Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/forum/forum.php?forum_id=727807 - http://sourceforge.net/project/shownotes.php?release_id=533628&group_id=188052 - http://secunia.com/advisories/26533 - http://myimei.com/security/2007-08-16/olate-download-341adminphpauthentication-bypassing.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36088 - http://www.securityfocus.com/bid/25343 - http://www.securityfocus.com/archive/1/477223/100/0/threaded - http://www.securityfocus.com/archive/1/476760/100/0/threaded - http://securityreason.com/securityalert/3028 - http://osvdb.org/39714
CVE ID: CVE-2007-4420 State: PUBLISHED Published: 2007-08-18T21:00:00 Last Updated: 2024-08-07T14:53:55.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer Component 5.1 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the HttpDownloadFile method, a different vulnerability than CVE-2007-3168 and CVE-2007-3169. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4290 - http://www.securityfocus.com/bid/25344 - https://exchange.xforce.ibmcloud.com/vulnerabil
.exploit-db.com/exploits/4290 - http://www.securityfocus.com/bid/25344 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36055 - http://osvdb.org/38794 - http://www.ocxt.com/archives/39
CVE ID: CVE-2007-4421 State: PUBLISHED Published: 2007-08-18T21:00:00 Last Updated: 2024-08-07T14:53:55.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Admin.php in Olate Download (od) 3.4.1 allows remote attackers to execute arbitrary SQL commands via an OD3_AutoLogin cookie. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=188052&release_id=533628 - http://www.securityfocus.com/bid/25384 - http://sourceforge.net/forum/forum.php?forum_id=727807 - http://sourceforge.net/project/shownotes.php?release_id=533628&group_id=188052 - http://secunia.com/advisories/26533 - http://myime
ceforge.net/project/shownotes.php?release_id=533628&group_id=188052 - http://secunia.com/advisories/26533 - http://myimei.com/security/2007-08-16/olate-download-341adminphpauthentication-bypassing.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36089 - http://www.securityfocus.com/archive/1/477223/100/0/threaded - http://osvdb.org/39712 - http://www.securityfocus.com/archive/1/476760/100/0/threaded - http://securityreason.com/securityalert/3028
CVE ID: CVE-2007-4422 State: PUBLISHED Published: 2007-08-18T21:00:00 Last Updated: 2024-08-07T14:53:55.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key (PSK) authentication is enabled, generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26511 - http://www.securitytracker.com/id?1018578 - http://www.securityfocus.com/bid/25338 - http://www.symantec.com/avcenter/security/Content/2007.08.16.html - http://www.osvdb
//www.securityfocus.com/bid/25338 - http://www.symantec.com/avcenter/security/Content/2007.08.16.html - http://www.osvdb.org/36489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36081 - http://www.vupen.com/english/advisories/2007/2909
CVE ID: CVE-2007-4423 State: PUBLISHED Published: 2007-08-18T21:00:00 Last Updated: 2024-08-07T14:53:55.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the AUTH_LIST_GROUPS_FOR_AUTHID function in IBM DB2 UDB 9.1 before Fixpak 3 allows attackers to cause a denial of service and possibly execute arbitrary code via a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ01828 - http://www-1.ibm.com/support/docview.wss?uid=swg21255607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36111 - http://www.attrition.org/pipermail/vim/2007-August/001765.html - http://www.vu
orce.ibmcloud.com/vulnerabilities/36111 - http://www.attrition.org/pipermail/vim/2007-August/001765.html - http://www.vupen.com/english/advisories/2007/2912 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36065 - http://www.appsecinc.com/resources/alerts/db2/2007-01.shtml - http://www.securityfocus.com/bid/25339 - http://secunia.com/advisories/26471 - http://www.securitytracker.com/id?1018640 - http://www.securityfocus.com/archive/1/478313/100/0/threaded
CVE ID: CVE-2007-4424 State: PUBLISHED Published: 2007-08-18T22:00:00 Last Updated: 2024-08-07T14:53:55.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari for Windows 3.0.3 and earlier does not prompt the user before downloading a file, which allows remote attackers to download arbitrary files to the desktop of a client system via certain HTML, as demonstrated by a filename in the DATA attribute of an OBJECT element. NOTE: it could be argued that this is not a vulnerability because a dangerous file is not actually launched, but as of 2007, it is generally accepted that web browsers should prompt users before saving dangerous content. Additional Analyst Notes: - CVE
nerally accepted that web browsers should prompt users before saving dangerous content. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/476675/100/0/threaded - http://www.securityfocus.com/archive/1/477180/100/0/threaded - http://securityreason.com/securityalert/3022 - http://www.securitytracker.com/id?1018575 - http://www.securityfocus.com/archive/1/476690/100/0/threaded
