Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4242 State: PUBLISHED Published: 2007-08-08T22:00:00 Last Updated: 2024-08-07T14:46:39.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2981 - http://www.securityfocus.com/archive/1/477120/100/0/threaded - http://www.securityfocus.com/archive/1/475642/100/0/threaded - http://www.securitytracker.com/id?1018543 - http
readed - http://www.securityfocus.com/archive/1/475642/100/0/threaded - http://www.securitytracker.com/id?1018543 - http://www.hescominsoon.com/archives/773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35827
CVE ID: CVE-2007-4243 State: PUBLISHED Published: 2007-08-08T22:00:00 Last Updated: 2024-08-07T14:46:39.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway (ASG) 7 allows remote attackers to cause a denial of service (CPU consumption) via certain network traffic, as demonstrated by P2P and iTunes applications that download large amounts of data. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2981 - http://astaro.org/showthread.php?p=77667 - http://www.securityfocus.com/archive/1/477120/100/0/threaded - http://www.securityfocus.com/archive/1/475642/
?p=77667 - http://www.securityfocus.com/archive/1/477120/100/0/threaded - http://www.securityfocus.com/archive/1/475642/100/0/threaded - http://astaro.org/showthread.php?t=17782 - http://astaro.org/showthread.php?t=18307 - http://astaro.org/showthread.php?t=18551 - http://astaro.org/showthread.php?p=78258 - http://www.securitytracker.com/id?1018543 - http://www.hescominsoon.com/archives/773 - http://astaro.org/showthread.php?t=17930 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35823 - http://astaro.org/showthread.php?t=18280 - http://astaro.org/showthread.php?p=77694
CVE ID: CVE-2007-4244 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in langset.php in J! Reactions (com_jreactions) 1.8.1 and earlier, a Joomla! component, allows remote attackers to execute arbitrary PHP code via a URL in the comPath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2984 - http://www.securityfocus.com/bid/25198 - http://yollubunlar.org/joomla-j-reactions-component-rfi-75.html - http://www.securityfocus.com/archive/1/477245/100/0/threaded - http://www.securityfocus.com/arc
-component-rfi-75.html - http://www.securityfocus.com/archive/1/477245/100/0/threaded - http://www.securityfocus.com/archive/1/477144/100/0/threaded - http://www.securityfocus.com/archive/1/475544/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35808
CVE ID: CVE-2007-4245 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Search.php in DiMeMa CONTENTdm (CDM) allows remote attackers to inject arbitrary web script or HTML via a search, probably related to the CISOBOX1 parameter to results.php in CDM 4.2. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35809 - http://osvdb.org/36437 - http://securityreason.com/securityalert/2980 - http://www.securityfocus.com/archive/1/475543/100/0/threaded - http:
37 - http://securityreason.com/securityalert/2980 - http://www.securityfocus.com/archive/1/475543/100/0/threaded - http://www.securityfocus.com/bid/25199
CVE ID: CVE-2007-4246 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability, possibly a buffer overflow, in Justsystem Ichitaro 2007 and earlier allows remote attackers to execute arbitrary code via a modified document, as actively exploited in August 2007 by malware such as Tarodrop.D (Tarodrop.Q), a different vulnerability than CVE-2006-4326, CVE-2006-5424, CVE-2006-6400, and CVE-2007-1938. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/enterprise/security_response/weblog/2007/08/unknown_exploit_compromises_ic.html - https://exchang
ttp://www.symantec.com/enterprise/security_response/weblog/2007/08/unknown_exploit_compromises_ic.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35822 - http://www.vupen.com/english/advisories/2007/2780 - http://www.securityfocus.com/bid/25187 - http://www.symantec.com/security_response/writeup.jsp?docid=2007-080210-4815-99 - http://osvdb.org/39393 - http://www.justsystem.co.jp/info/pd7003.html - http://secunia.com/advisories/26317
CVE ID: CVE-2007-4247 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service (NULL dereference and persistent application crash) via a malformed ICS file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35802 - http://www.securityfocus.com/archive/1/475534/100/0/threaded - http://osvdb.org/46801 - http://www.securityfocus.com/bid/25201 - http://securityreason.com/securityalert/3004 - http://www.eleytt.com/advisories/eleytt_CALICS.pdf
CVE ID: CVE-2007-4248 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CallCmd function in toolbar_gaming.dll in the Toolbar Gaming toolbar for Internet Explorer allows remote attackers to cause a denial of service (NULL dereference and browser crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35803 - http://www.securityfocus.com/archive/1/475534/100/0/threaded - http://osvdb.org/46802 - http://securityreason.com/securityalert/3004
CVE ID: CVE-2007-4249 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The isChecked function in Toolbar.DLL in the ExportNation toolbar for Internet Explorer allows remote attackers to cause a denial of service (NULL dereference and browser crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35804 - http://www.securityfocus.com/archive/1/475534/100/0/threaded - http://osvdb.org/46985 - http://securityreason.com/securityalert/3004
