Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5490 State: PUBLISHED Published: 2007-10-17T18:00:00 Last Updated: 2024-08-07T15:31:58.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in Okul Otomasyon Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26094 - https://www.exploit-db.com/exploits/4539 - http://secunia.com/advisories/27268 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37237
CVE ID: CVE-2007-5491 State: PUBLISHED Published: 2007-10-17T19:00:00 Last Updated: 2024-08-07T15:31:58.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to chmod arbitrary files to 0777 via ".." sequences in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup - http://secunia.com/advisories/27503 - https://bugs.gentoo.org/show_bug.cgi?id=195810 - http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml - http://www.securityfocus.co
too.org/show_bug.cgi?id=195810 - http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml - http://www.securityfocus.com/bid/26126 - http://secunia.com/advisories/28008 - http://www.debian.org/security/2007/dsa-1423 - http://www.vupen.com/english/advisories/2007/3768
CVE ID: CVE-2007-5492 State: PUBLISHED Published: 2007-10-17T19:00:00 Last Updated: 2024-08-07T15:31:58.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the value parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27503 - https://bugs.gentoo.org/show_bug.cgi?id=195810 - http://www.securityfocus.com/archive/1/482499/100/0/threaded - https://bugs.gentoo.org/attachment.cgi?id=133465&action=view - http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml - http://te
.gentoo.org/attachment.cgi?id=133465&action=view - http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml - http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup - http://www.securityfocus.com/bid/26126 - http://secunia.com/advisories/28008 - http://osvdb.org/43760 - http://www.debian.org/security/2007/dsa-1423 - http://www.vupen.com/english/advisories/2007/3768
CVE ID: CVE-2007-5493 State: PUBLISHED Published: 2007-10-18T00:00:00 Last Updated: 2024-08-07T15:31:59.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMS handler for Windows Mobile 2005 Pocket PC Phone edition allows attackers to hide the sender field of an SMS message via a malformed WAP PUSH message that causes the PDU to be incorrectly decoded. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37249 - http://osvdb.org/45517 - http://www.securityfocus.com/bid/26091 - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-011.txt - http://securitytracker.com/id?1018832 - http://www.securi
tec.com/content/en/us/enterprise/research/SYMSA-2007-011.txt - http://securitytracker.com/id?1018832 - http://www.securityfocus.com/archive/1/482446/100/0/threaded
CVE ID: CVE-2007-5494 State: PUBLISHED Published: 2007-11-30T02:00:00 Last Updated: 2024-08-07T15:31:59.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4 and 5 allows local users to cause a denial of service (memory consumption) via a large number of open requests involving O_ATOMICLOOKUP. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28162 - http://www.redhat.com/support/errata/RHSA-2007-1104.html - http://osvdb.org/44153 - http://secunia.com/advisories/27824 - https://bugzilla.redhat.com/show_bug.cgi?id=315051 - http://www.securityt
/44153 - http://secunia.com/advisories/27824 - https://bugzilla.redhat.com/show_bug.cgi?id=315051 - http://www.securitytracker.com/id?1019017 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10884 - http://www.redhat.com/support/errata/RHSA-2007-0993.html - http://www.securityfocus.com/bid/26657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38823
CVE ID: CVE-2007-5495 State: PUBLISHED Published: 2008-05-23T14:00:00 Last Updated: 2024-08-07T15:31:58.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42591 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9705 - http://secunia.com/advisories/30339 - https://bugzilla.redhat.com/show_bug.cgi?id=288221 - http://securitytracker.com/id?1020077 - http://www.redhat.com/support/errata/RHSA-200
edhat.com/show_bug.cgi?id=288221 - http://securitytracker.com/id?1020077 - http://www.redhat.com/support/errata/RHSA-2008-0061.html - http://www.securityfocus.com/bid/29320
CVE ID: CVE-2007-5496 State: PUBLISHED Published: 2008-05-23T14:00:00 Last Updated: 2024-08-07T15:31:58.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name, which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020078 - http://www.securityfocus.com/bid/29324 - https://bugzilla.redhat.com/show_bug.cgi?id=288271 - https://exchange.xforce.ibmcloud.com/vulner
tyfocus.com/bid/29324 - https://bugzilla.redhat.com/show_bug.cgi?id=288271 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42592 - http://secunia.com/advisories/30339 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10455 - http://www.redhat.com/support/errata/RHSA-2008-0061.html
