Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
es/fedora-package-announce/2008-January/msg00397.html - http://www.redhat.com/support/errata/RHSA-2008-0039.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154 - http://security.gentoo.org/glsa/glsa-200801-15.xml - http://www.vupen.com/english/advisories/2008/1071/references
CVE ID: CVE-2007-6602 State: PUBLISHED Published: 2007-12-31T20:00:00 Last Updated: 2024-08-07T16:11:06.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username field to the login script. Additional Analyst Notes: - CVE Program Container: References: - http://seclog.de/pub/seclog-2007-001.txt - http://osvdb.org/39832 - http://secunia.com/advisories/28259 - http://www.securityfocus.com/bid/27065 - https://www.exploit-db.com/exploits/4805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39318 - http://noserub.googlecode.com/
ploit-db.com/exploits/4805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39318 - http://noserub.googlecode.com/svn/trunk/app/models/identity.php
CVE ID: CVE-2007-6603 State: PUBLISHED Published: 2007-12-31T20:00:00 Last Updated: 2024-08-07T16:11:06.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via a direct request to control/downloadfile.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4804 - http://osvdb.org/40572 - http://secunia.com/advisories/28261 - https://exchange.x
s://www.exploit-db.com/exploits/4804 - http://osvdb.org/40572 - http://secunia.com/advisories/28261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39344
CVE ID: CVE-2007-6604 State: PUBLISHED Published: 2007-12-31T20:00:00 Last Updated: 2024-08-07T16:11:06.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the s parameter to the admin page or (2) the pg parameter to an arbitrary module, as demonstrated by reading a password hash in a .dtb file under dati/membri/ or by executing embedded PHP code in images under uploads/avatar/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4802 - https://exchange.xforce.ibmcloud.com/vulne
E Program Container: References: - https://www.exploit-db.com/exploits/4802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39282 - http://www.securityfocus.com/bid/27060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39281 - http://secunia.com/advisories/28256 - http://osvdb.org/40276
CVE ID: CVE-2007-6605 State: PUBLISHED Published: 2007-12-31T20:00:00 Last Updated: 2024-08-07T16:11:06.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control in SkyFexClient.ocx 1.0.2.77 in SkyFex Client 1.0 allows remote attackers to execute arbitrary code via long strings in the first four arguments to the Start method. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39868 - http://www.securityfocus.com/bid/27059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39288 - https://www.exploit-db.com/exploits/4801
CVE ID: CVE-2007-6606 State: PUBLISHED Published: 2007-12-31T20:00:00 Last Updated: 2024-08-07T16:11:06.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3502 - http://www.securityfocus.com/archive/1/485588/100/0/threaded - http://osvdb.org/40377 - http://sourceforge.net/project/shownotes.php?release_id=451780&group_id=50071 - http://www.securityfocus.com/bid/27053 - http://sourceforge.net/project/shownotes.php?r
lease_id=451780&group_id=50071 - http://www.securityfocus.com/bid/27053 - http://sourceforge.net/project/shownotes.php?release_id=488061&group_id=50071
CVE ID: CVE-2007-6607 State: PUBLISHED Published: 2007-12-31T20:00:00 Last Updated: 2024-08-07T16:11:06.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) shared/footer.php, (2) circ/mbr_fields.php, or (3) admin/custom_marc_form_fields.php, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3502 - http://osvdb.org/41288 - http://osvdb.org/41286 - http://www.securityfocus.com/archive/1/485588/100/0/threaded - http://sourceforge.net/project/shownotes.php?release
86 - http://www.securityfocus.com/archive/1/485588/100/0/threaded - http://sourceforge.net/project/shownotes.php?release_id=451780&group_id=50071 - http://www.securityfocus.com/bid/27053 - http://sourceforge.net/project/shownotes.php?release_id=488061&group_id=50071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39295 - http://osvdb.org/41287
CVE ID: CVE-2007-6608 State: PUBLISHED Published: 2007-12-31T20:00:00 Last Updated: 2024-08-07T16:11:06.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to admin/staff_del_confirm.php, (3) the name parameter to admin/theme_del_confirm.php, or (4) the themeName parameter to admin/theme_preview.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3502 - http://www.securityfocus.com/archive/1/485588/100/0/threaded - http://osvdb.org/3
ecurityreason.com/securityalert/3502 - http://www.securityfocus.com/archive/1/485588/100/0/threaded - http://osvdb.org/39869 - http://sourceforge.net/project/shownotes.php?release_id=451780&group_id=50071 - http://www.securityfocus.com/bid/27053 - http://sourceforge.net/project/shownotes.php?release_id=488061&group_id=50071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39297 - http://osvdb.org/39870 - http://osvdb.org/39871
CVE ID: CVE-2007-6609 State: PUBLISHED Published: 2007-12-31T20:00:00 Last Updated: 2024-08-07T16:11:06.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long (1) cTag or (2) cValue field in an OGG Vorbis file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39325 - http://securityreason.com/securityalert/3503 - http://www.securityfocus.com/archive/1/485616/100/0/threaded - http://aluigi.altervista.org/adv/culplayer-adv.
