Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ityfocus.com/bid/28849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41907 - http://osvdb.org/44561 - http://secunia.com/advisories/29903 - http://www.securitytracker.com/id?1019914 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00549.html - http://secunia.com/advisories/29984 - http://www.vupen.com/english/advisories/2008/1321/references - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00585.html - http://secunia.com/advisories/29937 - http://www.mail-archive.com/dbmail-dev%40dbmail.org/msg09942.html - http://dbmail.org/index.php?page=news&id=44
CVE ID: CVE-2007-6715 State: PUBLISHED Published: 2008-04-17T22:00:00 Last Updated: 2024-08-07T16:18:20.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox allows remote attackers to cause a denial of service (crash) via crafted image, as demonstrated by the zzuf lol-firefox.gif test case. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/44727 - http://sam.zoy.org/blog/2007-01-16-exposing-file-parsing-vulnerabilities - http://sam.zoy.org/zzuf/ - http://www.securityfocus.com/bid/27243 - http://hboeck.de/archives/578-How-long-does-it-take-to-fix-a-crash-bug.html
CVE ID: CVE-2007-6716 State: PUBLISHED Published: 2008-09-04T17:00:00 Last Updated: 2024-08-07T16:18:20.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html - http://www.redhat.com/support/errata/RHSA-2008-0885.html - http://secunia.com/advisories/32393 - http://secunia.com/advisories/32237 - http://rhn.redhat.com/errata/RHSA-2008-09
- http://secunia.com/advisories/32393 - http://secunia.com/advisories/32237 - http://rhn.redhat.com/errata/RHSA-2008-0972.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10053 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=848c4dd5153c7a0de55470ce99a8e13a63b4703f - http://www.ubuntu.com/usn/usn-659-1 - http://www.openwall.com/lists/oss-security/2008/09/04/1 - http://lkml.org/lkml/2007/7/30/448 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html - http://secunia.com/advisories/32103 - http://www.debian.org/secur
org/opensuse-security-announce/2008-12/msg00000.html - http://secunia.com/advisories/32103 - http://www.debian.org/security/2008/dsa-1653 - http://secunia.com/advisories/32356 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23 - http://secunia.com/advisories/32023 - http://secunia.com/advisories/32759 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:220 - http://secunia.com/advisories/32370 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html - https://bugzilla.redhat.com/show_bug.cgi?id=461082 - http://secunia.com/advisories/32799 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://www.securityfocus.com/bid/3
/32799 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://www.securityfocus.com/bid/31515
CVE ID: CVE-2007-6717 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T16:18:20.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in tftp in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45651 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5988 - http://www.ibm.com/support/docview.wss?uid=isg1IZ03054 - http://www.ibm.com/support/docview.wss?uid=isg1IZ03060 - http://www14.software.ib
/support/docview.wss?uid=isg1IZ03054 - http://www.ibm.com/support/docview.wss?uid=isg1IZ03060 - http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?path=/200710/SECURITY/20071030/datafile110126&mode=7&heading=AIX53
CVE ID: CVE-2007-6718 State: PUBLISHED Published: 2008-10-20T17:00:00Z Last Updated: 2024-09-16T19:46:33.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash) via (1) a malformed MP3 file, as demonstrated by lol-mplayer.mp3; (2) a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; (3) a malformed MPEG-1 file, as demonstrated by lol-mplayer.mpg; (4) a malformed MPEG-2 file, as demonstrated by lol-mplayer.m2v; (5) a malformed MPEG-4 AVI file, as demonstrated by lol-mplayer.avi; (6) a malformed FLAC file, as demonstrated by lol-mplayer.flac; (7) a malformed Ogg Th
demonstrated by lol-mplayer.avi; (6) a malformed FLAC file, as demonstrated by lol-mplayer.flac; (7) a malformed Ogg Theora file, as demonstrated by lol-mplayer.ogm; (8) a malformed WMV file, as demonstrated by lol-mplayer.wmv; or (9) a malformed AAC file, as demonstrated by lol-mplayer.aac. NOTE: vector 5 might overlap CVE-2007-4938, and vector 6 might overlap CVE-2008-0486. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/07/1 - http://sam.zoy.org/blog/2007-01-16-exposing-file-parsing-vulnerabilities