CVE ID: CVE-2007-5497 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T15:31:58.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27965 - http://www.securitytracker.com/id?1019537 - http://www.securityfocus.com/bid/26772 - http://www.vmware.com/security/advisories/VMSA-2008-0004.html - http://secunia.com/advisories/28541 - http://secunia.com/advisories/28000 - https://exchange.xforce.ibmcloud.com/vulne
- http://secunia.com/advisories/28541 - http://secunia.com/advisories/28000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38903 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10399 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 - http://www.redhat.com/support/errata/RHSA-2008-0003.html - http://www.vupen.com/english/advisories/2007/4135 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 - http://www.securityfocus.com/archive/1/487999/100/0/threaded - http://secunia.com/advisories/28042 - http://www.securityfocus.com/archive/1/489082/100/0/threaded - http://secunia.com/advisories/29224 - https://www.r
042 - http://www.securityfocus.com/archive/1/489082/100/0/threaded - http://secunia.com/advisories/29224 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00629.html - http://secunia.com/advisories/40551 - http://www.debian.org/security/2007/dsa-1422 - http://www.novell.com/linux/security/advisories/2007_25_sr.html - http://secunia.com/advisories/27987 - http://secunia.com/advisories/28030 - http://www.vupen.com/english/advisories/2008/0761 - http://support.citrix.com/article/CTX118766 - http://secunia.com/advisories/27889 - http://secunia.com/advisories/28648 - http://www.vupen.com/english/advisories/2010/1796 - http://www.ubuntu.com/usn/usn-555-1 - http://secunia.co
ries/28648 - http://www.vupen.com/english/advisories/2010/1796 - http://www.ubuntu.com/usn/usn-555-1 - http://secunia.com/advisories/28360 - http://sourceforge.net/project/shownotes.php?release_id=560230&group_id=2406 - http://secunia.com/advisories/32774 - https://issues.rpath.com/browse/RPL-2011 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00618.html - http://lists.vmware.com/pipermail/security-announce/2008/000007.html - http://support.avaya.com/elmodocs2/security/ASA-2008-040.htm - http://wiki.rpath.com/Advisories:rPSA-2007-0262 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:242
CVE ID: CVE-2007-5498 State: PUBLISHED Published: 2008-05-08T00:00:00 Last Updated: 2024-08-07T15:31:58.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtualized guest, allows local privileged users in the guest OS to cause a denial of service (host OS crash) via a request that specifies a large number of blocks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29082 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9452 - https://bugzilla.redhat.com/show_bug.cgi?id=369531 - h
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9452 - https://bugzilla.redhat.com/show_bug.cgi?id=369531 - http://secunia.com/advisories/30116 - http://www.redhat.com/support/errata/RHSA-2008-0233.html - http://secunia.com/advisories/32918 - http://www.ubuntu.com/usn/usn-679-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42274
CVE ID: CVE-2007-5499 State: REJECTED Published: 2007-11-21T22:00:00Z Last Updated: 2024-09-17T00:02:17.492Z Description: No description available.
CVE ID: CVE-2007-5500 State: PUBLISHED Published: 2007-11-20T02:00:00 Last Updated: 2024-08-07T15:31:59.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wait_task_stopped function in the Linux kernel before 2.6.23.8 checks a TASK_TRACED bit instead of an exit_state value, which allows local users to cause a denial of service (machine crash) via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30962 - http://secunia.com/advisories/27922 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.23.y.git%3Ba=commitdiff%3Bh=36ef66c5d137b9
advisories/27922 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.23.y.git%3Ba=commitdiff%3Bh=36ef66c5d137b9a31fd8c35d236fb9e26ef74f97 - http://secunia.com/advisories/27703 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00170.html - http://secunia.com/advisories/27919 - http://secunia.com/advisories/28706 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:008 - http://www.debian.org/security/2007/dsa-1428 - http://secunia.com/advisories/28033 - http://secunia.com/advisories/27664 - http://www.security
security/2007/dsa-1428 - http://secunia.com/advisories/28033 - http://secunia.com/advisories/27664 - http://www.securityfocus.com/bid/26477 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:044 - http://www.novell.com/linux/security/advisories/2007_63_kernel.html - http://secunia.com/advisories/29245 - https://issues.rpath.com/browse/RPL-1965 - http://www.ubuntu.com/usn/usn-558-1 - http://www.vupen.com/english/advisories/2007/3902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38547 - http://secunia.com/advisories/28748 - http://www.ubuntu.com/usn/usn-574-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.8 - http://secunia.com/advisories/28971 - https://ova