CVE ID: CVE-2007-4425 State: PUBLISHED Published: 2007-08-20T18:00:00 Last Updated: 2024-08-07T14:53:55.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Live for Speed (LFS) demo, S1, and S2 allow remote authenticated users to (1) cause a denial of service (server crash) and probably execute arbitrary code via an ID 3 packet with a long nickname field, and (2) cause a denial of service (server crash) via an ID 10 packet containing a long string corresponding to an unavailable track. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2975 - http://aluigi.altervista/adv/lfsbof-adv.txt - http:
r: References: - http://www.vupen.com/english/advisories/2007/2975 - http://aluigi.altervista/adv/lfsbof-adv.txt - http://www.securityfocus.com/archive/1/476516/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065265.html - http://securityreason.com/securityalert/3030 - http://www.securityfocus.com/bid/25327 - http://secunia.com/advisories/26569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36021
CVE ID: CVE-2007-4426 State: PUBLISHED Published: 2007-08-20T18:00:00 Last Updated: 2024-08-07T14:53:55.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Live for Speed (LFS) S1 and S2 allows remote attackers to cause a denial of service (server crash) via (1) a certain 0x00 byte in a pre-login ID 3 packet, which triggers a NULL dereference; or (2) a pre-login ID 5 packet that lacks certain strings, which triggers an invalid pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36020
https://exchange.xforce.ibmcloud.com/vulnerabilities/36019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36020 - http://aluigi.altervista/adv/lfsbof-adv.txt - http://www.securityfocus.com/archive/1/476516/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065265.html - http://securityreason.com/securityalert/3030 - http://secunia.com/advisories/26569
CVE ID: CVE-2007-4427 State: PUBLISHED Published: 2007-08-20T19:00:00 Last Updated: 2024-08-07T14:53:55.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the login page redirection logic in the Cache' Server Page (CSP) implementation in InterSystems Cache' 2007.1.0.369.0 and 2007.1.1.420.0 allows remote authenticated users to modify data on a server, related to encoding of certain parameter values by this redirection logic, aka MAK2116. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/57d7c80dde26fda3/7845e246da5b095b - http://osvdb.org/40178 - http://secun
intersystems-public-cache/browse_thread/thread/57d7c80dde26fda3/7845e246da5b095b - http://osvdb.org/40178 - http://secunia.com/advisories/26541 - http://www.intersystems.com/support/cflash/2007announce.html
CVE ID: CVE-2007-4428 State: PUBLISHED Published: 2007-08-20T19:00:00 Last Updated: 2024-08-07T14:53:55.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lhaz 1.33 allows remote attackers to execute arbitrary code via unknown vectors, as actively exploited in August 2007 by the Exploit-LHAZ.a gzip file, a different issue than CVE-2006-4116. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25351 - http://osvdb.org/39629 - http://vil.mcafeesecurity.com/vil/content/v_142976.htm - http://secunia.com/advisories/26532 - http://www.vupen.com/english/advisories/2007/2930 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36120 - http
- http://www.vupen.com/english/advisories/2007/2930 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36120 - http://www.avertlabs.com/research/blog/index.php/2007/08/17/targeted-zero-day-attack-against-free-tools-lhaz/
CVE ID: CVE-2007-4429 State: PUBLISHED Published: 2007-08-20T19:00:00 Last Updated: 2024-08-07T14:53:55.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sending long URIs, as claimed to be actively exploited on 20070817 using a "call to a specific number." NOTE: this identifier is for the en.securitylab.ru disclosure. According to the vendor, this issue is separate from the "sign-on issues" that reduced Skype service on 20070817, which appears to be a site-specific problem. As of 20070821, it is not clear whether this issue is simply a symptom of
, which appears to be a site-specific problem. As of 20070821, it is not clear whether this issue is simply a symptom of the larger sign-on problem. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477156/100/0/threaded - http://www.securityfocus.com/archive/1/477240/100/0/threaded - http://securityreason.com/securityalert/3032 - http://en.securitylab.ru/poc/extra/301419.php - http://heartbeat.skype.com/2007/08/what_happened_on_august_16.html - http://blogs.csoonline.com/the_skype_mystery_why_blame_the_august_windows_updates - http://www.securitylab.ru/news/301422.php - http://heartbeat.skype.com/2007/08/where_we_are_at_1100_gmt.html - h