CVE ID: CVE-2007-6719 State: PUBLISHED Published: 2008-12-05T01:00:00Z Last Updated: 2024-09-17T00:25:42.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Wiz-Ad 1.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25819
CVE ID: CVE-2007-6720 State: PUBLISHED Published: 2009-01-20T16:00:00 Last Updated: 2024-08-07T16:18:20.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34259 - http://www.securityfocus.com/bid/33235 - http:/
E Program Container: References: - http://secunia.com/advisories/34259 - http://www.securityfocus.com/bid/33235 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=422021 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html - https://bugzilla.redhat.com/show_bug.cgi?id=479829 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=461519 - http://openwall.com/lists/oss-security/2009/01/13/2
CVE ID: CVE-2007-6721 State: PUBLISHED Published: 2009-03-30T01:00:00 Last Updated: 2024-08-07T16:18:20.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes." Additional Analyst Notes: - CVE Program Container: References: - http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580 - http://www.osvdb.org/50358 - http://www.bouncycastle.org/csharp/ - http://www.osvdb.org/50360 - http://www.bouncycastle.org/relea
w.osvdb.org/50358 - http://www.bouncycastle.org/csharp/ - http://www.osvdb.org/50360 - http://www.bouncycastle.org/releasenotes.html - http://www.osvdb.org/50359 - http://www.bouncycastle.org/devmailarchive/msg08195.html
CVE ID: CVE-2007-6722 State: PUBLISHED Published: 2009-03-31T17:00:00 Last Updated: 2024-08-07T16:18:20.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vidalia bundle before 0.1.2.18, when running on Windows and Mac OS X, installs Privoxy with a configuration file (config.txt or config) that contains insecure (1) enable-remote-toggle and (2) enable-edit-actions settings, which allows remote attackers to bypass intended access restrictions and modify configuration. Additional Analyst Notes: - CVE Program Container: References: - http://archives.seul.org/or/talk/Oct-2007/msg00291.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50066
CVE ID: CVE-2007-6723 State: PUBLISHED Published: 2009-03-31T17:00:00 Last Updated: 2024-08-07T16:18:20.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: TorK before 0.22, when running on Windows and Mac OS X, installs Privoxy with a configuration file (config.txt or config) that contains insecure (1) enable-remote-toggle and (2) enable-edit-actions settings, which allows remote attackers to bypass intended access restrictions and modify configuration. Additional Analyst Notes: - CVE Program Container: References: - http://archives.seul.org/or/talk/Oct-2007/msg00291.html - http://archives.seul.org/or/talk/Oct-2007/msg00296.html - http://sourceforge.net/project/shownotes.php?rel
g00291.html - http://archives.seul.org/or/talk/Oct-2007/msg00296.html - http://sourceforge.net/project/shownotes.php?release_id=551544&group_id=159836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42280 - http://www.osvdb.org/48694 - http://www.securityfocus.com/bid/26386
CVE ID: CVE-2007-6724 State: PUBLISHED Published: 2009-03-31T17:00:00 Last Updated: 2024-08-07T16:18:20.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vidalia bundle before 0.1.2.18, when running on Windows, installs Privoxy with a configuration file (config.txt or config) that contains an insecure enable-remote-http-toggle setting, which allows remote attackers to bypass intended access restrictions and modify configuration. Additional Analyst Notes: - CVE Program Container: References: - http://archives.seul.org/or/talk/Oct-2007/msg00291.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50474
CVE ID: CVE-2007-6725 State: PUBLISHED Published: 2009-04-08T16:00:00 Last Updated: 2024-08-07T16:18:20.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-0421.html - http://www.redhat.com/support/errata/RHSA-2009-0420.html - http://www.mail-archive.com/fedora-package-announce%40redhat.com/msg11830.html -
