Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5238 State: PUBLISHED Published: 2007-10-06T00:00:00 Last Updated: 2024-08-07T15:24:42.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information (the Java Web Start cache location) via an untrusted application, aka "three vulnerabilities." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0132.html - http://www.redhat.com/support
rogram Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0132.html - http://www.redhat.com/support/errata/RHSA-2007-1041.html - http://www.vupen.com/english/advisories/2007/3895 - http://secunia.com/advisories/30676 - http://secunia.com/advisories/29042 - http://secunia.com/advisories/27693 - http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html - http://www.novell.com/linux/security/advisories/2007_55_java.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36946 - http://secunia.com/advisories/29897 - http://secunia.com/advisories/27206 - http://secunia.com/advisories/27804 - http://security.gentoo.org/glsa/glsa-200804-28.xml - http:/
com/advisories/27206 - http://secunia.com/advisories/27804 - http://security.gentoo.org/glsa/glsa-200804-28.xml - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 - http://secunia.com/advisories/29858 - http://www.redhat.com/support/errata/RHSA-2007-0963.html - http://www.vupen.com/english/advisories/2008/0609 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html - http://secunia.com/advisories/27261 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 - http://www.securityfocus.com/archive/1/482926/100/0/threaded - http://secunia.com/advisories/28777 - http://dev2dev.bea.com/pub/advisory/272 - http://secuni
/1/482926/100/0/threaded - http://secunia.com/advisories/28777 - http://dev2dev.bea.com/pub/advisory/272 - http://secunia.com/advisories/30780 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11592 - http://www.securityfocus.com/bid/25920 - http://secunia.com/advisories/28880 - http://secunia.com/advisories/27716 - http://www.vupen.com/english/advisories/2008/1856/references - http://www.vmware.com/security/advisories/VMSA-2008-0010.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103073-1 - http://www.securitytracker.com/id?1018770 - http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml - http://www.gentoo.org/security/en/glsa/glsa-
om/id?1018770 - http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml - http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml
CVE ID: CVE-2007-5239 State: PUBLISHED Published: 2007-10-06T00:00:00 Last Updated: 2024-08-07T15:24:42.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows user-assisted remote attackers to copy or rename arbitrary files when local users perform drag-and-drop operations from the untrusted application or applet window onto certain types of desktop applications. Additional Analyst Notes: - CVE Program Container:
lication or applet window onto certain types of desktop applications. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0132.html - http://www.redhat.com/support/errata/RHSA-2007-1041.html - http://www.vupen.com/english/advisories/2007/3895 - http://secunia.com/advisories/30676 - http://secunia.com/advisories/29042 - http://secunia.com/advisories/27693 - http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html - http://www.novell.com/linux/security/advisories/2007_55_java.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103072-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36950 - ht
olve.sun.com/search/document.do?assetkey=1-26-103072-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36950 - http://secunia.com/advisories/29897 - http://secunia.com/advisories/27206 - http://secunia.com/advisories/27804 - http://security.gentoo.org/glsa/glsa-200804-28.xml - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 - http://secunia.com/advisories/29858 - http://www.redhat.com/support/errata/RHSA-2007-0963.html - http://www.redhat.com/support/errata/RHSA-2008-0100.html - http://www.vupen.com/english/advisories/2008/0609 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html - http://secunia.com/advisories/27261 - http://h2
://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html - http://secunia.com/advisories/27261 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 - http://www.securityfocus.com/archive/1/482926/100/0/threaded - http://secunia.com/advisories/28777 - http://www.redhat.com/support/errata/RHSA-2008-0156.html - http://dev2dev.bea.com/pub/advisory/272 - http://secunia.com/advisories/30780 - http://securitytracker.com/id?1018814 - http://secunia.com/advisories/28880 - http://secunia.com/advisories/27716 - http://www.vupen.com/english/advisories/2008/1856/references - http://www.vmware.com/security/advisories/VMSA-2008-0010.html - http://secunia.com/advi