CVE ID: CVE-2007-4250 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: The isChecked function in Toolbar.DLL in Advanced Searchbar before 3.33 allows remote attackers to cause a denial of service (NULL dereference and browser crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/475534/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35805 - http://www.attrition.org/pipermail/vim/2007-August/001756.html - http://securityreason.com/securityalert/3004 - http://www.securityfocus.com/archive/1/47593
im/2007-August/001756.html - http://securityreason.com/securityalert/3004 - http://www.securityfocus.com/archive/1/475932/100/100/threaded
CVE ID: CVE-2007-4251 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenOffice.org (OOo) 2.2 does not properly handle files with multiple extensions, which allows user-assisted remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/475534/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35806 - http://osvdb.org/46766 - http://www.securitytracker.com/id?1018544 - http://securityreason.com/securityalert/3004
CVE ID: CVE-2007-4252 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveToFile method, a different vulnerability than CVE-2007-3633. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35812 - http://www.securityfocus.com/bid/25205 - http://osvdb.org/40110 - https://www.exploit-db.com/exploits/4255
CVE ID: CVE-2007-4253 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter, a different vector than CVE-2005-4263. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25203 - http://osvdb.org/39199 - http://www.securityfocus.com/archive/1/475654/100/0/threaded - https://www.exploit-db.com/exploits/4256
CVE ID: CVE-2007-4254 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method. NOTE: this may overlap CVE-2007-2885 or CVE-2005-2127. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41080 - https://www.exploit-db.com/exploits/4259
CVE ID: CVE-2007-4255 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msql_connect function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4260 - http://www.securityfocus.com/archive/1/475660/100/0/threaded - http://www.securityfocus.com/bid/25213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35830
CVE ID: CVE-2007-4256 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4261 - http://osvdb.org/39198
CVE ID: CVE-2007-4257 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary code via (1) a .spr file (single player replay file) containing a long user name or (2) a .ply file containing a long number plate string, different vectors than CVE-2007-4140. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25206 - http://osvdb.org/46769 - http://osvdb.org/46768 - https://www.exploit-db.com/exploits/4263 - https://www.exploit-db.com/exploits/42
b.org/46769 - http://osvdb.org/46768 - https://www.exploit-db.com/exploits/4263 - https://www.exploit-db.com/exploits/4262 - http://www.securityfocus.com/bid/25208
CVE ID: CVE-2007-4258 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4265 - http://www.securityfocus.com/bid/25209
CVE ID: CVE-2007-4259 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via (1) a direct request for a URL under OnlineViewing/galleries/ or (2) navigation of the gallery user interface with JavaScript disabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.informit.com/guides/content.asp?g=security&seqNum=267 - http://www.securityfocus.com/bid/25323 - http://secunia.com/advisories/26341 - http://www.informit.com/guides/content.asp?g=security&seqNum=268 - http://securityreason.com
unia.com/advisories/26341 - http://www.informit.com/guides/content.asp?g=security&seqNum=268 - http://securityreason.com/securityalert/2985 - http://www.securityfocus.com/archive/1/475678/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35832 - http://www.airscanner.com/security/07080601_ezphotosales.htm
CVE ID: CVE-2007-4260 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: EZPhotoSales 1.9.3 and earlier has a default "admin" account for galleries, which allows remote attackers to access arbitrary galleries by specifying this username. Additional Analyst Notes: - CVE Program Container: References: - http://www.informit.com/guides/content.asp?g=security&seqNum=267 - http://www.informit.com/guides/content.asp?g=security&seqNum=268 - http://securityreason.com/securityalert/2985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35837 - http://www.securityfocus.com/archive/1/475678/100/0/threaded
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/35837 - http://www.securityfocus.com/archive/1/475678/100/0/threaded - http://www.airscanner.com/security/07080601_ezphotosales.htm
CVE ID: CVE-2007-4261 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: EZPhotoSales 1.9.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) a file containing cleartext passwords via a direct request for OnlineViewing/data/galleries.txt, or (2) a file containing username hashes and password hashes via a direct request for OnlineViewing/configuration/config.dat/. NOTE: vector 2 can be leveraged for administrative access because authentication does not require knowledge of cleartext values, but instead uses the
ed for administrative access because authentication does not require knowledge of cleartext values, but instead uses the username hash in the ConfigLogin parameter and the password hash in the ConfigPassword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.informit.com/guides/content.asp?g=security&seqNum=267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35841 - http://www.securityfocus.com/bid/25323 - http://secunia.com/advisories/26341 - http://www.informit.com/guides/content.asp?g=security&seqNum=268 - http://securityreason.com/securityalert/2985 - http://www.securityfocus.com/archive/1/475678/100/0/threaded - http://www.airscanner.com/securi
