Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1309 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:34.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33841 - https://secure-support.novell.com/KanisaPlatform/Publishing/648/3429077_f.SAL_Public.html - http://www.vupen.com/english/advisories/2007/0800 - http://secunia.com/advisories/24369 - http://www.securitytracker.com/id?1017722
CVE ID: CVE-2007-1313 State: PUBLISHED Published: 2007-03-21T19:00:00 Last Updated: 2024-08-07T12:50:34.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETxAutomation NETxEIB OPC Server before 3.0.1300 does not properly validate OLE for Process Control (OPC) server handles, which allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors involving the (1) IOPCSyncIO::Read, (2) IOPCSyncIO::Write, (3) IOPCServer::AddGroup, (4) IOPCServer::RemoveGroup, (5) IOPCCommon::SetClientName, and (6) IOPCGroupStateMgt::CloneGroup functions, which allow access to arbitrary memory. NOTE: the vectors might be limited to attackers with physical ac
roup functions, which allow access to arbitrary memory. NOTE: the vectors might be limited to attackers with physical access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017803 - http://www.securityfocus.com/archive/1/463539/100/0/threaded - http://www.kb.cert.org/vuls/id/296593 - http://www.kb.cert.org/vuls/id/MIMG-6XEPXN - http://osvdb.org/34440 - http://www.neutralbit.com/advisories/NB07-22.txt - http://secunia.com/advisories/24612 - http://www.securityfocus.com/bid/23059 - http://www.vupen.com/english/advisories/2007/1038
CVE ID: CVE-2007-1319 State: PUBLISHED Published: 2007-03-19T22:00:00 Last Updated: 2024-08-07T12:50:34.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IOPCServer::RemoveGroup function in the OPCDA interface in Takebishi Electric DeviceXPlorer OLE for Process Control (OPC) Server before 3.12 Build3 allows remote attackers to execute arbitrary code via unspecified vectors involving access to arbitrary memory. NOTE: this issue affects the (1) HIDIC, (2) MELSEC, (3) FA-M3, (4) MODBUS, and (5) SYSMAC OPC Servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463559/100/0/threaded - http://w
st Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463559/100/0/threaded - http://www.neutralbit.com/advisories/NB07-07.txt - http://www.securityfocus.com/archive/1/463550/100/0/threaded - http://www.kb.cert.org/vuls/id/926551 - http://www.neutralbit.com/advisories/NB07-17.txt - http://www.faweb.net/us/opc/1231207.html - http://www.neutralbit.com/advisories/NB07-08.txt - http://www.neutralbit.com/advisories/NB07-09.txt - http://www.vupen.com/english/advisories/2007/1029 - http://www.securityfocus.com/archive/1/463556/100/0/threaded - http://www.neutralbit.com/advisories/NB07-10.txt - http://www.securityfocus.com/bid/23037 - http://secunia.com/advisories/2
p://www.neutralbit.com/advisories/NB07-10.txt - http://www.securityfocus.com/bid/23037 - http://secunia.com/advisories/24570 - http://www.securityfocus.com/archive/1/463537/100/0/threaded - http://www.securityfocus.com/archive/1/463546/100/0/threaded - http://www.securitytracker.com/id?1017793
CVE ID: CVE-2007-1320 State: PUBLISHED Published: 2007-05-02T17:00:00 Last Updated: 2024-08-07T12:50:35.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23731 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:203 - https://www.redhat.com/arc
curityfocus.com/bid/23731 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:203 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00706.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10315 - http://osvdb.org/35494 - http://secunia.com/advisories/27047 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00935.html - http://www.debian.org/security/2007/dsa-1284 - http://secunia.com/advisories/25073 - http://taviso.decsystem.org/virtsec.pdf - http://secunia.com/advisories/27486 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 - http://secunia.com/advisories/27085 - http://lists.open
ttp://www.mandriva.com/security/advisories?name=MDVSA-2008:162 - http://secunia.com/advisories/27085 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html - http://secunia.com/advisories/30413 - http://secunia.com/advisories/33568 - http://www.vupen.com/english/advisories/2007/1597 - http://secunia.com/advisories/27103 - http://secunia.com/advisories/29129 - http://www.redhat.com/support/errata/RHSA-2007-0323.html - http://secunia.com/advisories/25095 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00082.html - http://www.debian.org/security/2007/dsa-1384
CVE ID: CVE-2007-1321 State: PUBLISHED Published: 2007-10-30T22:00:00 Last Updated: 2024-08-07T12:50:35.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes differ
