Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/26890 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://secunia.com/advisories/27706 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
CVE ID: CVE-2007-0064 State: PUBLISHED Published: 2007-12-12T00:00:00 Last Updated: 2024-08-07T12:03:37.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019074 - http://www.kb.cert.org/vuls/id/319385 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A362
.kb.cert.org/vuls/id/319385 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3622 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-068 - http://www.vupen.com/english/advisories/2007/4183 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://www.securityfocus.com/bid/26776 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA07-345A.html - http://secunia.com/advisories/28034
CVE ID: CVE-2007-0065 State: PUBLISHED Published: 2008-02-12T22:00:00 Last Updated: 2024-08-07T12:03:37.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5388 - http://secunia.com/advisories/28902 - http://www.vupen.com/english/advisories/2008/0510/references -
oval%3Adef%3A5388 - http://secunia.com/advisories/28902 - http://www.vupen.com/english/advisories/2008/0510/references - http://marc.info/?l=bugtraq&m=120361015026386&w=2 - http://www.securitytracker.com/id?1019373 - http://www.securityfocus.com/bid/27661 - http://marc.info/?l=bugtraq&m=120361015026386&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-008 - http://www.us-cert.gov/cas/techalerts/TA08-043C.html
CVE ID: CVE-2007-0066 State: PUBLISHED Published: 2008-01-08T20:00:00 Last Updated: 2024-08-07T12:03:36.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel TCP/IP/ICMP Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-001 - http://www.iss.net/threats/282.html - http://www.us-cert.gov/cas/techalerts/
y-updates/securitybulletins/2008/ms08-001 - http://www.iss.net/threats/282.html - http://www.us-cert.gov/cas/techalerts/TA08-008A.html - http://securitytracker.com/id?1019166 - http://blogs.technet.com/swi/archive/2008/01/08/ms08-001-part-2-the-case-of-the-moderate-icmp-mitigations.aspx - http://secunia.com/advisories/28297 - http://www.securityfocus.com/bid/27139 - http://www.vupen.com/english/advisories/2008/0069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5271 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39254 - http://www.securityfocus.com/archive/1/486317/100/0/threaded - http://www.securityfocus.com/archive/1/486317/100/0/threaded
CVE ID: CVE-2007-0067 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T12:03:36.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a denial of service (daemon crash) via requests for URLs that reference certain files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24307 - http://www-1.ibm.com/support/docview.wss?uid=swg21257251 - http://osvdb.org/35766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34689 - http://www.securitytracker.com/id?1018189 - http://secun
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34689 - http://www.securitytracker.com/id?1018189 - http://secunia.com/advisories/25542 - http://www.vupen.com/english/advisories/2007/2046
CVE ID: CVE-2007-0068 State: PUBLISHED Published: 2007-06-06T21:00:00 Last Updated: 2024-08-07T12:03:37.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified agent in a server database. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25520 - http://www-1.ibm.com/support/docview.wss?uid=swg21258784 - http://www.vupen.com/english/advisories/2007/2063 - http://www.securityfocus.com/bid/24322 - http://osvdb.org/35765 - https://exchange.xforce
english/advisories/2007/2063 - http://www.securityfocus.com/bid/24322 - http://osvdb.org/35765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34718
CVE ID: CVE-2007-0069 State: PUBLISHED Published: 2008-01-08T20:00:00 Last Updated: 2024-08-07T12:03:37.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via crafted (1) IGMPv3 and (2) MLDv2 packets that trigger memory corruption, aka "Windows Kernel TCP/IP/IGMPv3 and MLDv2 Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-001 - https://exchange.xforce.ibmcloud.com/vulnerabil