4-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.8 - http://secunia.com/advisories/28971 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9868 - http://secunia.com/advisories/28170 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00302.html - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00032.html - http://www.ubuntu.com/usn/usn-578-1 - http://secunia.com/advisories/27888 - http://rhn.redhat.com/errata/RHSA-2008-0055.html - http://secunia.com/advisories/30818 - http://lists.opensuse.org/opensuse-security-a
hat.com/errata/RHSA-2008-0055.html - http://secunia.com/advisories/30818 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
CVE ID: CVE-2007-5501 State: PUBLISHED Published: 2007-11-15T20:00:00 Last Updated: 2024-08-07T15:31:58.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c in Linux kernel 2.6.21 through 2.6.23.7, and 2.6.24-rc through 2.6.24-rc2, allows remote attackers to cause a denial of service (crash) via crafted ACK responses that trigger a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=96a2d41a3e495734b63bff4e5dd0112741b93b38 - http://lwn.net/Articles/258947/ - http://secunia.com/advisories/27922 - http://s
2d41a3e495734b63bff4e5dd0112741b93b38 - http://lwn.net/Articles/258947/ - http://secunia.com/advisories/27922 - http://secunia.com/advisories/27703 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00170.html - http://secunia.com/advisories/27919 - http://secunia.com/advisories/28706 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38548 - http://secunia.com/advisories/27664 - http://www.securityfocus.com/bid/26474 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:044 - http://www.novell.com/linux/security/advisories/2007_63_kernel.html - http://secunia.com/advisories/29245
VSA-2008:044 - http://www.novell.com/linux/security/advisories/2007_63_kernel.html - http://secunia.com/advisories/29245 - https://issues.rpath.com/browse/RPL-1965 - http://www.ubuntu.com/usn/usn-558-1 - http://www.vupen.com/english/advisories/2007/3902 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.24-rc3 - http://www.ubuntu.com/usn/usn-574-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.8 - http://secunia.com/advisories/28170 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00302.html - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00032.html - http://secunia.com/advisories/27888
CVE ID: CVE-2007-5502 State: PUBLISHED Published: 2007-12-01T02:00:00 Last Updated: 2024-08-07T15:31:58.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4044 - http://www.securityfocus.com/bid/26652 - http://www.securitytracker.com/id?1019029 - http://www.openssl.org/news/secadv_20071129.tx
securityfocus.com/bid/26652 - http://www.securitytracker.com/id?1019029 - http://www.openssl.org/news/secadv_20071129.txt - http://secunia.com/advisories/27859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38796 - http://www.kb.cert.org/vuls/id/150249
CVE ID: CVE-2007-5503 State: PUBLISHED Published: 2007-11-30T01:00:00 Last Updated: 2024-08-07T15:31:58.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-1966 - https://usn.ubuntu.com/550-2/ - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - http://secunia.com/advisories/28529
glsa-201209-25.xml - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - http://secunia.com/advisories/28529 - http://secunia.com/advisories/28555 - http://secunia.com/advisories/27985 - http://secunia.com/advisories/27880 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0015 - https://bugzilla.redhat.com/show_bug.cgi?id=387431 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.362119 - http://gitweb.freedesktop.org/?p=cairo%3Ba=commitdiff%3Bh=e49bcde27f88e21d5b8037a0089a226096f6514b - http://www.debian.org/security/2008/dsa-1542 - http://secunia.com/advisories/28289 - http://www.vmware.com/support/server/doc/releasenotes_server.html - ht
/dsa-1542 - http://secunia.com/advisories/28289 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://secunia.com/advisories/28476 - http://secunia.com/advisories/27887 - http://bugs.gentoo.org/show_bug.cgi?id=201860 - http://www.securityfocus.com/bid/26650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38771 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://www.gentoo.org/security/en/glsa/glsa-200712-24.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2008:019 - http://secunia.com/advisories/27819 - https://usn.ubuntu.com/550-1/ - http://bugs.gentoo.org/show_bug.cgi?id=200350 - https://www.redhat.com/archives/fedora-pac
