Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4293 State: PUBLISHED Published: 2007-08-09T21:00:00 Last Updated: 2024-08-07T14:53:54.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device crash) via (1) "abnormal" MGCP messages, aka CSCsd81407; and (2) a large facsimile packet, aka CSCej20505. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36668 - http://www.vupen.com/english/advisories/2007/2816 - http://securitytracker.com/id?1018533 - http://www.securityfocus.com/bid/25239 - http://secunia.com/advisories/26363 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.o
5239 - http://secunia.com/advisories/26363 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5801 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080899653.shtml - http://osvdb.org/36669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35907
CVE ID: CVE-2007-4294 State: PUBLISHED Published: 2007-08-09T21:00:00 Last Updated: 2024-08-07T14:53:55.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018538 - http://www.vupen.com/english/advisories/2007/2816 - http://secunia.com/advisories/26362 - http://www.securityfocus.com/bid/25239 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080899653.shtm
://www.securityfocus.com/bid/25239 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080899653.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5851 - http://osvdb.org/36693
CVE ID: CVE-2007-4295 State: PUBLISHED Published: 2007-08-09T21:00:00 Last Updated: 2024-08-07T14:53:55.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80749. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36667 - http://www.vupen.com/english/advisories/2007/2816 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5075 - http://securitytracker.com/id?1018533 - http://www.securityfocus.com/bid/25239 - http://secunia.com/advisories/26363 - http://www.cisco.com/en/US
m/id?1018533 - http://www.securityfocus.com/bid/25239 - http://secunia.com/advisories/26363 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080899653.shtml
CVE ID: CVE-2007-4296 State: PUBLISHED Published: 2007-08-10T20:00:00 Last Updated: 2024-08-07T14:53:55.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in assp.pl in Anti-Spam SMTP Proxy Server (ASSP) 1.3.3 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=722845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35910 - http://osvdb.org/39524 - http://www.vupen.com/english/advisories/2007/2834 - http://secunia.com/advisories/26316 - http://www.securityfocus.com/bid/25249
CVE ID: CVE-2007-4297 State: PUBLISHED Published: 2007-08-10T20:00:00 Last Updated: 2024-08-07T14:53:54.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in yorumkaydet.asp in Dersimiz Haber Ekleme Modulu allow remote attackers to inject arbitrary web script or HTML via the (1) yazan, (2) mail, and (3) yorum parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26380 - http://www.securityfocus.com/bid/25250 - http://osvdb.org/37537 - http://www.vupen.com/english/advisories/2007/2831 - https://exchange.xfo
yfocus.com/bid/25250 - http://osvdb.org/37537 - http://www.vupen.com/english/advisories/2007/2831 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35911 - http://www.packetstormsecurity.org/0708-exploits/dersimiz-xss.txt
CVE ID: CVE-2007-4301 State: PUBLISHED Published: 2007-08-13T19:00:00 Last Updated: 2024-08-07T14:53:55.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the management interface in WebCart 2.20 through 2.25 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.cgis.biz/script_web_cart/notice200708.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35946 - http://jvn.jp/jp/JVN%2366303599/index.html - http://secunia.com/advisories/26382 - http://www.securityfocus.com/bid/25261 - http://osvdb.org/36441 - http:
dex.html - http://secunia.com/advisories/26382 - http://www.securityfocus.com/bid/25261 - http://osvdb.org/36441 - http://www.securitytracker.com/id?1018554
CVE ID: CVE-2007-4302 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit (GSWTK) allow local users to defeat system call interposition and possibly gain privileges or bypass auditing. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25251 - http://www.watson.org/~robert/2007woot/ - http://secunia.com/advisories/26469
CVE ID: CVE-2007-4303 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in (1) certain rules and (2) argument copying during VM protection, in CerbNG for FreeBSD 4.8 allow local users to defeat system call interposition and possibly gain privileges or bypass auditing, as demonstrated by modifying command lines in log-exec.cb. Additional Analyst Notes: - CVE Program Container: References: - http://www.watson.org/~robert/2007woot/ - http://secunia.com/advisories/26474 - http://www.securityfocus.com/bid/25259
CVE ID: CVE-2007-4304 State: PUBLISHED Published: 2007-08-13T21:00:00Z Last Updated: 2024-09-16T23:25:53.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages". Additional Analyst Notes: - CVE Program Container: References: - http://www.watson.org/~robert/2007woot/
CVE ID: CVE-2007-4305 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26479 - http://www.watson.org/~robert/2007woot/ - http://www.securityfocus.com/bid/25258
CVE ID: CVE-2007-4306 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers to inject arbitrary web script or HTML via the (1) unlim_num_rows, (2) sql_query, or (3) pos parameter to (a) tbl_export.php; the (4) session_max_rows or (5) pos parameter to (b) sql.php; the (6) username parameter to (c) server_privileges.php; or the (7) sql_query parameter to (d) main.php. NOTE: vector 5 might be a regression or incomplete fix for CVE-2006-6942.7. Additional Analyst Notes: - CVE Program Container: References: - ht