s.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39453 - http://www.iss.net/threats/282.html - http://www.kb.cert.org/vuls/id/115083 - http://www.us-cert.gov/cas/techalerts/TA08-008A.html - http://securitytracker.com/id?1019166 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39452 - http://secunia.com/advisories/28297 - http://www.vupen.com/english/advisories/2008/0069 - http://blogs.technet.com/swi/archive/2008/01/08/ms08-001-part-3-the-case-of-the-igmp-network-critical.aspx - http://www.securityfocus.com/bid/27100
/archive/2008/01/08/ms08-001-part-3-the-case-of-the-igmp-network-critical.aspx - http://www.securityfocus.com/bid/27100 - http://www.securityfocus.com/archive/1/486317/100/0/threaded - http://www.securityfocus.com/archive/1/486317/100/0/threaded
CVE ID: CVE-2007-0071 State: PUBLISHED Published: 2008-04-09T21:00:00 Last Updated: 2024-08-07T12:03:37.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020114 - http://secunia.com/advisories/29865 - http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf - http://secunia.com/
ttp://secunia.com/advisories/29865 - http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf - http://secunia.com/advisories/30507 - http://www.securityfocus.com/bid/29386 - http://www.us-cert.gov/cas/techalerts/TA08-149A.html - http://www.adobe.com/support/security/bulletins/apsb08-11.html - http://www.vupen.com/english/advisories/2008/1724/references - http://www.matasano.com/log/1032/this-new-vulnerability-dowds-inhuman-flash-exploit/ - http://blogs.adobe.com/psirt/2008/05/potential_flash_player_issue.html - http://www.redhat.com/support/errata/RHSA-2008-0221.html - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - https://oval.cisecurity.org/repository/search/definition/oval%3
- http://www.us-cert.gov/cas/techalerts/TA08-150A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10379 - http://www.zerodayinitiative.com/advisories/ZDI-08-032/ - http://www.vupen.com/english/advisories/2008/1662/references - http://www.osvdb.org/44282 - http://isc.sans.org/diary.html?storyid=4465 - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html - http://www.securityfocus.com/bid/28695 - http://secunia.com/advisories/29763 - http://www.securitytracker.com/id?1019811 - http://sunsolve.sun.com/search/documen
http://secunia.com/advisories/29763 - http://www.securitytracker.com/id?1019811 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 - http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/37277 - http://www.vupen.com/english/advisories/2008/1697 - http://www.kb.cert.org/vuls/id/159523 - http://www.us-cert.gov/cas/techalerts/TA08-100A.html - http://www.kb.cert.org/vuls/id/395473 - http://www.iss.net/threats/289.html - http://secunia.com/advisories/30404
CVE ID: CVE-2007-0072 State: PUBLISHED Published: 2008-11-17T23:00:00 Last Updated: 2024-08-07T12:03:37.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a read operation over RPC. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32618 - http://www.securityfocus.com/bid/32261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38760 - http://www.kb.cert.org/vuls/id/768681 - http://blogs.iss.net/archive/trend.html - http://www.vupen.com/english/a
38760 - http://www.kb.cert.org/vuls/id/768681 - http://blogs.iss.net/archive/trend.html - http://www.vupen.com/english/advisories/2008/3127 - http://www.iss.net/threats/309.html
CVE ID: CVE-2007-0073 State: PUBLISHED Published: 2008-11-17T23:00:00 Last Updated: 2024-08-07T12:03:37.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a file read operation over RPC. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32618 - http://www.securityfocus.com/bid/32261 - http://www.kb.cert.org/vuls/id/768681 - http://blogs.iss.net/archive/trend.html - http://www.vupen.com/english/advisories/2008/3127 - https://exchange.xforce.ibmcloud.c
logs.iss.net/archive/trend.html - http://www.vupen.com/english/advisories/2008/3127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39050 - http://www.iss.net/threats/309.html
CVE ID: CVE-2007-0074 State: PUBLISHED Published: 2008-11-17T23:00:00 Last Updated: 2024-08-07T12:03:36.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a folder read operation over RPC. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32618 - http://www.securityfocus.com/bid/32261 - http://www.kb.cert.org/vuls/id/768681 - http://blogs.iss.net/archive/trend.html - http://www.vupen.com/english/advisories/2008/3127 - http://www.iss.net/threats/309.h