rt/3503 - http://www.securityfocus.com/archive/1/485616/100/0/threaded - http://aluigi.altervista.org/adv/culplayer-adv.txt - http://osvdb.org/42671 - http://secunia.com/advisories/28226 - http://www.securityfocus.com/bid/27061 - http://www.vupen.com/english/advisories/2008/0008
CVE ID: CVE-2007-6610 State: PUBLISHED Published: 2008-01-03T20:00:00 Last Updated: 2024-08-07T16:11:06.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: unp 1.0.12, and other versions before 1.0.14, does not properly escape file names, which might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument. NOTE: this might only be a vulnerability when unp is invoked by a third party product. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28388 - http://bugs.gentoo.org/show_bug.cgi?id=203106 - http://secunia.com/advisories/28282 - http://www.securityfocus.com/bid/27182 - http://
ntoo.org/show_bug.cgi?id=203106 - http://secunia.com/advisories/28282 - http://www.securityfocus.com/bid/27182 - http://security.gentoo.org/glsa/glsa-200801-01.xml - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448437 - http://osvdb.org/42759
CVE ID: CVE-2007-6611 State: PUBLISHED Published: 2008-01-03T22:00:00 Last Updated: 2024-08-07T16:11:06.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML via a filename, related to bug_report.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39873 - http://secunia.com/advisories/29198 - http://sourceforge.net/project/shownotes.php?release_id=562940 - http://www.securityfocus.com/bid/27045 - http://secunia.com/advisories/28551 - http://www.mantisbt.org/bugs/view.php?id=8679 - https://www.redhat.com/archive
5 - http://secunia.com/advisories/28551 - http://www.mantisbt.org/bugs/view.php?id=8679 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00227.html - http://www.debian.org/security/2008/dsa-1467 - http://secunia.com/advisories/28352 - https://bugzilla.redhat.com/show_bug.cgi?id=427277 - http://security.gentoo.org/glsa/glsa-200803-04.xml - http://secunia.com/advisories/28185 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00309.html
CVE ID: CVE-2007-6612 State: PUBLISHED Published: 2008-01-03T22:00:00 Last Updated: 2024-08-07T16:11:06.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (".%252e"). Additional Analyst Notes: - CVE Program Container: References: - http://rubyforge.org/pipermail/mongrel-users/2007-December/004736.html - http://mongrel.rubyforge.org/news.html - http://www.securityfocus.com/bid/27133 - http://secunia.com/advisories/28323 - http://osvdb.org/39866 - http://www.us-cert.
