Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3301 State: PUBLISHED Published: 2007-06-20T22:00:00 Last Updated: 2024-08-07T14:14:12.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers to execute arbitrary SQL commands via the errorcode parameter. NOTE: a patch may have been released privately between April and June 2007. NOTE: this issue may overlap CVE-2007-3273. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24528 - http://www.securityfocus.com/archive/1/471726/100/0/threaded - http://secunia.com/advisories/25707 - https://exchange.xforce.ibmcloud.com/vuln
us.com/archive/1/471726/100/0/threaded - http://secunia.com/advisories/25707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34939 - http://osvdb.org/38475
CVE ID: CVE-2007-3302 State: PUBLISHED Published: 2007-07-26T00:00:00 Last Updated: 2024-08-07T14:14:12.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified "scriptable functions." Additional Analyst Notes: - CVE Program Container: References: - http://supportconnectw.ca.com/public/etrust/etrust_intrusion/infodocs/eid-callervilnsecnot.asp - http://www.securityfocus.com/bid/25050 - https://exchange.xforce.ibmclou
t_intrusion/infodocs/eid-callervilnsecnot.asp - http://www.securityfocus.com/bid/25050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35565 - http://secunia.com/advisories/26134 - http://www.securitytracker.com/id?1018447 - http://www.securityfocus.com/archive/1/474599/100/0/threaded - http://www.vupen.com/english/advisories/2007/2640 - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149811 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=568
CVE ID: CVE-2007-3303 State: PUBLISHED Published: 2007-06-20T22:00:00 Last Updated: 2024-08-07T14:14:12.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service via certain code sequences executed in a worker process that (1) stop request processing by killing all worker processes and preventing creation of replacements or (2) hang the system by forcing the master process to fork an arbitrarily large number of worker processes. NOTE: This might be an inherent design limitation of Apache with respect to worker processes in hosted environments. Additional Analyst Notes: - CVE Prog
esign limitation of Apache with respect to worker processes in hosted environments. Additional Analyst Notes: - CVE Program Container: References: - http://security.psnc.pl/files/apache_report.pdf - http://osvdb.org/37050 - http://www.securityfocus.com/archive/1/469899/100/0/threaded - http://securityreason.com/securityalert/2814 - http://www.securityfocus.com/archive/1/471832/100/0/threaded - http://www.securityfocus.com/bid/24215
CVE ID: CVE-2007-3304 State: PUBLISHED Published: 2007-06-20T22:00:00 Last Updated: 2024-08-07T14:14:12.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28606 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245111 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:142 - http://secunia.
.com/bugzilla/show_bug.cgi?id=245111 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:142 - http://secunia.com/advisories/26822 - http://www.vupen.com/english/advisories/2007/4305 - http://www.vupen.com/english/advisories/2007/3420 - http://www.redhat.com/support/errata/RHSA-2007-0557.html - http://osvdb.org/38939 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK52702 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:140 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01182588 - http://secunia.com/advisories/25827 - http://secunia.com/advisories/25920 - http://secunia.com/advisories/26993 - http://secunia.com/advisories/28212 - http://se
p://secunia.com/advisories/25920 - http://secunia.com/advisories/26993 - http://secunia.com/advisories/28212 - http://security.psnc.pl/files/apache_report.pdf - http://www.securitytracker.com/id?1018304 - http://secunia.com/advisories/27563 - http://secunia.com/advisories/27732 - http://svn.apache.org/viewvc?view=rev&revision=547987 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103179-1 - http://secunia.com/advisories/27209 - http://www.redhat.com/support/errata/RHSA-2007-0662.html - http://secunia.com/advisories/26790 - http://rhn.redhat.com/errata/RHSA-2007-0556.html - http://httpd.apache.org/security/vulnerabilities_20.html - http://www.novell.com/linux/security/advisories/20
556.html - http://httpd.apache.org/security/vulnerabilities_20.html - http://www.novell.com/linux/security/advisories/2007_61_apache2.html - http://www.securityfocus.com/archive/1/469899/100/0/threaded - http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.html - http://marc.info/?l=apache-httpd-dev&m=118252946632447&w=2 - http://secunia.com/advisories/26759 - http://www.vupen.com/english/advisories/2007/3494 - http://www-1.ibm.com/support/search.wss?rs=0&q=PK50467&apar=only - http://www.trustix.org/errata/2007/0026/ - http://www.redhat.com/errata/RHSA-2007-0532.html - http://httpd.apache.org/security/vulnerabilities_22.html - https://issues.rpath.com/browse/RPL-171