tps://usn.ubuntu.com/550-1/ - http://bugs.gentoo.org/show_bug.cgi?id=200350 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00630.html - http://security.gentoo.org/glsa/glsa-200712-04.xml - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://www.vupen.com/english/advisories/2007/4045 - http://www.securityfocus.com/archive/1/495869/100/0/threaded - http://secunia.com/advisories/31711 - http://gitweb.freedesktop.org/?p=cairo%3Ba=commitdiff_plain%3Bh=6020f67f1a49cfe3844c4938d4af24c63c8424cc%3Bhp=c79fc9af334fd6f2d1078071d64178125561b187 - http://gitweb.freedesktop.org/?p=cairo%3Ba=commitdiff%3Bh=5c7d2d14d78e4dfb1ef6d2c40f0910f177e07360 - http://lists.gr
7 - http://gitweb.freedesktop.org/?p=cairo%3Ba=commitdiff%3Bh=5c7d2d14d78e4dfb1ef6d2c40f0910f177e07360 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html - http://secunia.com/advisories/31707 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11251 - http://www.securitytracker.com/id?1019027 - http://secunia.com/advisories/28838 - http://secunia.com/advisories/27775 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html - http://secunia.com/advisories/29767 - http://www.securityfocus.com/archive/1/486405/100/0/threaded - http://rhn.redhat.com/errata/RHSA-2007-1078.html - http://www.vupen.com/english/advisor
rchive/1/486405/100/0/threaded - http://rhn.redhat.com/errata/RHSA-2007-1078.html - http://www.vupen.com/english/advisories/2008/2466
CVE ID: CVE-2007-5504 State: PUBLISHED Published: 2007-10-17T23:00:00 Last Updated: 2024-08-07T15:31:58.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+ and 10.1.0.5 unknown impact and remote attack vectors, related to (1) Import (DB01) and (2) Advanced Queuing (DB25). NOTE: as of 20071108, Oracle has not disputed reliable researcher claims that DB25 is for a buffer overflow in the DBLINK_INFO procedure in the DBMS_AQADM_SYS package. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html - http://www.vupen.com/english/advisories/20
- http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html - http://www.vupen.com/english/advisories/2007/3524 - http://www.vupen.com/english/advisories/2007/3626 - http://www.us-cert.gov/cas/techalerts/TA07-290A.html - http://marc.info/?l=bugtraq&m=119332677525918&w=2 - http://www.securityfocus.com/bid/26235 - http://www.securityfocus.com/archive/1/482923/100/100/threaded - http://www.appsecinc.com/resources/alerts/oracle/2007-08.shtml - http://marc.info/?l=bugtraq&m=119332677525918&w=2 - http://www.securitytracker.com/id?1018823 - http://secunia.com/advisories/27409 - http://secunia.com/advisories/27251
CVE ID: CVE-2007-5505 State: PUBLISHED Published: 2007-10-17T23:00:00 Last Updated: 2024-08-07T15:31:58.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to (1) the Export component (DB02), (2) Oracle Text (DB04), (3) Oracle Text (DB05), (4) Spatial component (DB07), and (5) Advanced Security Option (DB19). Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html - http://www.vupen.com/english/advisories/2007/3524 - http://www.vupen.com/
twork/topics/security/cpuoct2007-092913.html - http://www.vupen.com/english/advisories/2007/3524 - http://www.vupen.com/english/advisories/2007/3626 - http://www.us-cert.gov/cas/techalerts/TA07-290A.html - http://marc.info/?l=bugtraq&m=119332677525918&w=2 - http://marc.info/?l=bugtraq&m=119332677525918&w=2 - http://www.securitytracker.com/id?1018823 - http://secunia.com/advisories/27409 - http://secunia.com/advisories/27251
CVE ID: CVE-2007-5506 State: PUBLISHED Published: 2007-10-17T23:00:00 Last Updated: 2024-08-07T15:31:58.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Core RDBMS component in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote attackers to cause a denial of service (CPU consumption) via a crafted type 6 Data packet, aka DB20. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html - http://www.securityfocus.com/bid/26108 - http://www.vupen.com/english/advisories/2007/3524 - http://www.securityfocus.com/archive/1/482424/100/0/threaded - http://www.vupen.com/eng
m/english/advisories/2007/3524 - http://www.securityfocus.com/archive/1/482424/100/0/threaded - http://www.vupen.com/english/advisories/2007/3626 - http://www.us-cert.gov/cas/techalerts/TA07-290A.html - http://securityreason.com/securityalert/3244 - http://marc.info/?l=bugtraq&m=119332677525918&w=2 - http://marc.info/?l=bugtraq&m=119332677525918&w=2 - http://www.securitytracker.com/id?1018823 - http://secunia.com/advisories/27409 - http://secunia.com/advisories/27251
CVE ID: CVE-2007-5507 State: PUBLISHED Published: 2007-10-17T23:00:00 Last Updated: 2024-08-07T15:31:58.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GIOP service in TNS Listener in the Oracle Net Services component in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote attackers to cause a denial of service (crash) or read potentially sensitive memory via a connect GIOP packet with an invalid data size, which triggers a buffer over-read, aka DB22. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html - http://www.securityfocus.com/archive/1/482423/100/0/th