. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97355 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2017-6427 State: PUBLISHED Published: 2017-03-10T10:29:00 Last Updated: 2024-08-05T15:25:49.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Overflow was discovered in EvoStream Media Server 1.7.1. A crafted HTTP request with a malicious header will cause a crash. An example attack methodology may include a long message-body in a GET request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41547/ - http://www.securityfocus.com/bid/96820
CVE ID: CVE-2017-6429 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T15:25:49.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540221/100/0/threaded - https://github.com/appneta/tcpreplay/commit/d689d14dbcd768c028eab2fb378d849e543dcfe9 - http://www.securityfocus.com/bid/96579 - https://github.com/appneta/tcpreplay/issues/278 - https://github.com/appneta/tcpreplay/releases/tag/v4.2.0-b
bid/96579 - https://github.com/appneta/tcpreplay/issues/278 - https://github.com/appneta/tcpreplay/releases/tag/v4.2.0-beta1
CVE ID: CVE-2017-6430 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T15:25:49.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540223/100/0/threaded - http://www.securityfocus.com/bid/96582 - http://www.debian.org/security/2017/dsa-3874 - https://github.com/LocutusOfBorg/ettercap/commit/626dc56686f15f2dda13c48f78c2a666cb6d8506 - https://github.com/Ettercap/
https://github.com/LocutusOfBorg/ettercap/commit/626dc56686f15f2dda13c48f78c2a666cb6d8506 - https://github.com/Ettercap/ettercap/issues/782 - http://www.securitytracker.com/id/1038057