a regression or incomplete fix for CVE-2006-6942.7. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25268 - http://pridels-team.blogspot.com/2007/08/phpmyadmin-multiple-xss-vuln.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:199
CVE ID: CVE-2007-4307 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:56.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Storesprite 7 and earlier allow remote attackers to inject arbitrary web script or HTML via the next parameter to (1) addaddress.php, (2) editshipdetails.php, (3) register.php, or (4) login.php in secure/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35933 - http://www.securityfocus.com/bid/25266 - http://osvdb.org/36460 - http://www.storesprite.com/forum/comments.php?DiscussionID=272&page=1#Item_0 -
com/bid/25266 - http://osvdb.org/36460 - http://www.storesprite.com/forum/comments.php?DiscussionID=272&page=1#Item_0 - http://www.vupen.com/english/advisories/2007/2853 - http://pridels-team.blogspot.com/2007/08/storesprite-xss-vuln.html - http://osvdb.org/36459 - http://osvdb.org/36461 - http://secunia.com/advisories/26408 - http://osvdb.org/36458
CVE ID: CVE-2007-4308 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://lists.vmware.com/pipermail/security-announce/2008/000005.html - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html - http://www.redhat.com/support/errata/RHSA-2007-0940.html - http://sec
opensuse-security-announce/2008-03/msg00007.html - http://www.redhat.com/support/errata/RHSA-2007-0940.html - http://secunia.com/advisories/27747 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8872 - http://secunia.com/advisories/27212 - http://secunia.com/advisories/26643 - http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2 - http://www.redhat.com/support/errata/RHSA-2007-1049.html - http://secunia.com/advisories/28806 - http://secunia.com/advisories/27913 - http://secunia.com/advisories/27322 - http://www.vupen.com/english/advisories/2007/2786 - http://www.debian.org/security/2007/dsa-1363 - http://secunia.com/advisories/26651 - h
om/english/advisories/2007/2786 - http://www.debian.org/security/2007/dsa-1363 - http://secunia.com/advisories/26651 - http://www.redhat.com/support/errata/RHSA-2007-0939.html - http://secunia.com/advisories/26322 - http://secunia.com/advisories/29032 - http://www.ubuntu.com/usn/usn-510-1 - http://securitytracker.com/id?1019470 - http://www.debian.org/security/2008/dsa-1504 - http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm - http://www.ubuntu.com/usn/usn-509-1 - http://secunia.com/advisories/26647 - http://secunia.com/advisories/27912 - http://www.securityfocus.com/archive/1/488457/100/0/threaded - http://secunia.com/advisories/33280 - http://www.vupen.com/english/advisories/200
.com/archive/1/488457/100/0/threaded - http://secunia.com/advisories/33280 - http://www.vupen.com/english/advisories/2008/0637 - http://lkml.org/lkml/2007/7/23/195 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html - http://www.securityfocus.com/bid/25216 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html - http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/29058 - http://www.redhat.com/support/errata/RHSA-2008-0787.html - http://www.ubuntu.com/usn/usn-508-1 - http://secunia.com/advisories/27436 - http://secunia.com/advisories/29570 - http://www.mand
w.ubuntu.com/usn/usn-508-1 - http://secunia.com/advisories/27436 - http://secunia.com/advisories/29570 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:195
CVE ID: CVE-2007-4309 State: PUBLISHED Published: 2007-08-13T21:00:00Z Last Updated: 2024-09-16T17:59:14.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remote authenticated administrators to obtain a cleartext notes.id password by setting the notes.ini (1) KFM_ShowEntropy and (2) Debug_Outfile debug variables, a different vulnerability than CVE-2005-2696. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018433 - http://www.heise-security.co.uk/news/92958 - http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21266085
CVE ID: CVE-2007-4310 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The finger daemon (in.fingerd) in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a single digit, as demonstrated by a "finger 9@host" command, a different vulnerability than CVE-2001-1503. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474927/100/100/threaded - http://securityreason.com/securityalert/2996 - http://www.securityfocus.com/archive/1/474858/100/100/threaded
CVE ID: CVE-2007-4311 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git%3Ba=commit%3Bh=faa3369ac2ea7feb0dd266b6a5e8d6ab153cf925 - http://git.kernel.org/?p=linux/ke
it/stable/linux-2.4.34.y.git%3Ba=commit%3Bh=faa3369ac2ea7feb0dd266b6a5e8d6ab153cf925 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git%3Ba=commit%3Bh=bd67d4c7b11cc33ebdc346bc8926d255b354cd64 - http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.6 - http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35 - http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/29058 - http://www.vupen.com/english/advisories/2007/2690 - http://www.securityfocus.com/bid/25029
CVE ID: CVE-2007-4312 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL commands via the article_id parameter in a "print articles" action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35943 - https://www.exploit-db.com/exploits/4275 - http://www.securityfocus.com/bid/25264
CVE ID: CVE-2007-4313 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, a different vector than CVE-2006-2392, CVE-2006-3076, and CVE-2006-6958. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4276 - http://secunia.com/advisories/26414 - http://www.securityfocus.com/archive/1/476432/100/0/threaded - https://exchange.xforce.ibmcloud.c
