Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5560 State: PUBLISHED Published: 2007-10-18T20:00:00Z Last Updated: 2024-09-17T01:40:30.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.irmplc.com/index.php/111-Vendor-Alerts
CVE ID: CVE-2007-5561 State: PUBLISHED Published: 2007-10-18T20:00:00Z Last Updated: 2024-09-17T03:44:10.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175. NOTE: this might be the same issue as CVE-2007-0282 or CVE-2007-0280, but there are insufficient details to be sure. Additional Analyst Notes: - CVE Program Container: References: - http://www.irmplc.com/index.php/111-Vendor-Alerts -
re. Additional Analyst Notes: - CVE Program Container: References: - http://www.irmplc.com/index.php/111-Vendor-Alerts - http://www.irmplc.com/index.php/142-Advisory-021 - http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2007.html
CVE ID: CVE-2007-5562 State: PUBLISHED Published: 2007-10-18T20:00:00 Last Updated: 2024-08-07T15:31:59.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/welcome (aka the login page) in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26073 - http://securitytracker.com/id?1018817 - http://www.smash-the-stack.net/articles/Netgear_SSL312_XSS_Advisory.txt - http://www.vupen.com/english/advisories/2007/3542 - http://arch
the-stack.net/articles/Netgear_SSL312_XSS_Advisory.txt - http://www.vupen.com/english/advisories/2007/3542 - http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0358.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/37216 - http://secunia.com/advisories/27238
CVE ID: CVE-2007-5563 State: PUBLISHED Published: 2007-10-18T20:00:00 Last Updated: 2024-08-07T15:39:12.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in VirtueMart before 1.0.13 allows remote attackers to execute arbitrary PHP code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41758 - http://secunia.com/advisories/27250 - http://virtuemart.net/index.php?option=com_content&task=view&id=260&Itemid=57 - http://www.securityfocus.com/bid/26085
CVE ID: CVE-2007-5564 State: PUBLISHED Published: 2007-10-18T20:00:00 Last Updated: 2024-08-07T15:39:12.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NSSboard (formerly Simple PHP Forum) 6.1 allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags when BBcode is disabled; or the (2) user, (3) email, or (4) Real Name fields in a profile. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37218 - http://securityreason.com/securityalert/3246 - http://www.securityfocus.com/archive/1/482312/100/0/threaded - http://www.securityfocus.com/
on.com/securityalert/3246 - http://www.securityfocus.com/archive/1/482312/100/0/threaded - http://www.securityfocus.com/bid/26081
CVE ID: CVE-2007-5565 State: PUBLISHED Published: 2007-10-18T21:00:00Z Last Updated: 2025-01-17T14:57:19.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions.php in phpSCMS 0.0.1-Alpha1 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue is disputed by CVE because the identified code is in a function that is not accessible via direct request Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://arfis.wordpress.com/2007/09/13/rfi-02-phpscms/
CVE ID: CVE-2007-5566 State: PUBLISHED Published: 2007-10-18T21:00:00 Last Updated: 2024-08-07T15:39:12.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PHPBlog 0.1 Alpha allow remote attackers to execute arbitrary PHP code via a URL in the blog_localpath parameter to (1) includes/functions.php or (2) includes/email.php. NOTE: this issue is disputed by CVE because the identified code is in functions that are not accessible via direct request Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/13/rfi-02-phpblog/ - http://osvdb.org/39392
CVE ID: CVE-2007-5567 State: PUBLISHED Published: 2007-10-18T21:00:00 Last Updated: 2024-08-07T15:39:12.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in _lib/fckeditor/upload_config.php in Galmeta Post 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the DDS parameter. Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/13/rfi-02-galmeta-post/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/37412 - http://www.securityfocus.com/bid/26329 - http://www.attrition.org/pipermail/vim/2007-October/001836.html
CVE ID: CVE-2007-5568 State: PUBLISHED Published: 2007-10-18T21:00:00 Last Updated: 2024-08-07T15:39:12.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module (FWSM) 3.1(5) and earlier, allow remote attackers to cause a denial of service (device reload) via a crafted MGCP packet, aka CSCsi90468 (appliance) and CSCsi00694 (FWSM). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37259 - http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda56.shtml - http://www.securitytracker.com/id?1018827 - http://s
m/en/US/products/products_security_advisory09186a00808dda56.shtml - http://www.securitytracker.com/id?1018827 - http://secunia.com/advisories/27193 - http://www.securityfocus.com/bid/26109 - http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda61.shtml - http://www.securitytracker.com/id?1018825 - http://www.vupen.com/english/advisories/2007/3531 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37257 - http://www.vupen.com/english/advisories/2007/3530 - http://www.securitytracker.com/id?1018826 - http://secunia.com/advisories/27236 - http://www.securityfocus.com/bid/26104
CVE ID: CVE-2007-5569 State: PUBLISHED Published: 2007-10-18T21:00:00 Last Updated: 2024-08-07T15:39:13.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a denial of service (device reload) via a crafted TLS packet, aka CSCsg43276 and CSCsh97120. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda56.shtml - http://www.securitytracker.com/id?1018827 - http://secunia.com/advisories/27193 - http://www.vupen.com/english/advisories/2007/3531 - http://www.securi
id?1018827 - http://secunia.com/advisories/27193 - http://www.vupen.com/english/advisories/2007/3531 - http://www.securitytracker.com/id?1018826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37260 - http://www.securityfocus.com/bid/26104
CVE ID: CVE-2007-5570 State: PUBLISHED Published: 2007-10-18T21:00:00 Last Updated: 2024-08-07T15:39:12.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Firewall Services Module (FWSM) 3.2(1), and 3.1(5) and earlier, allows remote attackers to cause a denial of service (device reload) via a crafted HTTPS request, aka CSCsi77844. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26109 - http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda61.shtml - http://www.securitytracker.com/id?1018825 - http://www.vupen.com/english/advisories/2007/3530 - http://secunia.com/advisories/27236 - https://exchange.xfor