dvisories/2008/1856/references - http://www.vmware.com/security/advisories/VMSA-2008-0010.html - http://secunia.com/advisories/29214 - http://secunia.com/advisories/29340 - http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml - http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8758
CVE ID: CVE-2007-5240 State: PUBLISHED Published: 2007-10-06T00:00:00 Last Updated: 2024-08-07T15:24:42.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0132.html - http://www.redhat.com/support/errata/RHSA-2007-1041
rences: - http://www.redhat.com/support/errata/RHSA-2008-0132.html - http://www.redhat.com/support/errata/RHSA-2007-1041.html - http://www.vupen.com/english/advisories/2007/3895 - http://secunia.com/advisories/30676 - http://secunia.com/advisories/29042 - http://secunia.com/advisories/27693 - http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html - http://www.novell.com/linux/security/advisories/2007_55_java.html - http://secunia.com/advisories/31586 - http://download.novell.com/Download?buildid=q5exhSqeBjA~ - https://exchange.xforce.ibmcloud.com/vulnerabilities/36942 - http://www.securitytracker.com/id?1018769 - http://secunia.com/advisories/29897 - http://secunia.c
lnerabilities/36942 - http://www.securitytracker.com/id?1018769 - http://secunia.com/advisories/29897 - http://secunia.com/advisories/27206 - http://secunia.com/advisories/27804 - http://security.gentoo.org/glsa/glsa-200804-28.xml - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 - http://secunia.com/advisories/29858 - http://www.redhat.com/support/errata/RHSA-2007-0963.html - http://www.securityfocus.com/bid/25918 - http://www.redhat.com/support/errata/RHSA-2008-0100.html - http://www.vupen.com/english/advisories/2008/0609 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10783 - http://lists.opensuse.org/opensuse-secur
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10783 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html - http://secunia.com/advisories/27261 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 - http://www.securityfocus.com/archive/1/482926/100/0/threaded - http://secunia.com/advisories/28777 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103071-1 - http://www.redhat.com/support/errata/RHSA-2008-0156.html - http://dev2dev.bea.com/pub/advisory/272 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5033642.html - http://secunia.com/advisories/30780 - http://secunia.com/advisori
eadmes/InfoDocument/patchbuilder/readme_5033642.html - http://secunia.com/advisories/30780 - http://secunia.com/advisories/28880 - http://secunia.com/advisories/27716 - http://www.vupen.com/english/advisories/2008/1856/references - http://www.vmware.com/security/advisories/VMSA-2008-0010.html - http://secunia.com/advisories/29214 - http://secunia.com/advisories/29340 - http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml - http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml - http://secunia.com/advisories/31580
CVE ID: CVE-2007-5241 State: PUBLISHED Published: 2007-10-06T16:00:00 Last Updated: 2024-08-07T15:24:42.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in NET$CSMACD.EXE in HP OpenVMS 8.3 and earlier allows local users to cause a denial of service (machine crash) via the "MCR MCL SHOW CSMA-CD Port * All" command, which overwrites a Non-Paged Pool Packet. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37811 - http://www.securityfocus.com/bid/25939 - http://secunia.com/advisories/27084 - http://mail.openvms.org:8100/Lists/alerts/Message/583.html - http://www.vupen.com/english/advisories/2007/3382 - http://mail.openvms.org:8100/
g:8100/Lists/alerts/Message/583.html - http://www.vupen.com/english/advisories/2007/3382 - http://mail.openvms.org:8100/Lists/alerts/Message/582.html
CVE ID: CVE-2007-5242 State: PUBLISHED Published: 2007-10-06T16:00:00 Last Updated: 2024-08-07T15:24:42.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in (1) SYS$EI1000.EXE and (2) SYS$EI1000_MON.EXE in HP OpenVMS 8.3 and earlier allows remote attackers to cause a denial of service (machine crash) via an "oversize" packet, which is not properly discarded if "the device has no remaining buffers after receipt of the first buffer segment." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25939 - http://osvdb.org/37813 - http://secunia.com/advisories/27084 - http://mail.openvms.org:8100/Lists/alerts/Messa
d/25939 - http://osvdb.org/37813 - http://secunia.com/advisories/27084 - http://mail.openvms.org:8100/Lists/alerts/Message/583.html - http://www.vupen.com/english/advisories/2007/3382 - http://osvdb.org/37812 - http://mail.openvms.org:8100/Lists/alerts/Message/582.html
CVE ID: CVE-2007-5243 State: PUBLISHED Published: 2007-10-06T17:00:00 Last Updated: 2024-08-07T15:24:42.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving
request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25917 - http://risesecurity.org/blog/entry/3/ - http://www.securitytracker.com/id?1018772 - http://risesecurity.org/exploit/10/ - http://risesecurity.org/exploit/9/ - http://osvdb.org/38607 - http://osvdb.org/38609 - http://risesecurity.org/exploit/13/ - http://www.vupen.com/english/advisories/2007/3381 - http://osvdb.org/38606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36956 - http://risesecurity.org/e
7/3381 - http://osvdb.org/38606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36956 - http://risesecurity.org/exploit/15/ - http://osvdb.org/38608 - http://risesecurity.org/advisory/RISE-2007002/ - http://risesecurity.org/exploit/14/ - http://secunia.com/advisories/27058 - http://risesecurity.org/exploit/12/ - http://osvdb.org/38605
CVE ID: CVE-2007-5244 State: PUBLISHED Published: 2007-10-06T17:00:00 Last Updated: 2024-08-07T15:24:42.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25917 - http://risesecurity.org/blog/entry/3/ - http://www.securitytracker.com/id?1018772 - http://www.vupen.com/english/advisories/2007/3381 - https://exchange.xforce.ibmc
://www.securitytracker.com/id?1018772 - http://www.vupen.com/english/advisories/2007/3381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36956 - http://osvdb.org/38610 - http://risesecurity.org/advisory/RISE-2007002/ - http://risesecurity.org/exploit/11/ - http://secunia.com/advisories/27058
CVE ID: CVE-2007-5245 State: PUBLISHED Published: 2007-10-06T17:00:00 Last Updated: 2024-08-07T15:24:42.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the SVC_attach function or (2) unspecified vectors involving the INET_connect function. Additional Analyst Notes: - CVE Program Container: References: - http://risesecurity.org/advisory/RISE-2007003/ - http://www.securityfocus.com/bid/25917 - http://secunia.com/advisories/28635 - http://risesecurity.org/blog/e
2007003/ - http://www.securityfocus.com/bid/25917 - http://secunia.com/advisories/28635 - http://risesecurity.org/blog/entry/3/ - http://www.securityfocus.com/archive/1/481491/100/0/threaded - http://www.securitytracker.com/id?1018773 - http://risesecurity.org/exploit/18/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/36957 - http://www.vupen.com/english/advisories/2007/3380 - http://www.securityfocus.com/bid/25925 - http://secunia.com/advisories/27066 - http://www.risesecurity.org/advisory/RISE-2007003/
CVE ID: CVE-2007-5246 State: PUBLISHED Published: 2007-10-06T17:00:00 Last Updated: 2024-08-07T15:24:42.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote attackers to execute arbitrary code via (1) a long attach request on TCP port 3050 to the isc_attach_database function or (2) a long create request on TCP port 3050 to the isc_create_database function. Additional Analyst Notes: - CVE Program Container: References: - http://risesecurity.org/advisory/RISE-2007003/ - http://www.securityfocus.com/bid/25917 - http://secunia.com/advisories/27057 - http:/
urity.org/advisory/RISE-2007003/ - http://www.securityfocus.com/bid/25917 - http://secunia.com/advisories/27057 - http://risesecurity.org/blog/entry/3/ - http://www.securityfocus.com/archive/1/481491/100/0/threaded - http://www.securitytracker.com/id?1018773 - http://www.vupen.com/english/advisories/2007/3379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36958 - http://risesecurity.org/exploit/16/ - http://security.gentoo.org/glsa/glsa-200712-06.xml - http://bugs.gentoo.org/show_bug.cgi?id=195569 - http://www.securityfocus.com/bid/25925 - http://risesecurity.org/exploit/17/ - http://secunia.com/advisories/27982 - http://www.risesecurity.org/advisory/RISE-2007003/
CVE ID: CVE-2007-5247 State: PUBLISHED Published: 2007-10-06T17:00:00 Last Updated: 2024-08-07T15:24:42.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon (F.E.A.R.) 1.08 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet to the YPG server on UDP port 27888 or (2) a PB_U packet to UCON on UDP port 27888, different vectors than CVE-2004-1500. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be cer
vectors than CVE-2004-1500. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45530 - http://aluigi.altervista.org/adv/fearfspb-adv.txt - http://aluigi.org/poc/fearfspb.zip - http://www.securityfocus.com/archive/1/481231/100/0/threaded - http://securityreason.com/securityalert/3197 - http://osvdb.org/45531 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36900
CVE ID: CVE-2007-5248 State: PUBLISHED Published: 2007-10-06T17:00:00 Last Updated: 2024-08-07T15:24:42.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.4.2 and earlier, and Prey 1.3 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet to the YPG server or (2) a PB_U packet to UCON. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain. Additional Analyst Notes: - CVE Program Contain