dates - http://www.securitylab.ru/news/301422.php - http://heartbeat.skype.com/2007/08/where_we_are_at_1100_gmt.html - http://en.securitylab.ru/poc/301420.php - http://www.securityfocus.com/archive/1/477178/100/0/threaded - http://www.securityfocus.com/archive/1/476942/100/0/threaded
CVE ID: CVE-2007-4430 State: PUBLISHED Published: 2007-08-20T19:00:00 Last Updated: 2024-08-07T14:53:55.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environments with anonymous telnet and Looking Glass access. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26798 - http://www.securityfocus.com/bid/25352 - http://www.securitytracker.com/id?10186
- http://secunia.com/advisories/26798 - http://www.securityfocus.com/bid/25352 - http://www.securitytracker.com/id?1018685 - https://puck.nether.net/pipermail/cisco-nsp/2007-August/043002.html - http://www.heise-security.co.uk/news/94526/ - https://puck.nether.net/pipermail/cisco-nsp/2007-August/043010.html - http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=WAN%2C%20Routing%20and%20Switching&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddf7bc9 - http://www.cisco.com/en/US/products/products_security_response09186a00808bb91c.html - http://www.vupen.com/english/advisories/2007/3136
CVE ID: CVE-2007-4431 State: PUBLISHED Published: 2007-08-20T19:00:00 Last Updated: 2024-08-07T14:53:55.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to external domains, via a certain body.innerHTML property value, aka "classic JavaScript frame hijacking." Additional Analyst Notes: - CVE Program Container: References: - http://sla.ckers.org/forum/read.php?3%2C14151 - http://www.thespanner.co.uk/2007/08/17/safari-beta-zero-day/ - http://osvdb.org/46720 - http://www.0x000000.com/index.php?i=420 - http://www.securityfo
7/08/17/safari-beta-zero-day/ - http://osvdb.org/46720 - http://www.0x000000.com/index.php?i=420 - http://www.securityfocus.com/bid/25355
CVE ID: CVE-2007-4432 State: PUBLISHED Published: 2007-08-20T19:00:00 Last Updated: 2024-08-07T14:53:55.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the wrapper scripts for the (1) rug, (2) zen-updater, (3) zen-installer, and (4) zen-remover programs on SUSE Linux 10.1 and Enterprise 10 allows local users to gain privileges via modified (a) LD_LIBRARY_PATH and (b) MONO_GAC_PREFIX environment variables. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/46783 - http://www.novell.com/linux/security/advisories/2007_17_sr.html - http://secunia.com/advisories/26543 - http://osvdb.org/46781 - http://osvdb.org/
x/security/advisories/2007_17_sr.html - http://secunia.com/advisories/26543 - http://osvdb.org/46781 - http://osvdb.org/46784 - http://osvdb.org/46782
CVE ID: CVE-2007-4433 State: PUBLISHED Published: 2007-08-20T19:00:00 Last Updated: 2024-08-07T14:53:55.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in textfilesearch.aspx in the Text File Search ASP.NET edition allows remote attackers to inject arbitrary web script or HTML via the search field. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3048 - http://osvdb.org/37734 - http://www.securityfocus.com/bid/25349 - http://www.packetstormsecurity.org/0708-exploits/aspnet-xss.txt
CVE ID: CVE-2007-4434 State: PUBLISHED Published: 2007-08-20T19:00:00 Last Updated: 2024-08-07T14:53:55.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in textfilesearch.asp in the Text File Search ASP (Classic) edition allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.org/0708-exploits/tfsc-xss.txt - http://www.securityfocus.com/bid/25350 - http://securityreason.com/securityalert/3046 - http://osvdb.org/37733
CVE ID: CVE-2007-4435 State: PUBLISHED Published: 2007-08-20T22:00:00 Last Updated: 2024-08-07T14:53:55.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) account-inbox.php, (2) account-settings.php, and possibly (3) backend/functions.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36119 - http://www.osvdb.org/36600 - http://www.securityfocus.com/bid/25369 - http://secunia.com/advisories/26504 - http://www.torrenttrader.org/index.php?showtopic=6255
curityfocus.com/bid/25369 - http://secunia.com/advisories/26504 - http://www.torrenttrader.org/index.php?showtopic=6255 - http://www.torrenttrader.org/index.php?showtopic=5776 - http://www.osvdb.org/36598 - http://www.osvdb.org/36599
CVE ID: CVE-2007-4436 State: PUBLISHED Published: 2007-08-20T22:00:00 Last Updated: 2024-08-07T14:53:55.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Drupal Project module before 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue tracking module before 5.x-1.0, 4.7.x-2.4, and 4.7.x-1.4 do not properly enforce permissions, which allows remote attackers to (1) obtain sensitive via the Tracker Module and the Recent posts page; (2) obtain project names via unspecified vectors; (3) obtain sensitive information via the statistics pages; and (4) read CVS project activity. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25364 -