m/support/errata/RHSA-2009-0420.html - http://www.mail-archive.com/fedora-package-announce%40redhat.com/msg11830.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1 - http://www.securityfocus.com/archive/1/502757/100/0/threaded - http://secunia.com/advisories/34729 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - https://bugzilla.redhat.com/show_bug.cgi?id=229174 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:095 - http://www.securityfocus.com/bid/34337 - http://secunia.com/advisories/34732 - http://secunia.com/advisories/35569 - http://www.vupen.com/english/advisories/2009/1708 - https://oval.cisecurity.org/repository/search/
om/advisories/35569 - http://www.vupen.com/english/advisories/2009/1708 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9507 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:096 - http://secunia.com/advisories/35559 - http://secunia.com/advisories/35416 - http://wiki.rpath.com/Advisories:rPSA-2009-0060 - https://bugzilla.redhat.com/show_bug.cgi?id=493442 - https://usn.ubuntu.com/757-1/ - http://www.openwall.com/lists/oss-security/2009/04/01/10 - http://support.avaya.com/elmodocs2/security/ASA-2009-155.htm - http://secunia.com/advisories/34726
CVE ID: CVE-2007-6726 State: PUBLISHED Published: 2009-04-09T15:00:00 Last Updated: 2024-08-07T16:18:20.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) xip_client.html and (2) xip_server.html in src/io/. Additional Analyst Notes: - CVE Program Container: References: - http://www.dojotoolkit.org/releaseNotes/0.4.3 - http://www.dojotoolkit.org/2007/05/26/0-4-3-released-0-4-2-and-0-4-1-users-should-upgrade-immediately - https://exchange.xforce.ibmcloud.com/vuln
g/2007/05/26/0-4-3-released-0-4-2-and-0-4-1-users-should-upgrade-immediately - https://exchange.xforce.ibmcloud.com/vulnerabilities/49884 - https://issues.apache.org/struts/browse/WW-2134 - http://www.securityfocus.com/bid/34660 - http://www.dojotoolkit.org/0-4-3-and-updated-0-4-1-0-4-2-builds
CVE ID: CVE-2007-6727 State: PUBLISHED Published: 2009-07-05T16:00:00Z Last Updated: 2024-09-16T16:33:30.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in topic.php in KerviNet Forum 1.1 allows remote attackers to execute arbitrary SQL commands via the forum parameter. Additional Analyst Notes: - CVE Program Container: References: - http://forum.antichat.ru/showpost.php?p=340740
CVE ID: CVE-2007-6728 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T16:18:20.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in XMB 1.5 allows remote attackers to inject arbitrary web script or HTML via the MSN field during user registration. Additional Analyst Notes: - CVE Program Container: References: - http://forum.antichat.ru/showpost.php?p=340740 - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2007-6729 State: PUBLISHED Published: 2009-09-10T10:00:00 Last Updated: 2024-08-07T16:18:20.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27024 - http://secunia.com/advisories/28172 - http://seclists.org/fulldisclosure/2007/Dec/0559.html
CVE ID: CVE-2007-6730 State: PUBLISHED Published: 2009-09-10T10:00:00 Last Updated: 2024-08-07T16:18:20.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that (1) enable remote router management via goform/formRmtMgt or (2) modify the administrator password via goform/formPasswordSetup. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27024 - http://secunia.com/advisories/28172 - http://seclists.org/fulldisclosure/2007/Dec/0559.html
CVE ID: CVE-2007-6731 State: PUBLISHED Published: 2009-09-13T22:00:00Z Last Updated: 2024-09-17T02:57:50.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in misc/oxm.c, leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0009 - http://aluigi.altervista.org/adv/xmpbof-adv.txt - http://www.securityfocus.com/bid/27047
CVE ID: CVE-2007-6732 State: PUBLISHED Published: 2009-09-13T22:00:00Z Last Updated: 2024-09-16T22:30:57.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the (1) pofs and (2) plen arrays. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0009 - http://aluigi.altervista.org/adv/xmpbof-adv.txt - http://www.securityfocus.com/bid/27047