p://www.securityfocus.com/bid/27133 - http://secunia.com/advisories/28323 - http://osvdb.org/39866 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://rubyforge.org/pipermail/mongrel-users/2007-December/004742.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.vupen.com/english/advisories/2008/1697 - http://rubyforge.org/pipermail/mongrel-users/2007-December/004743.html - http://rubyforge.org/pipermail/mongrel-users/2007-December/004733.html
CVE ID: CVE-2007-6613 State: PUBLISHED Published: 2008-01-03T22:00:00 Last Updated: 2024-08-07T16:11:06.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows context-dependent attackers to cause a denial of service (core dump) and possibly execute arbitrary code via a disk or image that contains a long joilet file name. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-580-1 - http://secunia.com/advisories/29242 - https://bugzilla.redhat.com/show_bug.cgi?id=427197 -
ww.ubuntu.com/usn/usn-580-1 - http://secunia.com/advisories/29242 - https://bugzilla.redhat.com/show_bug.cgi?id=427197 - http://bugs.gentoo.org/show_bug.cgi?id=203777 - http://secunia.com/advisories/28308 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://www.vupen.com/english/advisories/2008/0030 - http://lists.gnu.org/archive/html/libcdio-devel/2007-12/msg00009.html - http://security.gentoo.org/glsa/glsa-200801-08.xml - http://www.securityfocus.com/bid/27131 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39405 - http://secunia.com/advisories/28970 - http://secunia.com/advisories/287
ange.xforce.ibmcloud.com/vulnerabilities/39405 - http://secunia.com/advisories/28970 - http://secunia.com/advisories/28796 - http://secunia.com/advisories/28569
CVE ID: CVE-2007-6614 State: PUBLISHED Published: 2008-01-03T23:00:00 Last Updated: 2024-08-07T16:11:06.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/frontpage_right.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter, a related issue to CVE-2007-6542. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39617 - http://forums.agaresmedia.com/viewtopic.php?f=13&t=407 - http://www.securityfocus.com/bid/27023 - http://secunia.com/advisories/28230 - https://www.exploit-db.com/exploits/4782 - http://www.vupen.com/english/a
/27023 - http://secunia.com/advisories/28230 - https://www.exploit-db.com/exploits/4782 - http://www.vupen.com/english/advisories/2007/4319
CVE ID: CVE-2007-6615 State: PUBLISHED Published: 2008-01-03T23:00:00 Last Updated: 2024-08-07T16:11:06.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the selected_provider parameter. Additional Analyst Notes: - CVE Program Container: References: - http://forums.agaresmedia.com/viewtopic.php?f=13&t=407 - http://osvdb.org/39618 - http://www.securityfocus.com/bid/27023 - http://secunia.com/advisories/28230 - https://www.exploit-db.com/exploits/4782 - http://www.vupen.com/english/advis
23 - http://secunia.com/advisories/28230 - https://www.exploit-db.com/exploits/4782 - http://www.vupen.com/english/advisories/2007/4319
CVE ID: CVE-2007-6616 State: PUBLISHED Published: 2008-01-03T23:00:00 Last Updated: 2024-08-07T16:11:06.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchkey parameter in a search action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485489/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39202 - http://securityreason.com/securityalert/3509 - http://secunia.com/ad
xchange.xforce.ibmcloud.com/vulnerabilities/39202 - http://securityreason.com/securityalert/3509 - http://secunia.com/advisories/28235 - http://www.securityfocus.com/bid/27005
CVE ID: CVE-2007-6617 State: PUBLISHED Published: 2008-01-03T23:00:00 Last Updated: 2024-08-07T16:11:06.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in 500page.jsp in JIRA Enterprise Edition before 3.12.1 allows remote attackers to inject arbitrary web script or HTML, which is not properly handled when generating error messages, as demonstrated by input originally sent in the URI to secure/CreateIssue. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27095 - http://confluence.atlassian.com/display/JIRA/JIRA+Securit
tainer: References: - http://www.securityfocus.com/bid/27095 - http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24 - http://osvdb.org/42768 - http://jira.atlassian.com/browse/CONF-9560 - http://secunia.com/advisories/27954 - http://www.securityfocus.com/bid/27094
CVE ID: CVE-2007-6618 State: PUBLISHED Published: 2008-01-03T23:00:00 Last Updated: 2024-08-07T16:11:06.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: JIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared filter via a modified filter ID. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27095 - http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24 - http://osvdb.org/42769 - http://secunia.com/advisories/27954
