Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0454 State: PUBLISHED Published: 2007-02-06T02:00:00 Last Updated: 2024-08-07T12:19:30.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/649732 - http://secunia.com/advisories/24046 - http://secunia.com/advisories/24101 - http://www.securityfocus.com/archive/1/459365/100/0/threaded - http://www.gento
- http://secunia.com/advisories/24101 - http://www.securityfocus.com/archive/1/459365/100/0/threaded - http://www.gentoo.org/security/en/glsa/glsa-200702-01.xml - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html - http://securitytracker.com/id?1017588 - http://secunia.com/advisories/24151 - http://www.vupen.com/english/advisories/2007/0483 - http://secunia.com/advisories/24021 - https://issues.rpath.com/browse/RPL-1005 - http://us1.samba.org/samba/security/CVE-2007-0454.html - http://secunia.com/advisories/24067 - http://osvdb.org/33101 - http://secunia.com/advisories/24145 - http://secunia.com/advisories/24060 - http://www.mandriva.com/security/advisories?name=MDKSA-2007
com/advisories/24145 - http://secunia.com/advisories/24060 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:034 - http://www.securityfocus.com/archive/1/459179/100/0/threaded - http://www.trustix.org/errata/2007/0007 - http://www.ubuntu.com/usn/usn-419-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32304 - http://www.securityfocus.com/bid/22403 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916 - http://www.debian.org/security/2007/dsa-1257
CVE ID: CVE-2007-0455 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:19:29.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24022 - http://secunia.com/advisories/29157 - http://secunia.com/advisories/24107 - http://secunia.com/advisories/24143 - http://www.securityfocus.com/bid/22289 - http://www.securi
.com/advisories/24107 - http://secunia.com/advisories/24143 - http://www.securityfocus.com/bid/22289 - http://www.securityfocus.com/archive/1/466166/100/0/threaded - http://www.vupen.com/english/advisories/2007/0400 - http://secunia.com/advisories/23916 - http://secunia.com/advisories/24151 - http://www.redhat.com/support/errata/RHSA-2007-0162.html - http://secunia.com/advisories/42813 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:038 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:035 - http://www.vupen.com/english/advisories/2011/0022 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11303 - http://bugzilla.redhat.com/bug
://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11303 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607 - http://lists.rpath.com/pipermail/security-announce/2007-February/000145.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html - http://secunia.com/advisories/24945 - https://issues.rpath.com/browse/RPL-1268 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:109 - http://www.redhat.com/support/errata/RHSA-2008-0146.html - http://www.trustix.org/errata/2007/0007 - http://secunia.com/advisories/24053 - http://secunia.com/advisories/24924 - http://secunia.com/advisories/24052 - http://lists.fedoraproj
m/advisories/24053 - http://secunia.com/advisories/24924 - http://secunia.com/advisories/24052 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html - http://rhn.redhat.com/errata/RHSA-2007-0155.html - http://secunia.com/advisories/24965 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:036 - http://secunia.com/advisories/25575 - http://fedoranews.org/cms/node/2631 - https://issues.rpath.com/browse/RPL-1030 - http://www.ubuntu.com/usn/usn-473-1 - http://www.redhat.com/support/errata/RHSA-2007-0153.html
CVE ID: CVE-2007-0456 State: PUBLISHED Published: 2007-02-02T20:00:00 Last Updated: 2024-08-07T12:19:29.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the LLT dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://fedoranews.org/cms/node/2565 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11342 - http://secunia.com/advisories/24970 - http://secunia.com/advisories/24016 - http://www.vupen.com/english/advisories/2007/0443 - http://sec
/advisories/24970 - http://secunia.com/advisories/24016 - http://www.vupen.com/english/advisories/2007/0443 - http://securitytracker.com/id?1017581 - http://secunia.com/advisories/24084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32056 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:033 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14867 - http://support.avaya.com/elmodocs2/security/ASA-2007-166.htm - https://issues.rpath.com/browse/RPL-985 - http://secunia.com/advisories/24650 - http://www.redhat.com/support/errata/RHSA-2007-0066.html - http://secunia.com/advisories/24025 - http://osvdb.org/33073 - http://secunia.com/adviso