/blogs.iss.net/archive/trend.html - http://www.vupen.com/english/advisories/2008/3127 - http://www.iss.net/threats/309.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39051
CVE ID: CVE-2007-0075 State: PUBLISHED Published: 2007-01-05T11:00:00 Last Updated: 2024-08-07T12:03:36.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for db/aspbb.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33364 - http://www.aria-security.com/forum/showthread.php?t=82 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31230 - http://www.securityfocus.com/archive/1/455683/100/0/threaded - http://securityreason.com/securityalert/2100
CVE ID: CVE-2007-0076 State: PUBLISHED Published: 2007-01-05T11:00:00 Last Updated: 2024-08-07T12:03:37.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for openforum.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455684/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31209 - http://osvdb.org/33366 - http://www.aria-security.com/forum/showthread.php?t=80 - http://securityreason.com/securityalert/2099
CVE ID: CVE-2007-0077 State: PUBLISHED Published: 2007-01-05T11:00:00 Last Updated: 2024-08-07T12:03:37.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: lblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a certain file in admin/db/newFolder/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31229 - http://securityreason.com/securityalert/2098 - http://www.securityfocus.com/archive/1/455681/100/0/threaded - http://securitytracker.com/id?1017462 - http://osvdb.org/33367 - http://www.aria-security.c
ve/1/455681/100/0/threaded - http://securitytracker.com/id?1017462 - http://osvdb.org/33367 - http://www.aria-security.com/forum/showthread.php?t=79
CVE ID: CVE-2007-0078 State: PUBLISHED Published: 2007-01-05T11:00:00 Last Updated: 2024-08-07T12:03:37.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/blankmaster.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31224 - http://securityreason.com/securityalert/2097 - http://www.aria-security.com/forum/showthread.php?t=76 - http://osvdb.org/33360 - http://www.securityfocus.com/archive/1/455614/100/0/threaded
CVE ID: CVE-2007-0079 State: PUBLISHED Published: 2007-01-05T11:00:00 Last Updated: 2024-08-07T12:03:37.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) data/admin.mdb or (2) data/rblog.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32572 - http://securityreason.com/securityalert/2102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31200 - http://secunia.com/advisories/23538 - http://www.aria-security.com/forum/showthread.php?t=77 - http://www.securityfocus.com/ar
/secunia.com/advisories/23538 - http://www.aria-security.com/forum/showthread.php?t=77 - http://www.securityfocus.com/archive/1/455626/100/0/threaded
CVE ID: CVE-2007-0080 State: PUBLISHED Published: 2007-01-05T11:00:00 Last Updated: 2024-08-07T12:03:37.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the server desthost field of an SMB_Handle_Type instance. NOTE: the impact of this issue has been disputed by a reliable third party and the vendor, who states that exploitation is limited "only to local administrators who have write access to the server configuration files." CVE concurs with the dispute Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32082 -
" CVE concurs with the dispute Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32082 - http://www.freeradius.org/security.html - http://www.attrition.org/pipermail/vim/2007-February/001304.html - http://securitytracker.com/id?1017463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31248 - http://www.securityfocus.com/archive/1/455678/100/0/threaded - http://www.securityfocus.com/archive/1/455812/100/0/threaded
CVE ID: CVE-2007-0081 State: PUBLISHED Published: 2007-01-05T11:00:00 Last Updated: 2024-08-07T12:03:37.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.matousec.com/info/advisories/Kerio-Fake-iphlpapi-DLL-injection.php - http://www.osvdb.org/33356 - http://www.securityfocus.com/archive/1/455624/100/0/threaded - http://www.securityfocus.com/bid/21828 - http://securityreason.com/securityalert/2095 - https://