et code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23731 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:203 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00030.html - http://secunia.com/advisories/27047 - http://www.debian.org/security/2007/dsa-1284 - http://securitytracker.com/id?1018761 - http://secunia.com/advisories/25073 - http://taviso.decsystem.org/virtsec.pdf - http://secunia.com/advisories/27486 - http://www.mandriva.com/security
25073 - http://taviso.decsystem.org/virtsec.pdf - http://secunia.com/advisories/27486 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 - http://osvdb.org/35495 - http://www.vupen.com/english/advisories/2007/1597 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00004.html - http://secunia.com/advisories/27103 - http://secunia.com/advisories/29129 - http://www.redhat.com/support/errata/RHSA-2007-0323.html - http://secunia.com/advisories/25095 - http://secunia.com/advisories/27072 - http://www.attrition.org/pipermail/vim/2007-October/001842.html - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00082.html - https://oval.cisecuri
001842.html - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00082.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9302
CVE ID: CVE-2007-1322 State: PUBLISHED Published: 2007-05-02T17:00:00 Last Updated: 2024-08-07T12:50:35.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34043 - http://www.securityfocus.com/bid/23731 - http://www.debian.org/security/2007/dsa-1284 - http://secunia.com/advisories/25073 - http://taviso.decsystem.org/virtsec.pdf - http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 - http://osvdb.org/35496 - http://www.vupen.com/english/advisories/2007/1597 - htt
curity/advisories?name=MDVSA-2008:162 - http://osvdb.org/35496 - http://www.vupen.com/english/advisories/2007/1597 - http://secunia.com/advisories/29129 - http://secunia.com/advisories/25095
CVE ID: CVE-2007-1323 State: REJECTED Published: 2007-10-30T21:00:00Z Last Updated: 2024-09-16T20:32:22.716Z Description: No description available.
CVE ID: CVE-2007-1324 State: PUBLISHED Published: 2007-03-07T21:00:00 Last Updated: 2024-08-07T12:50:35.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: SnapGear 560, 585, 580, 640, 710, and 720 appliances before the 3.1.4u5 firmware allow remote attackers to cause a denial of service (complete packet loss) via a packet flood, a different vulnerability than CVE-2006-4613. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32824 - http://secunia.com/advisories/24388 - http://www.cyberguard.info/snapgear/releases.html - http://www.securityfocus.com/bid/22835 - http://www.vupen.com/english
ttp://www.cyberguard.info/snapgear/releases.html - http://www.securityfocus.com/bid/22835 - http://www.vupen.com/english/advisories/2007/0850
CVE ID: CVE-2007-1325 State: PUBLISHED Published: 2007-03-07T21:00:00 Last Updated: 2024-08-07T12:50:34.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PMA_ArrayWalkRecursive function in libraries/common.lib.php in phpMyAdmin before 2.10.0.2 does not limit recursion on arrays provided by users, which allows context-dependent attackers to cause a denial of service (web server crash) via an array with many dimensions. NOTE: it could be argued that this vulnerability is caused by a problem in PHP (CVE-2006-1549) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in phpMyAdmin. Additional Analyst Notes: - CVE Program Container: Refe
hen this should not be treated as a vulnerability in phpMyAdmin. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/releases/4_4_8.php - http://secunia.com/advisories/26733 - http://www.securityfocus.com/bid/22841 - http://www.us.debian.org/security/2007/dsa-1370 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:199 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-3 - http://www.php.net/ChangeLog-4.php - http://osvdb.org/36834 - http://www.php-security.org/MOPB/MOPB-02-2007.html - http://sourceforge.net/tracker/index.php?func=detail&aid=1671813&group_id=23067&atid=377408 - http://www.vupen.com/english/advisories/2007/0831
CVE ID: CVE-2007-1326 State: PUBLISHED Published: 2007-03-07T21:00:00 Last Updated: 2024-08-07T12:50:35.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipity[multiCat][] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32768 - http://www.securityfocus.com/archive/1/461671/100/0/threaded - http://osvdb.org/34935 - http://securityreason.com/securityalert/2383
CVE ID: CVE-2007-1327 State: PUBLISHED Published: 2007-03-07T21:00:00 Last Updated: 2024-08-07T12:50:34.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a request without a cipher algorithm and an invalid HMAC algorithm. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24426 - http://security.gentoo.org/glsa/glsa-200703-12.xml - http://secunia.com/advisories/24431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32846 - http://www.securityfocus.com/bid/2284
om/advisories/24431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32846 - http://www.securityfocus.com/bid/22846 - http://osvdb.org/33887 - http://marc.info/?l=full-disclosure&m=117320823618036&w=2
CVE ID: CVE-2007-1328 State: PUBLISHED Published: 2007-03-07T21:00:00 Last Updated: 2024-08-07T12:50:34.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in formulaire.php in Bernard JOLY BJ Webring allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter related to the add link menu. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2384 - http://forums.avenir-geopolitique.net/viewtopic.php?t=2707 - http://www.securityfocus.com/archive/1/461802/100/0/threaded
CVE ID: CVE-2007-1329 State: PUBLISHED Published: 2007-03-07T21:00:00 Last Updated: 2024-08-07T12:50:35.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execute arbitrary code, via . (dot) characters adjacent to (1) users and (2) users/members strings, which are removed by blacklisting functions that filter these strings and collapse into .. (dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24363 - http://osvdb.org/33619 - http://osvdb.org/33621 - http://www.securityfocu
ences: - http://secunia.com/advisories/24363 - http://osvdb.org/33619 - http://osvdb.org/33621 - http://www.securityfocus.com/archive/1/461630/100/0/threaded - http://securityreason.com/securityalert/2381 - http://secunia.com/advisories/24366 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32776 - http://securitytracker.com/id?1017715
CVE ID: CVE-2007-1330 State: PUBLISHED Published: 2007-03-07T21:00:00 Last Updated: 2024-08-07T12:50:35.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key by guessing the name of a named pipe under \Device\NamedPipe\OLE and attempting to open it multiple times. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32771 - http://securityreason.com/securityalert/2388 - http://www.s
https://exchange.xforce.ibmcloud.com/vulnerabilities/32771 - http://securityreason.com/securityalert/2388 - http://www.securityfocus.com/archive/1/461635/100/0/threaded - http://www.matousec.com/info/advisories/Comodo-Bypassing-settings-protection-using-magic-pipe.php - http://osvdb.org/34957
CVE ID: CVE-2007-1331 State: PUBLISHED Published: 2007-03-07T21:00:00 Last Updated: 2024-08-07T12:50:35.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to inject arbitrary web script or HTML via unspecified vectors that bypass the client-side protection scheme, one of which may be the q parameter to the search program. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461895/100/0/threaded - http://securityreason.com/securityalert/2385
eferences: - http://www.securityfocus.com/archive/1/461895/100/0/threaded - http://securityreason.com/securityalert/2385 - http://www.securityfocus.com/bid/22829 - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2893 - http://secunia.com/advisories/24331 - http://www.scip.ch/publikationen/advisories/scip_advisory-2893_eportfolio_%201.0_java_multiple_vulnerabilities.txt
CVE ID: CVE-2007-1332 State: PUBLISHED Published: 2007-03-07T21:00:00 Last Updated: 2024-08-07T12:50:35.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to perform unspecified restricted actions in the context of certain accounts by bypassing the client-side protection scheme. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461895/100/0/threaded - http://securityreason.com/securityalert/2385 - http://www.securityfocus.com/bid/22829 - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2893 - http://sec
tyalert/2385 - http://www.securityfocus.com/bid/22829 - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2893 - http://secunia.com/advisories/24331 - http://www.scip.ch/publikationen/advisories/scip_advisory-2893_eportfolio_%201.0_java_multiple_vulnerabilities.txt
CVE ID: CVE-2007-1337 State: PUBLISHED Published: 2007-05-02T19:00:00 Last Updated: 2024-08-07T12:50:35.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtual machine process (VMX) in VMware Workstation before 5.5.4 does not properly read state information when moving from the ACPI sleep state to the run state, which allows attackers to cause a denial of service (virtual machine reboot) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33990 - http://www.securityfocus.com/bid/23732 - http://www.vupen.com/english/advisories/2007/1592 - http://osvdb.org/35508 - http://www.securityfocus
us.com/bid/23732 - http://www.vupen.com/english/advisories/2007/1592 - http://osvdb.org/35508 - http://www.securityfocus.com/archive/1/469011/30/6510/threaded - http://secunia.com/advisories/25079 - http://www.securitytracker.com/id?1018011 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554 - http://www.securityfocus.com/archive/1/467936/30/6690/threaded
CVE ID: CVE-2007-1338 State: PUBLISHED Published: 2007-03-07T23:00:00 Last Updated: 2024-08-07T12:50:34.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting, which might allow remote attackers to bypass intended access restrictions by establishing IPv6 sessions that would have been rejected over IPv4. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24830 - http://arstechnica.com/journals/apple.ars/2007/2/14/7063 - http://www.vupen.com/english/advisories/2007/1308 - http://li
http://arstechnica.com/journals/apple.ars/2007/2/14/7063 - http://www.vupen.com/english/advisories/2007/1308 - http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33526 - http://www.securitytracker.com/id?1017889 - http://osvdb.org/34843 - http://docs.info.apple.com/article.html?artnum=305366
CVE ID: CVE-2007-1339 State: PUBLISHED Published: 2007-03-08T00:00:00 Last Updated: 2024-08-07T12:50:35.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Links Management Application 1.0 allows remote attackers to execute arbitrary SQL commands via the lcnt parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22825 - http://www.vupen.com/english/advisories/2007/0849 - https://www.exploit-db.com/exploits/3416 - http://osvdb.org/33862 - http://secunia.com/advisories/24355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32813
CVE ID: CVE-2007-1340 State: PUBLISHED Published: 2007-03-08T00:00:00 Last Updated: 2024-08-07T12:50:35.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in eintrag.php in Weltennetz News-Letterman 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the sqllog parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22807 - http://osvdb.org/35355 - https://www.exploit-db.com/exploits/3406 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32787
CVE ID: CVE-2007-1341 State: PUBLISHED Published: 2007-03-08T00:00:00 Last Updated: 2024-08-07T12:50:35.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24402 - http://code.google.com/p/simpleinvoices/issues/detail?id=35 - https://sourceforge.net/project/shownotes.php?group_id=164303&release_id=491300 - http://www.securityfocus.com/bid/22818 - http://osvdb.org/33860 - http://forum.tufat.com/s
id=164303&release_id=491300 - http://www.securityfocus.com/bid/22818 - http://osvdb.org/33860 - http://forum.tufat.com/showthread.php?p=116753#post116753
CVE ID: CVE-2007-1342 State: PUBLISHED Published: 2007-03-08T00:00:00 Last Updated: 2024-08-07T12:50:35.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admincp/index.php in Jelsoft vBulletin 3.6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the add rss url form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461727/100/0/threaded - http://www.securityfocus.com/bid/22790 - http://securityreason.com/securityalert/2396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32780
CVE ID: CVE-2007-1343 State: PUBLISHED Published: 2007-03-08T00:00:00 Last Updated: 2024-08-07T12:50:35.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modification, which allows remote attackers to set arbitrary global variables via a URL with modified values in the noSet parameter, which leads to resultant vulnerabilities that probably include remote file inclusion and other issues. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0851 - http://webcalendar.cvs.sourceforge.net/webcalendar/webcalendar/i
: - http://www.vupen.com/english/advisories/2007/0851 - http://webcalendar.cvs.sourceforge.net/webcalendar/webcalendar/includes/functions.php?view=log - http://sourceforge.net/project/shownotes.php?group_id=3870&release_id=491130 - http://secunia.com/advisories/24519 - http://www.securityfocus.com/bid/22834 - http://www.debian.org/security/2007/dsa-1267 - http://webcalendar.cvs.sourceforge.net/webcalendar/webcalendar/includes/functions.php?r1=1.211.2.7&r2=1.211.2.8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32832 - http://secunia.com/advisories/24403 - http://sourceforge.net/mailarchive/forum.php?thread_id=31840112&forum_id=46247
CVE ID: CVE-2007-1344 State: PUBLISHED Published: 2007-03-08T00:00:00 Last Updated: 2024-08-07T12:50:35.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in src/ezstream.c in Ezstream before 0.3.0 allow remote attackers to execute arbitrary code via a crafted XML configuration file processed by the (1) urlParse function, which causes a stack-based overflow and the (2) ReplaceString function, which causes a heap-based overflow. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.icecast.org/ezstream.php#ez_relnotes - http://www.securityfocus.com/bid/22840 - ht