com/advisories/26414 - http://www.securityfocus.com/archive/1/476432/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35945 - http://osvdb.org/36442 - http://www.vupen.com/english/advisories/2007/2861 - http://www.securityfocus.com/bid/25264
CVE ID: CVE-2007-4314 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: pixlie.php in Pixlie 1.7 allows remote attackers to trigger the reading and JPEG image processing of files in a remote directory tree via a URL in the root parameter. NOTE: this can be leveraged for traffic amplification or other denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4278
CVE ID: CVE-2007-4315 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecified vectors, as demonstrated by "Purple Pill". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26448 - http://blogs.zdnet.com/security/?p=438 - http://www.securityfocus.com/bid/25265 - http://blogs.zdnet.com/security/?p=427
CVE ID: CVE-2007-4316 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:54.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device has a certain default password, which allows remote attackers to perform administrative actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.louhi.fi/advisory/zyxel_070810.txt - http://www.securityfocus.com/archive/1/476031/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35914 - http://securityreason.com/securityalert/3002 - http://secunia.com/advisories/26381 - http://osvdb.org/37669
CVE ID: CVE-2007-4317 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allow remote attackers to perform certain actions as administrators, as demonstrated by a request to Forms/General_1 with the (1) sysSystemName and (2) sysDomainName parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.louhi.fi/advisory/zyxel_070810.txt - http://www.securityfocus.com/archive/1/476031/100/0/threaded - http://osvdb.org/37670 - http://s
sory/zyxel_070810.txt - http://www.securityfocus.com/archive/1/476031/100/0/threaded - http://osvdb.org/37670 - http://securityreason.com/securityalert/3002 - http://secunia.com/advisories/26381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35913 - http://www.securityfocus.com/bid/25262
CVE ID: CVE-2007-4318 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Forms/General_1 in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to inject arbitrary web script or HTML via the sysSystemName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.louhi.fi/advisory/zyxel_070810.txt - http://osvdb.org/38721 - http://www.securityfocus.com/archive/1/476031/100/0/threaded - http://securityreason.com/securityalert/3002 - http://secunia.com/advi
curityfocus.com/archive/1/476031/100/0/threaded - http://securityreason.com/securityalert/3002 - http://secunia.com/advisories/26381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35913 - http://www.securityfocus.com/bid/25262
CVE ID: CVE-2007-4319 State: PUBLISHED Published: 2007-08-13T21:00:00 Last Updated: 2024-08-07T14:53:55.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a denial of service (infinite reboot loop) via invalid configuration data. NOTE: this issue might not cross privilege boundaries, and it might be resultant from CSRF; if so, then it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.louhi.fi/advisory/zyxel_070810.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/35941 - http://osv
http://www.louhi.fi/advisory/zyxel_070810.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/35941 - http://osvdb.org/42448 - http://www.securityfocus.com/archive/1/476031/100/0/threaded - http://securityreason.com/securityalert/3002 - http://www.securityfocus.com/bid/25262
CVE ID: CVE-2007-4320 State: PUBLISHED Published: 2007-08-14T00:00:00 Last Updated: 2024-08-07T14:53:55.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the adminfolder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26383 - http://www.vupen.com/english/advisories/2007/2833 - http://www.securityfocus.com/bid/25248 - http://osvdb.org/36426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35908 - https://www.exploit-db.com/exploits/4273
CVE ID: CVE-2007-4321 State: PUBLISHED Published: 2007-08-14T00:00:00 Last Updated: 2024-08-07T14:53:55.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol version identification containing an IP address string, a different vector than CVE-2006-6302. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1456 - http://secunia.com/advisories/232
- CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1456 - http://secunia.com/advisories/23237 - http://osvdb.org/42484 - http://www.securityfocus.com/bid/25117 - http://secunia.com/advisories/28374 - http://bugs.gentoo.org/show_bug.cgi?id=181214 - http://security.gentoo.org/glsa/glsa-200707-13.xml - http://www.ossec.net/en/attacking-loganalysis.html
CVE ID: CVE-2007-4322 State: PUBLISHED Published: 2007-08-14T00:00:00 Last Updated: 2024-08-07T14:53:55.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlockHosts before 2.0.4 does not properly parse (1) sshd and (2) vsftpd log files, which allows remote attackers to add arbitrary deny entries to the /etc/hosts.allow file and cause a denial of service by adding arbitrary IP addresses to a daemon log file, as demonstrated by connecting through ssh with a client protocol version identification containing an IP address string, or connecting through ftp with a username containing an IP address string, different vectors than CVE-2007-2765. Additional Analyst Notes: - CVE Program C
sername containing an IP address string, different vectors than CVE-2007-2765. Additional Analyst Notes: - CVE Program Container: References: - http://www.aczoom.com/tools/blockhosts/CHANGES - http://www.ossec.net/en/attacking-loganalysis.html - http://osvdb.org/36515