CVE ID: CVE-2007-6619 State: PUBLISHED Published: 2008-01-03T23:00:00 Last Updated: 2024-08-07T16:11:06.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete, which allows remote attackers to change the default language. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27095 - http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24 - http://osvdb.org/42770 - http://secunia.com/advisories/27954
CVE ID: CVE-2007-6620 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/images.inc.php in Joovili 2.x allows remote attackers to read arbitrary files via a .. (dot dot) in the picture parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28231 - http://www.securityfocus.com/bid/27056 - http://osvdb.org/40153 - https://www.exploit-db.com/exploits/4799
CVE ID: CVE-2007-6621 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the picture parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39666 - http://secunia.com/advisories/28231 - http://www.securityfocus.com/bid/27056 - https://www.exploit-db.com/exploits/4799
CVE ID: CVE-2007-6622 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27058 - https://www.exploit-db.com/exploits/4798 - http://osvdb.org/39759 - http://secunia.com/advisories/28194
CVE ID: CVE-2007-6623 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to list arbitrary directories via a full pathname in the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27058 - https://www.exploit-db.com/exploits/4798 - http://osvdb.org/39760 - http://secunia.com/advisories/28194
CVE ID: CVE-2007-6624 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39879 - https://www.exploit-db.com/exploits/4796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39243 - http://www.securityfocus.com/bid/27039 - http://irk4z.wordpress.com/2007/12/27/pnphpbb2-12i-printviewphp-phpex-local-file-inclusion-vuln/
CVE ID: CVE-2007-6625 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3.5.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as demonstrated by a Nessus scan. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019144 - http://www.securityfocus.com/bid/27028 - http://osvdb.org/40104 - http://support.novell.com/docs/Readm
.com/id?1019144 - http://www.securityfocus.com/bid/27028 - http://osvdb.org/40104 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5007560.html - http://secunia.com/advisories/28237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39206 - http://www.vupen.com/english/advisories/2007/4311
CVE ID: CVE-2007-6626 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the RTSP_valid_response_msg function in RTSP_state_machine.c in LScube Feng 0.1.15 and earlier allow remote attackers to execute arbitrary code via (1) a long first line of a response, as demonstrated by a long VER line; or (2) a long second line of a response, as demonstrated by a message that follows a RETURN line. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485574/100/0/threaded - http://www.securityfocus.com/bid/27049 - http://www.vupe
http://www.securityfocus.com/archive/1/485574/100/0/threaded - http://www.securityfocus.com/bid/27049 - http://www.vupen.com/english/advisories/2008/0011 - http://aluigi.org/poc/fengulo.zip - http://osvdb.org/40532 - http://aluigi.altervista.org/adv/fengulo-adv.txt - http://securityreason.com/securityalert/3507 - http://secunia.com/advisories/28229
CVE ID: CVE-2007-6627 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the RTSP_remove_msg function in RTSP_lowlevel.c in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an RTP packet with a size value of 0xffff. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485574/100/0/threaded - http://osvdb.org/40533 - http://www.securityfocus.com/bid/27049 - http://www.vupen.com/english/advisories/2008/0011 - http://aluigi.org/poc/fengulo.zip - http
curityfocus.com/bid/27049 - http://www.vupen.com/english/advisories/2008/0011 - http://aluigi.org/poc/fengulo.zip - http://aluigi.altervista.org/adv/fengulo-adv.txt - http://securityreason.com/securityalert/3507 - http://secunia.com/advisories/28229
CVE ID: CVE-2007-6628 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via (1) a malformed Transport header, which triggers misparsing in parse_transport_header in RTSP_setup.c, as demonstrated by a Transport header that contains only a "RTP/AVP;unicast;client_port" sequence; or (2) a malformed Range header, which triggers misparsing in parse_play_time_range in RTSP_Play, as demonstrated by an empty Range header. Additional Analyst Notes: - CVE Program Container: References: - h
RTSP_Play, as demonstrated by an empty Range header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485574/100/0/threaded - http://osvdb.org/40535 - http://www.securityfocus.com/bid/27049 - http://www.vupen.com/english/advisories/2008/0011 - http://aluigi.org/poc/fengulo.zip - http://aluigi.altervista.org/adv/fengulo-adv.txt - http://securityreason.com/securityalert/3507 - http://secunia.com/advisories/28229 - http://osvdb.org/40534