in Punkbuster itself, but there are insufficient details to be certain. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27023 - http://secunia.com/advisories/27002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36899 - http://www.vupen.com/english/advisories/2007/3333 - http://secunia.com/advisories/27036 - http://aluigi.altervista.org/adv/d3engfspb-adv.txt - http://www.securityfocus.com/bid/25893 - http://aluigi.org/poc/d3engfspb.zip - http://www.securityfocus.com/archive/1/481229/100/0/threaded - http://securityreason.com/securityalert/3196
CVE ID: CVE-2007-5249 State: PUBLISHED Published: 2007-10-06T17:00:00 Last Updated: 2024-08-07T15:24:42.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the logging function in the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to cause a denial of service (daemon crash) via a long (1) PB_Y packet to the YPG server on UDP port 1716 or (2) PB_U packet to UCON on UDP port 1716, different vectors than CVE-2007-4442. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain. Additional Analyst Notes: - CVE Progra
might be in Punkbuster itself, but there are insufficient details to be certain. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/481227/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36897 - http://aluigi.org/poc/aaboompb.zip - http://secunia.com/advisories/27015 - http://aluigi.altervista.org/adv/aaboompb-adv.txt - http://securityreason.com/securityalert/3193
CVE ID: CVE-2007-5250 State: PUBLISHED Published: 2007-10-06T17:00:00 Last Updated: 2024-08-07T15:24:42.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster (PB) is enabled, allows remote attackers to cause a denial of service (server hang) via packets containing 0x07 characters or other unspecified invalid characters. NOTE: this issue may overlap CVE-2007-4443. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain. Additional Analyst Notes: - CVE Program Container: References: - https://exchan
are insufficient details to be certain. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36898 - http://www.securityfocus.com/archive/1/481227/100/0/threaded - http://aluigi.org/poc/aaboompb.zip - http://secunia.com/advisories/27015 - http://aluigi.altervista.org/adv/aaboompb-adv.txt - http://securityreason.com/securityalert/3193
CVE ID: CVE-2007-5251 State: PUBLISHED Published: 2007-10-06T17:00:00 Last Updated: 2024-08-07T15:24:41.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Helm 3.2.16 allow remote attackers to inject arbitrary web script or HTML via (1) the showOption parameter to domain.asp, or the (2) Folder or (3) StartPath parameter to FileManager.asp. Additional Analyst Notes: - CVE Program Container: References: - http://pridels-team.blogspot.com/2007/10/helm-xss-vuln.html - http://www.securityfocus.com/bid/25940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36962 - http://secunia.com/advisories/27080
CVE ID: CVE-2007-5252 State: PUBLISHED Published: 2007-10-06T17:00:00 Last Updated: 2024-08-07T15:24:42.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in NetSupport Manager (NSM) Client 10.00 and 10.20, and NetSupport School Student (NSS) 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor statement, which is too vague to be sure that it is for this particular issue, says that only a denial of service is possible. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vul
e is possible. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36963 - http://www.netsupportsoftware.com/support/td.asp?td=545&Site=nsltd&Lang= - http://securityreason.com/securityalert/3198 - http://www.securityfocus.com/archive/1/481537/100/0/threaded - http://www.securityfocus.com/bid/25932 - http://secunia.com/advisories/27082 - http://www.securitytracker.com/id?1018774
CVE ID: CVE-2007-5253 State: PUBLISHED Published: 2007-10-06T17:00:00 Last Updated: 2024-08-07T15:24:42.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName parameter in a GetImage action, by appending a NULL byte (%00) sequence followed by an image file extension, as demonstrated by a request for a ".txt%00.gif" file. NOTE: this might be a directory traversal vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.cart32.com/whatsnew.asp - http://osvdb.org/38580 - http://secunia.com/advisories/27061 - http://www.securityfocus.com/
w.cart32.com/whatsnew.asp - http://osvdb.org/38580 - http://secunia.com/advisories/27061 - http://www.securityfocus.com/bid/25928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36954 - https://www.exploit-db.com/exploits/30639/ - http://www.security-assessment.com/files/advisories/2007-10-04_Cart32_Arbitrary_File_Download.pdf - http://www.securityfocus.com/archive/1/481489/100/0/threaded - http://securityreason.com/securityalert/3194