018825 - http://www.vupen.com/english/advisories/2007/3530 - http://secunia.com/advisories/27236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37251
CVE ID: CVE-2007-5571 State: PUBLISHED Published: 2007-10-18T21:00:00 Last Updated: 2024-08-07T15:39:12.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26109 - http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda61.shtml - http://www.securitytracker.com/id?1018825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37258 - http://www.vupen.com/e
www.securitytracker.com/id?1018825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37258 - http://www.vupen.com/english/advisories/2007/3530 - http://secunia.com/advisories/27236
CVE ID: CVE-2007-5572 State: PUBLISHED Published: 2007-10-18T21:00:00 Last Updated: 2024-08-07T15:39:12.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Blog (SPHPBlog) 0.4.9 allow remote attackers to perform delete actions as administrators via (1) the block_id parameter to add_block.php or (2) the link_id parameter to add_link.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37238 - http://hackish.altervista.org/forum/viewtopic.php?t=221 - http://www.securityfocus.com/ar
ud.com/vulnerabilities/37238 - http://hackish.altervista.org/forum/viewtopic.php?t=221 - http://www.securityfocus.com/archive/1/482422/100/0/threaded - http://secunia.com/advisories/27264
CVE ID: CVE-2007-5573 State: PUBLISHED Published: 2007-10-18T21:00:00 Last Updated: 2024-08-07T15:39:13.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27288 - http://www.securityfocus.com/bid/26110 - https://www.exploit-db.com/exploits/4544 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37270
CVE ID: CVE-2007-5574 State: PUBLISHED Published: 2007-10-18T21:00:00 Last Updated: 2024-08-07T15:39:12.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37262 - https://www.exploit-db.com/exploits/4543 - http://www.securityfocus.com/bid/26112
CVE ID: CVE-2007-5575 State: PUBLISHED Published: 2007-10-18T21:00:00 Last Updated: 2024-08-07T15:39:12.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in 1024 CMS 1.2.5 allows remote attackers to perform some actions as administrators, as demonstrated by (1) an unspecified action that creates a file containing PHP code and (2) unspecified use of the forum component. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27259 - https://exchange.xforce.ibmcloud.com/vulnerabili
Program Container: References: - http://secunia.com/advisories/27259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37267
CVE ID: CVE-2007-5576 State: PUBLISHED Published: 2007-10-18T21:00:00 Last Updated: 2024-08-07T15:39:13.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34290 - http://dev2dev.bea.com/pub/advisory/226 - http://www.vupen.com/english/advisories/2007/1813
CVE ID: CVE-2007-5577 State: PUBLISHED Published: 2007-10-18T21:00:00 Last Updated: 2024-08-07T15:39:12.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Section Name form fields in the Section Manager component, or (3) multiple unspecified fields in New Menu Item. Additional Analyst Notes: - CVE Program Container: References: - http://www.joomla.org/content/view/3677/1/ - http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=5654 - http://osvdb.org/37173 - http://www.j
acode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=5654 - http://osvdb.org/37173 - http://www.joomla.org/content/view/3670/78/ - http://secunia.com/advisories/25804 - http://www.securityfocus.com/bid/24663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35119
CVE ID: CVE-2007-5578 State: PUBLISHED Published: 2007-10-18T22:00:00 Last Updated: 2024-08-07T15:39:13.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Basic Analysis and Security Engine (BASE) before 1.3.8 sends a redirect to the web browser but does not exit, which allows remote attackers to bypass authentication via (1) base_main.php, (2) base_qry_alert.php, and possibly other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24315 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063767.html - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0031.html - http://secunia.com/advisories/25518 -
7.html - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0031.html - http://secunia.com/advisories/25518 - http://www.osvdb.org/35243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34724 - http://sourceforge.net/project/shownotes.php?group_id=103348&release_id=521723
CVE ID: CVE-2007-5579 State: PUBLISHED Published: 2007-10-18T22:00:00 Last Updated: 2024-08-07T15:39:13.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user's password by calculating the confirmationcode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34512 - http://www.securityfocus.com/bid/24158 - http://archives.neohapsis.com/archives/bugtraq/2007-05/0383.html
CVE ID: CVE-2007-5580 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T15:39:13.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port (1) 139 or (2) 445. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3425 - http://secunia.com/advisories/27947 - http://www.vupen.com/english/advisories/2007/4103 - http://www.securitytracker.com/id?1019046 - ht
om/advisories/27947 - http://www.vupen.com/english/advisories/2007/4103 - http://www.securitytracker.com/id?1019046 - http://www.cisco.com/en/US/products/products_security_advisory09186a008090a434.shtml - http://osvdb.org/39521 - http://www.securityfocus.com/archive/1/484669/100/100/threaded - http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsl00618 - http://www.securityfocus.com/bid/26723 - http://www.nsfocus.com/english/homepage/research/0702.htm
CVE ID: CVE-2007-5581 State: PUBLISHED Published: 2007-11-08T02:00:00 Last Updated: 2024-08-07T15:39:13.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName and (2) LastName parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sr-20071107-mp.shtml - http://secunia.com/advisories/26462 - http://securitytracker.com/id?1018904 - http://www.securityfocus.com/bid/26364 - https://exchange.xforce.ibmcloud.com/v
http://securitytracker.com/id?1018904 - http://www.securityfocus.com/bid/26364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38298 - http://www.vupen.com/english/advisories/2007/3772
CVE ID: CVE-2007-5582 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T15:39:12.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019043 - http://www.vupen.com/english/advisories/2007/4102 - http://www.liquidmatrix.org/blog/2007/12/05/advisory-cross-site-scripting-in-ciscoworks/ - http://www.securityfocus.