CVE ID: CVE-2007-6733 State: PUBLISHED Published: 2010-03-16T19:00:00Z Last Updated: 2024-09-17T01:06:02.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nfs_lock function in fs/nfs/file.c in the Linux kernel 2.6.9 does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a denial of service (BUG and system crash) by locking a file on an NFS filesystem and then changing this file's permissions, a related issue to CVE-2010-0727. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=218777 - http://rhn.redhat.com/errata/RHBA-2007-0304.html - https://
nces: - https://bugzilla.redhat.com/show_bug.cgi?id=218777 - http://rhn.redhat.com/errata/RHBA-2007-0304.html - https://bugzilla.redhat.com/show_bug.cgi?id=570863
CVE ID: CVE-2007-6734 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T20:17:18.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1 - https://bugzilla.novell.com/show_bug.cgi?id=272093
CVE ID: CVE-2007-6735 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T20:11:26.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allows remote attackers to bypass intended access restrictions via an FTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1 - https://bugzilla.novell.com/show_bug.cgi?id=260459
CVE ID: CVE-2007-6736 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-17T02:26:26.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access arbitrary files and directories via a .. (dot dot) in a (1) LIST, (2) STOR, or (3) RETR command. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/source/detail?r=16 - http://code.google.com/p/pyftpdlib/source/diff?spec=svn16&r=16&format=side&path=/trunk/pyftpdlib/FTPServer.py - http:/
- http://code.google.com/p/pyftpdlib/source/diff?spec=svn16&r=16&format=side&path=/trunk/pyftpdlib/FTPServer.py - http://code.google.com/p/pyftpdlib/issues/detail?id=9
CVE ID: CVE-2007-6737 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-17T01:01:07.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTPServer.py in pyftpdlib before 0.2.0 does not increment the attempted_logins count for a USER command that specifies an invalid username, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/issues/detail?id=20 - http://code.google.com/p/pyftpdlib/source/diff?spec=svn23&r=23&format=side&path=/trunk/pyftpdlib/FTPServer.py - http:/
- http://code.google.com/p/pyftpdlib/source/diff?spec=svn23&r=23&format=side&path=/trunk/pyftpdlib/FTPServer.py - http://code.google.com/p/pyftpdlib/source/detail?r=23
CVE ID: CVE-2007-6738 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-16T22:09:55.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the response to this command. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY
CVE ID: CVE-2007-6739 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-17T01:21:19.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTPServer.py in pyftpdlib before 0.2.0 allows remote attackers to cause a denial of service via a long command. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/pyftpdlib/source/diff?spec=svn20&r=20&format=side&path=/trunk/pyftpdlib/FTPServer.py - http://code.google.com/p/pyftpdlib/issues/detail?id=3 - http://code.google.com/p/pyftpdlib/source/detail?r=20 - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY
CVE ID: CVE-2007-6740 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-17T04:20:25.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ftp_STOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/pyftpdlib/source/diff?spec=svn37&r=37&format=side&path=/trunk/pyftpdlib/FTPServer.py - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/source/detail?r=37 - http:/
code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/source/detail?r=37 - http://code.google.com/p/pyftpdlib/issues/detail?id=25
CVE ID: CVE-2007-6741 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-16T19:47:05.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ftp_PORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP address matches the source IP address of the connection from the FTP client, which might allow remote authenticated users to conduct FTP bounce attacks via crafted FTP data, as demonstrated by an FTP bounce attack against a NAT server, a related issue to CVE-1999-0017. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/pyftpdlib/source/browse/trunk/HI
ditional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/issues/detail?id=11 - http://code.google.com/p/pyftpdlib/source/detail?r=32 - http://code.google.com/p/pyftpdlib/source/diff?spec=svn32&r=32&format=side&path=/trunk/pyftpdlib/FTPServer.py