ject activity. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25364 - http://secunia.com/advisories/26510 - http://osvdb.org/39632 - http://drupal.org/node/168760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36105
CVE ID: CVE-2007-4437 State: PUBLISHED Published: 2007-08-20T22:00:00 Last Updated: 2024-08-07T14:53:55.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25362 - http://bugs.gentoo.org/show_bug.cgi?id=189607 - http://osvdb.org/38276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36121 - http://secunia.com/advisories/27253 - http://www.ampache.org/announce/3_3_3_5.p
rce.ibmcloud.com/vulnerabilities/36121 - http://secunia.com/advisories/27253 - http://www.ampache.org/announce/3_3_3_5.php - http://security.gentoo.org/glsa/glsa-200710-13.xml - http://secunia.com/advisories/26542
CVE ID: CVE-2007-4438 State: PUBLISHED Published: 2007-08-20T22:00:00 Last Updated: 2024-08-07T14:53:56.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Ampache before 3.3.3.5 allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=189607 - http://secunia.com/advisories/27253 - http://www.ampache.org/announce/3_3_3_5.php - http://security.gentoo.org/glsa/glsa-200710-13.xml - http://secunia.com/advisories/26542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36122
CVE ID: CVE-2007-4439 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:55.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in popup_window.php in Squirrelcart 1.x.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site_isp_root parameter, probably related to cart.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36112 - http://www.securityfocus.com/bid/25382 - http://osvdb.org/37701
CVE ID: CVE-2007-4440 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:55.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitrary code via a long AUTH CRAM-MD5 string. NOTE: this might overlap CVE-2006-5961. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26519 - http://archives.neohapsis.com/archives/fulldisclosure/2007-08/0341.html - http://www.vupen.com/english/advisories/2007/2918 - https://www.exploit-db.com/exploits/4294 - http://www.pmail.com
ml - http://www.vupen.com/english/advisories/2007/2918 - https://www.exploit-db.com/exploits/4294 - http://www.pmail.com/m32_451.htm - http://www.securityfocus.com/bid/25357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36117 - http://www.securitytracker.com/id?1018587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36299
CVE ID: CVE-2007-4441 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:55.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbitrary code via a long string in the filename argument to the win_browse_file function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36118 - https://www.exploit-db.com/exploits/4293 - http://www.securityfocus.com/bid/25414
CVE ID: CVE-2007-4442 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:55.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service (application crash) via a request for a long .gif filename in the images/ directory, related to conversion from Unicode to ASCII. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36102 - http://www.securityfocus.com/archive/1/477026/100/0/threaded - http://secunia.com/advisor
ud.com/vulnerabilities/36102 - http://www.securityfocus.com/archive/1/477026/100/0/threaded - http://secunia.com/advisories/26506 - http://securityreason.com/securityalert/3039 - http://www.securityfocus.com/bid/25374 - http://aluigi.org/poc/unrwebdos.zip - http://aluigi.org/adv/unrwebdos-adv.txt
CVE ID: CVE-2007-4443 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:56.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service (continuous beep and server slowdown) via a string containing many 0x07 characters in (1) a request to the images/ directory, (2) the Content-Type field, (3) a HEAD request, and possibly other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477026/100/0/threaded - http://secunia.com/advisories/26506 - http://securityr
- http://www.securityfocus.com/archive/1/477026/100/0/threaded - http://secunia.com/advisories/26506 - http://securityreason.com/securityalert/3039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36103 - http://www.securityfocus.com/archive/1/478053/100/200/threaded - http://www.securityfocus.com/archive/1/478064/100/200/threaded - http://aluigi.org/poc/unrwebdos.zip - http://aluigi.org/adv/unrwebdos-adv.txt
CVE ID: CVE-2007-4444 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:55.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID (1) 0x80 or (2) 0x88 to UDP port 34297, related to the buffer containing the server version number. Additional Analyst Notes: - CVE Program Container: References: - http://forum.racesimcentral.com/showthread.php?t=298659 - http://www.securityfocus.com/bid/25358 - http://securityreason.com/securityalert/3037 - http://aluigi.org/poc/rfactorx.zip - http://www.rfactor.net/?page=news_09-26_1255 -