RHSA-2007-0532.html - http://httpd.apache.org/security/vulnerabilities_22.html - https://issues.rpath.com/browse/RPL-1710 - http://mail-archives.apache.org/mod_mbox/httpd-dev/200706.mbox/%3c20070629141032.GA15192%40redhat.com%3e - http://www.securityfocus.com/archive/1/505990/100/0/threaded - http://securityreason.com/securityalert/2814 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11589 - http://secunia.com/advisories/27121 - http://www.securityfocus.com/archive/1/471832/100/0/threaded - http://www.vupen.com/english/advisories/2008/0233 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html - http://secunia.com
8/0233 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html - http://secunia.com/advisories/26211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35095 - http://secunia.com/advisories/26443 - http://lists.vmware.com/pipermail/security-announce/2009/000062.html - http://httpd.apache.org/security/vulnerabilities_13.html - http://security.gentoo.org/glsa/glsa-200711-06.xml - http://secunia.com/advisories/28224 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200032-1 - http://secunia.com/advisories/25830 - http://www.securityfocus.com/bid/24215 - http://support.avaya.com/elmodocs2/security/ASA-2007-363.htm - http://www.ubuntu.com/usn/usn-
urityfocus.com/bid/24215 - http://support.avaya.com/elmodocs2/security/ASA-2007-363.htm - http://www.ubuntu.com/usn/usn-499-1 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://secunia.com/advisories/26508 - http://support.avaya.com/elmodocs2/security/ASA-2007-353.htm - http://secunia.com/advisories/26842 - http://www.vupen.com/english/advisories/2007/3283 - ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc - http://www-1.ibm.com/support/docview.wss?uid=swg1PK53984 - http://www.vupen.com/english/advisories/2007/2727 - http://secunia.com/advisories/26611 - http://secunia.com/advisories/26273 - http://bugs.gentoo.org/show_bug.cgi?id=186219 - http://www.v
om/advisories/26611 - http://secunia.com/advisories/26273 - http://bugs.gentoo.org/show_bug.cgi?id=186219 - http://www.vupen.com/english/advisories/2007/3100 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01182588 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a
a2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.h
baf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd
e.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c80
9d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://l
pache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2007-3305 State: PUBLISHED Published: 2007-06-21T00:38:00 Last Updated: 2024-08-07T14:14:12.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Cerulean Studios Trillian 3.x before 3.1.6.0 allows remote attackers to execute arbitrary code via a message sent through the MSN protocol, or possibly other protocols, with a crafted UTF-8 string, which triggers improper memory allocation for word wrapping when a window width is used as a buffer size, a different vulnerability than CVE-2007-2478. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/187033 - http://www.vupen.com/english/advisories/2007/22
Program Container: References: - http://www.kb.cert.org/vuls/id/187033 - http://www.vupen.com/english/advisories/2007/2246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34918 - http://www.securityfocus.com/bid/24523 - http://www.securitytracker.com/id?1018265 - http://blog.ceruleanstudios.com/?p=150 - http://osvdb.org/37446 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=545 - http://secunia.com/advisories/25736
CVE ID: CVE-2007-3306 State: PUBLISHED Published: 2007-06-21T00:38:00 Last Updated: 2024-08-07T14:14:12.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows remote attackers to execute arbitrary PHP code via a URL in the config[include_dir] parameter, a different vector than CVE-2006-4489. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4079 - http://osvdb.org/38465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34919
CVE ID: CVE-2007-3307 State: PUBLISHED Published: 2007-06-21T00:38:00 Last Updated: 2024-08-07T14:14:12.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in game_listing.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34909 - https://www.exploit-db.com/exploits/4078 - http://secunia.com/advisories/25716 - http://osvdb.org/36303 - http://www.securityfocus.com/bid/24519
CVE ID: CVE-2007-3308 State: PUBLISHED Published: 2007-06-21T00:38:00 Last Updated: 2024-08-07T14:14:12.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34907 - http://securitytracker.com/id?1018260 - http://www.securityfocus.com/archive/1/471641/100/0/threaded - http://osvdb.org/40617 - http://securityvulns.ru/Rdocument271.html
CVE ID: CVE-2007-3309 State: PUBLISHED Published: 2007-06-21T00:38:00 Last Updated: 2024-08-07T14:14:12.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute arbitrary PHP code during (1) creation or (2) editing of a message. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018260 - http://www.securityfocus.com/archive/1/471641/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34908 - http://securityvulns.ru/Rdocument271.html - http://osvdb.org/40433
CVE ID: CVE-2007-3310 State: PUBLISHED Published: 2007-06-21T00:38:00 Last Updated: 2024-08-07T14:14:12.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in arama.asp in TDizin allows remote attackers to inject arbitrary web script or HTML via the ara parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34929 - http://www.securityfocus.com/bid/24515 - http://secunia.com/advisories/25733 - http://osvdb.org/36375