com/securityalert/2985 - http://www.securityfocus.com/archive/1/475678/100/0/threaded - http://www.airscanner.com/security/07080601_ezphotosales.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/35840
CVE ID: CVE-2007-4262 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/. Additional Analyst Notes: - CVE Program Container: References: - http://www.informit.com/guides/content.asp?g=security&seqNum=267 - http://www.securityfocus.com/bid/25323 - http://secunia.com/advisories/26341 - http://www.informit.com/guides/content.asp?g=security&seqNum=268 - http://securityreason.com/securityalert/2985 - http://www.securit
nformit.com/guides/content.asp?g=security&seqNum=268 - http://securityreason.com/securityalert/2985 - http://www.securityfocus.com/archive/1/475678/100/0/threaded - http://www.airscanner.com/security/07080601_ezphotosales.htm
CVE ID: CVE-2007-4263 State: PUBLISHED Published: 2007-08-08T23:00:00 Last Updated: 2024-08-07T14:46:39.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the server side of the Secure Copy (SCP) implementation in Cisco 12.2-based IOS allows remote authenticated users to read, write or overwrite any file on the device's filesystem via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2817 - http://secunia.com/advisories/26361 - http://www.cisco.com/warp/public/707/cisco-sa-20070808-scp.shtml - http://www.securitytracker.com/id?1018534 - https://oval.cisecurity.org/repository
lic/707/cisco-sa-20070808-scp.shtml - http://www.securitytracker.com/id?1018534 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35872 - http://www.securityfocus.com/bid/25240 - http://osvdb.org/36694
CVE ID: CVE-2007-4264 State: PUBLISHED Published: 2007-08-09T10:00:00 Last Updated: 2024-08-07T14:46:39.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) path and (2) download parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35813 - http://www.securityfocus.com/bid/25212 - http://pridels-team.blogspot.com/2007/08/snif-xss-vuln.html
CVE ID: CVE-2007-4265 State: PUBLISHED Published: 2007-08-09T10:00:00 Last Updated: 2024-08-07T14:46:39.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in VisionProject 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) projectIssueId parameter in EditProjectIssue.do, the (2) projectId parameter in ProjectSelected.do, the (3) folderId parameter in ProjectDocuments.do and the (4) sortField parameter in ProjectIssues.do. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36434 - http://pridels-team.blogspot.com/2007/08/visionproject-multiple-xss-vuln.html -
References: - http://osvdb.org/36434 - http://pridels-team.blogspot.com/2007/08/visionproject-multiple-xss-vuln.html - http://www.securityfocus.com/bid/25218 - http://osvdb.org/36435 - http://osvdb.org/36433 - http://osvdb.org/36436 - http://secunia.com/advisories/26346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35825
CVE ID: CVE-2007-4267 State: PUBLISHED Published: 2007-11-15T01:00:00 Last Updated: 2024-08-07T14:46:39.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted IOCTL request that adds an AppleTalk zone to a routing table. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38475 - http://www.securityfocus.com/bid/26444 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article
id/26444 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/3868 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=627 - http://secunia.com/advisories/27643 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html
CVE ID: CVE-2007-4268 State: PUBLISHED Published: 2007-11-15T01:00:00 Last Updated: 2024-08-07T14:46:39.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which satisfies a signed comparison during mbuf allocation but is later interpreted as an unsigned value, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018950 - http://www.securityfocus.com/bid/26444 - https://exchange.xforce.ibmcloud.com/vulner
://securitytracker.com/id?1018950 - http://www.securityfocus.com/bid/26444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38476 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=628 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/3868 - http://secunia.com/advisories/27643 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html
CVE ID: CVE-2007-4269 State: PUBLISHED Published: 2007-11-15T01:00:00 Last Updated: 2024-08-07T14:46:39.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk Session Protocol (ASP) message on an AppleTalk socket, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018950 - http://www.securityfocus.com/bid/26444 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - ht
apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/3868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38473 - http://secunia.com/advisories/27643 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=629
CVE ID: CVE-2007-4270 State: PUBLISHED Published: 2007-08-18T21:00:00 Last Updated: 2024-08-07T14:46:39.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain root privileges via a symlink attack on certain files. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21255607 - http://www.attrition.org/pipermail/vim/2007-August/001765.html - http://www.vupen.com/english/advisories/2007/2912 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=578 - http://www-1.ibm.com/support/docview.wss?uid=swg1IY9