Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2097 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End CMS 0.4.7 allow remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter to (1) click.php or (2) pollcollector.php in htdocs/; or (3) index.php, (4) articlepages.php, (5) articles.php, (6) articleform.php, (7) articlesections.php, (8) createArticlesPage.php, (9) guestbook.php, (10) helpguide.php, (11) helpguideeditor.php, (12) links.php, (13) upload.php, (14) sitestatistics.php, (15) nav.php, (16) tpl_upload.php, (17) link
pguideeditor.php, (12) links.php, (13) upload.php, (14) sitestatistics.php, (15) nav.php, (16) tpl_upload.php, (17) linksections, or (18) pophelp.php in htdocs/site-admin/; different vectors than CVE-2006-5076. NOTE: this issue is disputed by a third party, who states that $includes_path is defined before use Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465734/100/0/threaded - http://attrition.org/pipermail/vim/2007-April/001528.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33668 - http://securityreason.com/securityalert/2573 - http://www.osvdb.org/34148
CVE ID: CVE-2007-2098 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in showpic.php in Wabbit PHP Gallery 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) pic and (2) gal parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2574 - http://secunia.com/advisories/24943 - http://www.securityfocus.com/archive/1/465985/100/0/threaded - http://osvdb.org/34994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33717 - http://www.securityfocus.com/bid/23526
CVE ID: CVE-2007-2099 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in htdocs/php.php in OpenConcept Back-End CMS 0.4.7 allows remote attackers to inject arbitrary web script or HTML via the page[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34143 - http://www.securityfocus.com/archive/1/465728/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33685 - http://securityreason.com/securityalert/2575
CVE ID: CVE-2007-2100 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: FAC Guestbook 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/Gdb.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2570 - http://www.securityfocus.com/archive/1/465544/100/0/threaded - http://secunia.com/advisories/24872 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33600 - http://www.securityfocus.com/bid/23441
CVE ID: CVE-2007-2101 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: FAC Guestbook 3.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/gbdb.mdb. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24872 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33600 - http://www.securityfocus.com/bid/23441
CVE ID: CVE-2007-2102 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vector than CVE-2006-6087. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2571 - http://osvdb.org/34996 - http://www.securityfocus.com/archive/1/465986/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33718 - http://secunia.com/advisories/24942
CVE ID: CVE-2007-2103 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in my little forum 1.7 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) admin.php and (2) timedifference.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2576 - http://osvdb.org/35402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33719 - http://www.securityfocus.com/archive/1/465987/100/0/threaded - http://osvdb.org/35403
CVE ID: CVE-2007-2104 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in iXon CMS 0.30 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme_url parameter to (1) index.php, (2) page.php, (3) search.php, (4) single.php, and (5) archives.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33438 - http://osvdb.org/35256 - http://osvdb.org/35254 - http://securityreason.com/securityalert/2577 - http://osvdb.org/35258
http://osvdb.org/35256 - http://osvdb.org/35254 - http://securityreason.com/securityalert/2577 - http://osvdb.org/35258 - http://www.securityfocus.com/archive/1/464675/100/0/threaded - http://osvdb.org/35255
CVE ID: CVE-2007-2105 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/index.php in Monkey CMS 0.0.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the admin_skin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35260 - http://www.securityfocus.com/archive/1/464704/100/0/threaded - http://www.securityfocus.com/archive/1/470801/100/100/threaded - http://securityreason.com/securityalert/2578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33436
CVE ID: CVE-2007-2106 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Kai Content Management System (K-CMS) 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the current_theme parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33437 - http://securityreason.com/securityalert/2579 - http://www.securityfocus.com/archive/1/464677/100/0/threaded
CVE ID: CVE-2007-2107 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-1960. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1266 - http://osvdb.org/37412
CVE ID: CVE-2007-2108 State: PUBLISHED Published: 2007-04-18T18:00:00 Last Updated: 2024-08-07T13:23:50.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 on Windows allows remote attackers to have an unknown impact, aka DB01. NOTE: as of 20070424, Oracle has not disputed reliable claims that this issue occurs because the NTLM SSPI AcceptSecurityContext function grants privileges based on the username provided even though all users are authenticated as Guest, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: Referenc