rt/errata/RHSA-2007-0066.html - http://secunia.com/advisories/24025 - http://osvdb.org/33073 - http://secunia.com/advisories/24515 - http://secunia.com/advisories/24011 - http://www.securityfocus.com/bid/22352 - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - http://www.wireshark.org/security/wnpa-sec-2007-01.html
CVE ID: CVE-2007-0457 State: PUBLISHED Published: 2007-02-02T20:00:00 Last Updated: 2024-08-07T12:19:30.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IEEE 802.11 dissector in Wireshark (formerly Ethereal) 0.10.14 through 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://fedoranews.org/cms/node/2565 - http://secunia.com/advisories/24970 - http://secunia.com/advisories/24016 - http://www.vupen.com/english/advisories/2007/0443 - http://securitytracker.com/id?1017581 - http://secunia.com/advisories/24084 - http://osvdb.o
lish/advisories/2007/0443 - http://securitytracker.com/id?1017581 - http://secunia.com/advisories/24084 - http://osvdb.org/33074 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:033 - http://support.avaya.com/elmodocs2/security/ASA-2007-166.htm - https://issues.rpath.com/browse/RPL-985 - http://secunia.com/advisories/24650 - http://www.redhat.com/support/errata/RHSA-2007-0066.html - http://secunia.com/advisories/24025 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11003 - http://secunia.com/advisories/24515 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32055 - http://secunia.com/advisories/24011 - http://www.securityfocus.com/bi
change.xforce.ibmcloud.com/vulnerabilities/32055 - http://secunia.com/advisories/24011 - http://www.securityfocus.com/bid/22352 - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - http://www.wireshark.org/security/wnpa-sec-2007-01.html
CVE ID: CVE-2007-0458 State: PUBLISHED Published: 2007-02-02T20:00:00 Last Updated: 2024-08-07T12:19:30.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors, a different issue than CVE-2006-5468. Additional Analyst Notes: - CVE Program Container: References: - http://fedoranews.org/cms/node/2565 - http://secunia.com/advisories/24970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32054 - http://secunia.com/advisories/24016 - http://www.vupen.com/english/advisories/2007/0443 - http:
/vulnerabilities/32054 - http://secunia.com/advisories/24016 - http://www.vupen.com/english/advisories/2007/0443 - http://securitytracker.com/id?1017581 - http://secunia.com/advisories/24084 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14836 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10966 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:033 - http://support.avaya.com/elmodocs2/security/ASA-2007-166.htm - https://issues.rpath.com/browse/RPL-985 - http://secunia.com/advisories/24650 - http://www.redhat.com/support/errata/RHSA-2007-0066.html - http://secunia.com/advisories/24025 - http://secu
ies/24650 - http://www.redhat.com/support/errata/RHSA-2007-0066.html - http://secunia.com/advisories/24025 - http://secunia.com/advisories/24515 - http://secunia.com/advisories/24011 - http://www.securityfocus.com/bid/22352 - http://osvdb.org/33075 - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - http://www.wireshark.org/security/wnpa-sec-2007-01.html
CVE ID: CVE-2007-0459 State: PUBLISHED Published: 2007-02-02T20:00:00 Last Updated: 2024-08-07T12:19:29.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: packet-tcp.c in the TCP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.4 allows remote attackers to cause a denial of service (application crash or hang) via fragmented HTTP packets. Additional Analyst Notes: - CVE Program Container: References: - http://fedoranews.org/cms/node/2565 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14875 - http://secunia.com/advisories/24970 - http://secunia.com/advisories/24016 - http://www.vupen.com/english/advisories/2007/0443 - http://
com/advisories/24970 - http://secunia.com/advisories/24016 - http://www.vupen.com/english/advisories/2007/0443 - http://securitytracker.com/id?1017581 - http://secunia.com/advisories/24084 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:033 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10465 - http://support.avaya.com/elmodocs2/security/ASA-2007-166.htm - https://issues.rpath.com/browse/RPL-985 - http://secunia.com/advisories/24650 - http://www.redhat.com/support/errata/RHSA-2007-0066.html - http://secunia.com/advisories/24025 - http://secunia.com/advisories/24515 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32053 - http://se
ies/24025 - http://secunia.com/advisories/24515 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32053 - http://secunia.com/advisories/24011 - http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1200 - http://www.securityfocus.com/bid/22352 - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - http://www.wireshark.org/security/wnpa-sec-2007-01.html