455624/100/0/threaded - http://www.securityfocus.com/bid/21828 - http://securityreason.com/securityalert/2095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31232
CVE ID: CVE-2007-0082 State: PUBLISHED Published: 2007-01-05T11:00:00 Last Updated: 2024-08-07T12:03:37.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticated users to upload and execute arbitrary PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31237 - https://www.exploit-db.com/exploits/3049 - http://www.securityfocus.com/bid/21827
CVE ID: CVE-2007-0083 State: PUBLISHED Published: 2007-01-05T11:00:00 Last Updated: 2024-08-07T12:03:37.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a getURL statement in a .swf file, as demonstrated by "Remote Cookie Disclosure." NOTE: it could be argued that this is an issue in Shockwave instead of Nuked Klan. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21850 - http://securityreason.com/securityalert/2101 - http://osvdb.org/33368 - http://www.securityfocus.com/a
s.com/bid/21850 - http://securityreason.com/securityalert/2101 - http://osvdb.org/33368 - http://www.securityfocus.com/archive/1/455726/100/0/threaded
CVE ID: CVE-2007-0084 State: PUBLISHED Published: 2007-01-05T11:00:00 Last Updated: 2024-08-07T12:03:37.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long MC-filename. NOTE: this issue has been disputed by a reliable third party who states that the compiler is not a privileged program, so privilege boundaries cannot be crossed Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455789/100/0/threaded - http://osvdb.org/37817 - http://www.securityfocus.com/archive/1/455729/100/0/threaded
CVE ID: CVE-2007-0085 State: PUBLISHED Published: 2007-01-05T11:00:00 Last Updated: 2024-08-07T12:03:37.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when the kernel is compiled with the PCIAGP option and a non-AGP device is being used, allows local users to gain privileges via unspecified vectors, possibly related to agp_ioctl NULL pointer reference. Additional Analyst Notes: - CVE Program Container: References: - http://ilja.netric.org/files/Unusual%20bugs%2023c3.pdf - http://www.osvdb.org/32574 - http://marc.info/?l=openbsd-cvs&m=116785923301416&w=2 - http://w
nusual%20bugs%2023c3.pdf - http://www.osvdb.org/32574 - http://marc.info/?l=openbsd-cvs&m=116785923301416&w=2 - http://www.openbsd.org/errata39.html#agp - http://www.openbsd.org/errata.html#agp - http://securitytracker.com/id?1017468 - http://www.vupen.com/english/advisories/2007/0043 - http://secunia.com/advisories/23608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31276 - http://marc.info/?l=openbsd-cvs&m=116781980706409&w=2
CVE ID: CVE-2007-0086 State: PUBLISHED Published: 2007-01-05T18:00:00 Last Updated: 2024-08-07T12:03:37.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by third parties, who state that the large window size required by the attack is not normally supported or configured by the server, or that a DDoS-style attack would accomplish the same goal Additional Analyst Notes: - CVE Program Con
ed by the server, or that a DDoS-style attack would accomplish the same goal Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33456 - http://www.securityfocus.com/archive/1/455920/100/0/threaded - http://www.securityfocus.com/archive/1/455879/100/0/threaded - http://www.securityfocus.com/archive/1/455833/100/0/threaded - http://www.securityfocus.com/archive/1/455882/100/0/threaded
CVE ID: CVE-2007-0087 State: PUBLISHED Published: 2007-01-05T18:00:00 Last Updated: 2024-08-07T12:03:37.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by third parties, who state that the large window size required by the attack is not normally supported or configured by the server, or that a DDoS-style attack would accomplish the same goal Additional Analyst N
y supported or configured by the server, or that a DDoS-style attack would accomplish the same goal Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455920/100/0/threaded - http://www.securityfocus.com/archive/1/455879/100/0/threaded - http://www.securityfocus.com/archive/1/455833/100/0/threaded - http://www.securityfocus.com/archive/1/455882/100/0/threaded - http://osvdb.org/33457