CVE ID: CVE-2007-3311 State: PUBLISHED Published: 2007-06-21T10:00:00 Last Updated: 2024-08-07T14:14:12.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3588 - http://www.securityfocus.com/archive/1/463916/100/0/threaded - http://securityreason.com/securityalert/2817
CVE ID: CVE-2007-3312 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/plugin_manager.php in Jasmine CMS 1.0 allows remote authenticated administrators to include and execute arbitrary local files a .. (dot dot) in the u parameter. NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24546 - http://www.vupen.com/english/advisories/2007/2264 - http://secunia.com/advisories/25737 - https://www.ex
com/bid/24546 - http://www.vupen.com/english/advisories/2007/2264 - http://secunia.com/advisories/25737 - https://www.exploit-db.com/exploits/4081 - http://osvdb.org/37067
CVE ID: CVE-2007-3313 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the login_username parameter to login.php or (2) the item parameter to news.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34936 - http://www.vupen.com/english/advisories/2007/2264 - http://secunia.com/advisories/25737 - http://osvdb.org/37069 - https://www.exploit-db.com/exploits/4081 - htt
007/2264 - http://secunia.com/advisories/25737 - http://osvdb.org/37069 - https://www.exploit-db.com/exploits/4081 - http://osvdb.org/37068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34937
CVE ID: CVE-2007-3314 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portable Executable Viewer 1.00 (English Trial), allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25732 - http://osvdb.org/37579 - http://www.securityfocus.com/bid/24557 - http://www.vupen.com/english/advisories/2007/2268 - https://exchange.xforce.i
- http://www.securityfocus.com/bid/24557 - http://www.vupen.com/english/advisories/2007/2268 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34938 - http://vuln.sg/salamander25-en.html
CVE ID: CVE-2007-3315 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the serverPath parameter to bodyTemplate.php in (1) templates/Classic/, (2) templates/Classic Guestbook/, (3) templates/DarkNights/, and (4) templates/Simplistic/, different vectors than CVE-2007-3271. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program
mation is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25728 - http://osvdb.org/36891
CVE ID: CVE-2007-3316 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in (1) an Ogg/Vorbis file, (2) an Ogg/Theora file, (3) a CDDB entry for a CD Digital Audio (CDDA) file, or (4) Service Announce Protocol (SAP) multicast packets. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200707-12.xml - http://www.securityfocus.com/archive/1/47193
ntainer: References: - http://security.gentoo.org/glsa/glsa-200707-12.xml - http://www.securityfocus.com/archive/1/471933/100/0/threaded - http://osvdb.org/37382 - http://www.securityfocus.com/bid/24555 - http://www.kb.cert.org/vuls/id/200928 - http://secunia.com/advisories/26269 - http://osvdb.org/37381 - http://osvdb.org/37380 - http://www.isecpartners.com/advisories/2007-001-vlc.txt - http://www.vupen.com/english/advisories/2007/2262 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14600 - http://osvdb.org/37379 - http://secunia.com/advisories/25753 - http://www.debian.org/security/2007/dsa-1332 - http://secunia.com/advisories/25980 - http://www.vid
m/advisories/25753 - http://www.debian.org/security/2007/dsa-1332 - http://secunia.com/advisories/25980 - http://www.videolan.org/sa0702.html
CVE ID: CVE-2007-3317 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier allows remote attackers to cause a denial of service (device crash) via a malformed SIP message. Additional Analyst Notes: - CVE Program Container: References: - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=296& - http://secunia.com/advisories/25727 - http://www.securityfocus.com/bid/24541 - http://support.avaya.com/elmodocs2/security/ASA-2007-241.htm - https://exch
7 - http://www.securityfocus.com/bid/24541 - http://support.avaya.com/elmodocs2/security/ASA-2007-241.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/34952 - http://osvdb.org/38113
CVE ID: CVE-2007-3318 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier allows remote attackers to cause a denial of service (call reception outage) via a malformed SIP message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25727 - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=295& - https://exchange.xforce.ibmcloud.com/vulnerabilities/35072 - http://www.securityfocus.co
es%2Cthreat_advisory&tid=295& - https://exchange.xforce.ibmcloud.com/vulnerabilities/35072 - http://www.securityfocus.com/bid/24530 - http://support.avaya.com/elmodocs2/security/ASA-2007-241.htm - http://osvdb.org/38114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34952
CVE ID: CVE-2007-3319 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication, which allows remote attackers to conduct man-in-the-middle attacks and hijack or intercept communications. Additional Analyst Notes: - CVE Program Container: References: - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=299& - http://support.avaya.com/elmodocs2/security/ASA-2007-263.htm - http://osvdb.org/38115 - htt