CVE ID: CVE-2007-0460 State: PUBLISHED Published: 2007-01-24T01:00:00 Last Updated: 2024-08-07T12:19:30.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in ulogd for SUSE Linux 9.3 up to 10.1, and possibly other distributions, have unknown impact and attack vectors related to "improper string length calculations." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32939 - http://secunia.com/advisories/23863 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:028 - http://security.gentoo.org/glsa/glsa-200703-17.xml - http://secunia.com/advisories/24524 - http://www.novell.com/linux/security/advisories/2007_01_sr
sa/glsa-200703-17.xml - http://secunia.com/advisories/24524 - http://www.novell.com/linux/security/advisories/2007_01_sr.html - http://www.securityfocus.com/bid/22139
CVE ID: CVE-2007-0461 State: PUBLISHED Published: 2007-01-24T01:00:00 Last Updated: 2024-08-07T12:19:30.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in the Dazuko anti-virus helper module before 2.3.2 allow attackers to cause a denial of service (memory consumption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38322 - http://www.novell.com/linux/security/advisories/2007_01_sr.html
CVE ID: CVE-2007-0462 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PICT image with a malformed Alpha RGB (ARGB) record, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22207 - http://secunia.com/advisories/23859 - https://exchange.xforce.ibmcloud.com/vulnerab
://www.securityfocus.com/bid/22207 - http://secunia.com/advisories/23859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31698 - http://projects.info-pull.com/moab/MOAB-23-01-2007.html - http://www.vupen.com/english/advisories/2007/0337 - http://www.osvdb.org/32696
CVE ID: CVE-2007-0463 State: PUBLISHED Published: 2007-01-29T16:00:00 Last Updated: 2024-08-07T12:19:30.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in (1) SWUTMP or (2) SUCATALOG filenames, or using the (3) application/x-apple.sucatalog+xml MIME type. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://www.osvdb.org/32703 - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
/TA07-072A.html - http://www.osvdb.org/32703 - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://projects.info-pull.com/moab/MOAB-24-01-2007.html - http://docs.info.apple.com/article.html?artnum=305214 - http://www.vupen.com/english/advisories/2007/0337 - http://www.securitytracker.com/id?1017755 - http://www.vupen.com/english/advisories/2007/0930 - http://www.securityfocus.com/bid/22222 - http://secunia.com/advisories/24479
CVE ID: CVE-2007-0464 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:19:30.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause a denial of service (application crash) via a crafted HTTP 301 response, which results in a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26444 - https://www.exploit-db.com/exploits/3200 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=30
://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://projects.info-pull.com/moab/MOAB-25-01-2007.html - http://www.vupen.com/english/advisories/2007/3868 - http://www.osvdb.org/32704 - http://secunia.com/advisories/27643 - http://www.securityfocus.com/bid/22249 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/31837
CVE ID: CVE-2007-0465 State: PUBLISHED Published: 2007-01-31T01:00:00 Last Updated: 2024-08-07T12:19:29.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Apple Installer 2.1.5 on Mac OS X 10.4.8 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a (1) PKG, (2) DISTZ, or (3) MPKG package filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31883 - http://secunia.com/advisories/24966 - http://www.securityfocus.com/bid/22272 - http://docs.info.apple.com/article.html?artnum=305391 - http://www.us-cert.gov/cas/techalerts/TA07-109A.htm
/bid/22272 - http://docs.info.apple.com/article.html?artnum=305391 - http://www.us-cert.gov/cas/techalerts/TA07-109A.html - http://www.osvdb.org/32705 - http://www.securitytracker.com/id?1017940 - http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html - http://www.vupen.com/english/advisories/2007/1470 - http://projects.info-pull.com/moab/MOAB-26-01-2007.html
CVE ID: CVE-2007-0466 State: PUBLISHED Published: 2007-01-31T01:00:00 Last Updated: 2024-08-07T12:19:30.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telestream Flip4Mac Windows Media Components for Quicktime 2.1.0.33 allows remote attackers to execute arbitrary code via a crafted ASF_File_Properties_Object size field in a WMV file, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://projects.info-pull.com/moab/MOAB-27-01-2007.html - http://www.osvdb.org/32697 - http://www.securityfocus.com/bid/22286 - http://secunia.com/advisories/23958 - http://www.vupen.com/english/advisories/2007/0389