as Guest, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.ngssoftware.com/papers/database-on-xp.pdf - http://www.us-cert.gov/cas/techalerts/TA07-108A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html - http://www.kb.cert.org/vuls/id/809457 - http://www.securityfocus.com/bid/23532 - http://www.securitytracker.com/id?1017927 - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.ngssoftware.com/research/papers/NGSSoftware-Oracle
/www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf - http://www.vupen.com/english/advisories/2007/1426 - http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf
CVE ID: CVE-2007-2109 State: PUBLISHED Published: 2007-04-18T18:00:00 Last Updated: 2024-08-07T13:23:50.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and remote authenticated attack vectors related to (1) Rules Manager and Expression Filter components (DB02) and (2) Oracle Streams (DB06). Note: as of 20070424, Oracle has not disputed reliable claims that DB02 is for a race condition in the RLMGR_TRUNCATE_MAINT trigger in the Rules Manager and Expression Filter components changing the AUTHID of a package from DEFINER to CURRENT_USER after a TRUNCATE call, and DB06 is for SQL injection in the
hanging the AUTHID of a package from DEFINER to CURRENT_USER after a TRUNCATE call, and DB06 is for SQL injection in the DBMS_APPLY_USER_AGENT.SET_REGISTRATION_HANDLER procedure, which is later passed to the DBMS_APPLY_ADM_INTERNAL.ALTER_APPLY procedure, aka "Oracle Streams". Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-108A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html - http://www.securityfocus.com/bid/23532 - http://www.securitytracker.com/id?1017927 - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html - http:
s.com/archive/1/466329/100/200/threaded - http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf - http://www.vupen.com/english/advisories/2007/1426 - http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf
CVE ID: CVE-2007-2110 State: PUBLISHED Published: 2007-04-18T18:00:00 Last Updated: 2024-08-07T13:23:50.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.4 on Windows systems has unknown impact and attack vectors, aka DB03. NOTE: as of 20070424, Oracle has not disputed reliable claims that DB03 occurs because RDBMS uses a NULL Discretionary Access Control List (DACL) for the Oracle process and certain shared memory sections, which allows local users to inject threads and execute arbitrary code via the OpenProcess, OpenThread, and SetThreadContext functions (DB03). Additional
t threads and execute arbitrary code via the OpenProcess, OpenThread, and SetThreadContext functions (DB03). Additional Analyst Notes: - CVE Program Container: References: - http://www.freelists.org/archives/oracle-l/12-2006/msg00004.html - http://www.us-cert.gov/cas/techalerts/TA07-108A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html - http://www.securityfocus.com/bid/23532 - http://www.securitytracker.com/id?1017927 - http://www.securityfocus.com/archive/1/466329/100/200/threaded - https://www.blackhat.com/presentations/bh-dc-07/Cerrudo/Presentation/bh-dc-07-Cerrudo-ppt.pdf - http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html - http://www
sentation/bh-dc-07-Cerrudo-ppt.pdf - http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf - http://www.vupen.com/english/advisories/2007/1426 - http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf
CVE ID: CVE-2007-2111 State: PUBLISHED Published: 2007-04-18T18:00:00 Last Updated: 2024-08-07T13:23:50.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the SYS.DBMS_AQADM_SYS package in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 allows remote authenticated users to inject arbitrary SQL commands via unknown vectors, aka DB04. NOTE: as of 20070424, Oracle has not disputed reliable claims that DB04 is actually for multiple vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-108A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html - http://www.se
cas/techalerts/TA07-108A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html - http://www.securityfocus.com/bid/23532 - http://www.securitytracker.com/id?1017927 - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_aqadm_sys.html - http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf - http://www.vupen.com/english/advisories/2007/1426 - http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_A
om/english/advisories/2007/1426 - http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf
CVE ID: CVE-2007-2112 State: PUBLISHED Published: 2007-04-18T18:00:00 Last Updated: 2024-08-07T13:23:50.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Authentication component for Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and attack vectors, aka DB05. NOTE: as of 20070424, Oracle has not disputed reliable claims that this issue allows remote authenticated users to bypass the AUTH_ALTER_SESSION security policies via a logon trigger ("AFTER LOGON ON DATABASE" trigger directive), a related issue to CVE-2006-0547. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-108A.html -
Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-108A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html - http://www.securityfocus.com/bid/23532 - http://www.red-database-security.com/advisory/bypass_oracle_logon_trigger.html - http://www.securitytracker.com/id?1017927 - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html - http://www.securityfocus.com/archive/1/466151/100/0/threaded - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.