2 - http://www.liquidmatrix.org/blog/2007/12/05/advisory-cross-site-scripting-in-ciscoworks/ - http://www.securityfocus.com/archive/1/484609/100/0/threaded - http://securityreason.com/securityalert/3449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38862 - http://www.securityfocus.com/bid/26708 - http://www.cisco.com/warp/public/707/cisco-sr-20071205-cw.shtml - http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk69289 - http://secunia.com/advisories/27902
CVE ID: CVE-2007-5583 State: PUBLISHED Published: 2007-12-18T01:00:00 Last Updated: 2024-08-07T15:39:13.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service ("486 Busy" responses or device reboot) via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26711 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058932.html - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058837.htm
/full-disclosure/2007-December/058932.html - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058837.html - https://www.exploit-db.com/exploits/4692 - http://seclists.org/fulldisclosure/2007/Dec/0196.html - http://www.securitytracker.com/id?1019059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38853
CVE ID: CVE-2007-5584 State: PUBLISHED Published: 2007-12-20T02:00:00 Last Updated: 2024-08-07T15:39:12.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Firewall Services Module (FWSM) 3.2(3) allows remote attackers to cause a denial of service (device reload) via crafted "data in the control-plane path with Layer 7 Application Inspections." Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a008091b11d.shtml - http://www.securityfocus.com/bid/26941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39135 - http://secunia.com/advisories/28175 - http://www.osv
6941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39135 - http://secunia.com/advisories/28175 - http://www.osvdb.org/39298 - http://www.securitytracker.com/id?1019120 - http://www.vupen.com/english/advisories/2007/4270
CVE ID: CVE-2007-5585 State: PUBLISHED Published: 2007-10-19T20:00:00 Last Updated: 2024-08-07T15:39:13.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: xscreensaver 5.03 and earlier, when running without xscreensaver-gl-extras (GL extras) installed, crashes when /usr/bin/xscreensaver-gl-helper does not exist and a user attempts to unlock the screen, which allows attackers with physical access to gain access to the locked session. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=336331 - http://secunia.com/advisories/27392 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00336.html - http://ww
ia.com/advisories/27392 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00336.html - http://www.securityfocus.com/bid/26204
CVE ID: CVE-2007-5586 State: REJECTED Published: 2007-10-19T21:00:00 Last Updated: 2007-11-09T10:00:00 Description: No description available.
CVE ID: CVE-2007-5587 State: PUBLISHED Published: 2007-10-19T21:00:00 Last Updated: 2024-08-07T15:39:13.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild. Additional Analyst Notes: - CVE Program Container: References: - http://www.reversemode.com/index.php?option=com_mamblog&Itemid=15&task=show&action=view&id=43&Itemid=1
er: References: - http://www.reversemode.com/index.php?option=com_mamblog&Itemid=15&task=show&action=view&id=43&Itemid=15 - http://blog.48bits.com/?p=172 - http://secunia.com/advisories/27285 - http://www.microsoft.com/technet/security/advisory/944653.mspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4584 - http://www.vupen.com/english/advisories/2007/3537 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://www.symantec.com/enterprise/security_response/weblog/2007/10/privilege_escalation_exploit_i.html - http://osvdb.org/41429 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://www.us-cert.gov/cas/techalerts/
/osvdb.org/41429 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA07-345A.html - http://www.securityfocus.com/archive/1/482482/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/37284 - http://www.securityfocus.com/archive/1/482474/100/0/threaded - http://securityreason.com/securityalert/3266 - http://www.securitytracker.com/id?1018833 - http://www.securityfocus.com/bid/26121 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-067