CVE ID: CVE-2007-0467 State: PUBLISHED Published: 2007-01-31T02:00:00 Last Updated: 2024-08-07T12:19:30.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges via a symlink attack on application logs in /Library/Logs/CrashReporter/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31888 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://www.securitytracker.c
y-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://www.securitytracker.com/id?1017751 - http://projects.info-pull.com/moab/MOAB-28-01-2007.html - http://www.vupen.com/english/advisories/2007/0930 - http://www.osvdb.org/32706 - http://www.kb.cert.org/vuls/id/363112 - http://secunia.com/advisories/24479
CVE ID: CVE-2007-0468 State: PUBLISHED Published: 2007-01-24T01:00:00 Last Updated: 2024-08-07T12:19:30.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ (MSVC) in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a long file path in the "1 TYPELIB MOVEABLE PURE" option in an RC file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31665 - http://www.securityfocus.com/archive/1/457646/100/0/threaded - http://secunia.com/advisories/23856 - http://www.anspi.pl/~porkythepig/visualization/rc-kupie
/1/457646/100/0/threaded - http://secunia.com/advisories/23856 - http://www.anspi.pl/~porkythepig/visualization/rc-kupiekrowe.cpp - http://www.vupen.com/english/advisories/2007/0296 - http://securityreason.com/securityalert/2172 - http://osvdb.org/31607
CVE ID: CVE-2007-0469 State: PUBLISHED Published: 2007-01-24T01:00:00 Last Updated: 2024-08-07T12:19:30.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The extract_files function in installer.rb in RubyGems before 0.9.1 does not check whether files exist before overwriting them, which allows user-assisted remote attackers to overwrite arbitrary files, cause a denial of service, or execute arbitrary code via crafted GEM packages. Additional Analyst Notes: - CVE Program Container: References: - http://rubyforge.org/frs/shownotes.php?release_id=9074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31688 - http://www.novell.com/linux/security/advisories/2007_4_sr.html - htt
xchange.xforce.ibmcloud.com/vulnerabilities/31688 - http://www.novell.com/linux/security/advisories/2007_4_sr.html - http://www.securityfocus.com/archive/1/458128/100/0/threaded - http://www.vupen.com/english/advisories/2007/0295 - http://marc.info/?l=full-disclosure&m=116939816621060&w=2
CVE ID: CVE-2007-0470 State: PUBLISHED Published: 2007-01-24T01:00:00 Last Updated: 2024-08-07T12:19:30.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in tip in Sun Solaris 8, 9, and 10 allow local users to gain uucp account privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017546 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102773-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31669 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2038 - http://www.vupen.com/english/advisories/2007/0317 - http:
ository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2038 - http://www.vupen.com/english/advisories/2007/0317 - http://www.securityfocus.com/bid/22190 - http://secunia.com/advisories/23821 - http://osvdb.org/31616
CVE ID: CVE-2007-0471 State: PUBLISHED Published: 2007-01-24T01:00:00 Last Updated: 2024-08-07T12:19:30.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and possibly VPN-1 NGX R62, allows remote attackers to bypass security requirements via a crafted Report parameter, which returns a valid ICSCookie authentication token. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017559 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051920.html - http://www.securityfocus.com/archive
559 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051920.html - http://www.securityfocus.com/archive/1/457683/100/0/threaded - http://www.checkpoint.com/downloads/latest/hfa/connectra/security_r62.html - http://www.checkpoint.com/downloads/latest/hfa/vpn1_security/vpn1_R62_Windows.html - http://securityreason.com/securityalert/2179 - http://secunia.com/advisories/23847 - http://www.securityfocus.com/archive/1/457621/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31646 - http://secureknowledge.checkpoint.com/SecureKnowledge/viewSolutionDocument.do?lid=sk32472 - http://osvdb.org/31655 - http://securitytracker.com/id?1017560 - http://updates.checkpoint
tionDocument.do?lid=sk32472 - http://osvdb.org/31655 - http://securitytracker.com/id?1017560 - http://updates.checkpoint.com/fileserver/ID/7126/FILE/VPN-1_Hotfix1.pdf - http://www.vupen.com/english/advisories/2007/0276
CVE ID: CVE-2007-0472 State: PUBLISHED Published: 2007-02-03T23:00:00 Last Updated: 2024-08-07T12:19:30.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23984 - https://lists.berlios.de/pipermail/