tyfocus.com/archive/1/466329/100/200/threaded - http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf - http://www.vupen.com/english/advisories/2007/1426 - http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf
CVE ID: CVE-2007-2113 State: PUBLISHED Published: 2007-04-18T18:00:00 Last Updated: 2024-08-07T13:23:50.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Upgrade/Downgrade component (DBMS_UPGRADE_INTERNAL) for Oracle Database 10.1.0.5 allows remote authenticated users to execute arbitrary SQL commands via unknown vectors, aka DB07. NOTE: as of 20070424, Oracle has not disputed reliable claims that DB07 is actually for multiple issues. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-108A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html - http://www.securi
techalerts/TA07-108A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html - http://www.securityfocus.com/bid/23532 - http://www.securitytracker.com/id?1017927 - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html - http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_upgrade_internal.html - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf - http://www.vupen.com/english/advisories/2007/1426 - http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_200
n.com/english/advisories/2007/1426 - http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf - http://www.securityfocus.com/archive/1/466153/100/0/threaded
CVE ID: CVE-2007-2114 State: PUBLISHED Published: 2007-04-18T18:00:00 Last Updated: 2024-08-07T13:23:50.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authenticated attack vectors, related to (1) Change Data Capture (CDC), aka DB08, and (2) Oracle Instant Client, aka DB11. NOTE: as of 20070424, oracle has not disputed reliable claims that these issues are buffer overflows using a long CHANGE_TABLE_NAME parameter to the DBMS_CDC_IPUBLISH.CHGTAB_CACHE procedure (DB08) and Oracle Instant Client genezi utility (DB11). Additional Analyst Notes: - CVE Program Container: Ref
procedure (DB08) and Oracle Instant Client genezi utility (DB11). Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-108A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html - http://www.securityfocus.com/bid/23532 - http://www.securitytracker.com/id?1017927 - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf - http://www.vupen.com/english/advisories/2007/1426 - http://www.integrigy.
arch/papers/NGSSoftware-OracleCPUAPR2007.pdf - http://www.vupen.com/english/advisories/2007/1426 - http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf
CVE ID: CVE-2007-2115 State: PUBLISHED Published: 2007-04-18T18:00:00 Last Updated: 2024-08-07T13:23:50.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors, aka DB09. NOTE: as of 20070424, oracle has not disputed reliable claims that this issue involves multiple SQL injection vulnerabilities in the DBMS_CDC_PUBLISH with remote authenticated vectors involving the "java classes in CDC.jar." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-108A.html - http://www.databas
Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-108A.html - http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf - http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html - http://www.securityfocus.com/bid/23532 - http://www.securitytracker.com/id?1017927 - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf - http://www.vupen.com/english/advisories/2007/1426 - http://www.integrigy.com/security
NGSSoftware-OracleCPUAPR2007.pdf - http://www.vupen.com/english/advisories/2007/1426 - http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf
CVE ID: CVE-2007-2116 State: PUBLISHED Published: 2007-04-18T18:00:00 Last Updated: 2024-08-07T13:23:50.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors, aka DB10. NOTE: as of 20070424, Oracle has not disputed claims that these are buffer overflows in kkzi.o for the SYS.DBMS_SNAP_INTERNAL package using the (1) SNAP_OWNER or (2) SNAP_NAME parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.appsecinc.com/resources/alerts/oracle/2007-07.shtml - http://www.us-cert.gov/cas/techalerts/TA07-108A.ht
s: - http://www.appsecinc.com/resources/alerts/oracle/2007-07.shtml - http://www.us-cert.gov/cas/techalerts/TA07-108A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html - http://www.securityfocus.com/archive/1/466173/100/0/threaded - http://www.securityfocus.com/bid/23532 - http://www.securitytracker.com/id?1017927 - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf - http://www.vupen.com/english/advisories/2007/1426 - http://www.integrig
search/papers/NGSSoftware-OracleCPUAPR2007.pdf - http://www.vupen.com/english/advisories/2007/1426 - http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf
CVE ID: CVE-2007-2117 State: PUBLISHED Published: 2007-04-18T18:00:00 Last Updated: 2024-08-07T13:23:50.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Text component in Oracle Database 9.0.1.5+ and 9.2.0.5 has unknown impact and attack vectors, aka DB12. NOTE: as of 20070424, Oracle has not disputed reliable claims that this involves a buffer overflow in the ctxsrv server daemon. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-108A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html - http://www.securityfocus.com/bid/23532 - http://www.securitytrack
m/technetwork/topics/security/cpuapr2007-090632.html - http://www.securityfocus.com/bid/23532 - http://www.securitytracker.com/id?1017927 - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html - http://www.securityfocus.com/archive/1/466329/100/200/threaded - http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf - http://www.vupen.com/english/advisories/2007/1426 - http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf