Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5114 State: PUBLISHED Published: 2007-09-26T23:00:00 Last Updated: 2024-08-07T15:17:28.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/plugin/block.t.php in Peter Schmidt phpmyProfiler 0.9.6b allows remote attackers to execute arbitrary PHP code via a URL in the pmp_rel_path parameter. NOTE: this issue is disputed by CVE because the applicable require_once is in a function that is not called on a direct request Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/14/rfi-02-phpmyprofiler/ - http://osvdb.org/38579
CVE ID: CVE-2007-5115 State: PUBLISHED Published: 2007-09-26T23:00:00 Last Updated: 2024-08-07T15:17:28.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Ekke Doerre Contenido 42VariablVersion (42VV10) in contenido_hacks in Mods 4 Xoops Contenido eZ publish (pdf4cms) allow remote attackers to execute arbitrary PHP code via a URL in the cfgPathInc parameter to (1) main_upl.php, (2) main_con_editside.php, (3) main_news_rcp.php, (4) main_mod.php, (5) main_tplinput_edit.php, (6) main_con.php, (7) main_tpl.php, (8) main_con_sidelist.php, (9) main_str.php, (10) main_news.php, (11) main_tplinput.php, (12) main_lang.php, (13) main_m
(8) main_con_sidelist.php, (9) main_str.php, (10) main_news.php, (11) main_tplinput.php, (12) main_lang.php, (13) main_mod_edit.php, (14) main_lay.php, (15) main_lay_edit.php, (16) main_news_send.php, (17) main_con_edittpl.php, (18) main_stat.php, (19) main_tpl_edit.php, (20) main_news_edit.php, or (21) inc/upl_show_uploads.inc.php; the (a) cfgPathContenido or (b) cfgPathTpl parameter to (22) con_show_sidelist.inc.php, (23) mod_show_modules.inc.php, (24) con_edit_form.inc.php, (25) lay_show_layouts.inc.php, (26) con_show_tree.inc.php, (27) news_show_newsletters.inc.php, (28) str_show_tree.inc.php, (29) tpl_show_templates.inc.php, (30) stat_show_tree.inc.php, (31) con_editcontent.inc.php, or
) str_show_tree.inc.php, (29) tpl_show_templates.inc.php, (30) stat_show_tree.inc.php, (31) con_editcontent.inc.php, or (32) news_show_recipients.inc.php in inc/; or the cfgPathTpl parameter to (33) main_user_md5.php3, or (34) actions_mod.php, (35) actions_lay.php, (36) actions_upl.php, (37) actions_stat.php, (38) actions_news.php, (39) actions_str.php, (40) header.php, (41) actions_con_sidelist.php, (42) main_top.inc.php, (43) actions_tpl.php, or (44) actions_con.php in tpl/. NOTE: vectors 21, 24, 26, 27, 32, 34, 35, 36, 37, 38, 39, 40, 41, 43, and 44 are disputed by CVE because PHP encounters a fatal function-call error on a direct request for the file, before reaching the include statemen
ecause PHP encounters a fatal function-call error on a direct request for the file, before reaching the include statement. Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/14/rfi-02-mods-4-xoops-contenido-ez-publish/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/46229
CVE ID: CVE-2007-5116 State: PUBLISHED Published: 2007-11-07T20:00:00 Last Updated: 2024-08-07T15:17:28.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27479 - http://www.debian.org/security/2007/dsa-1400 - http://marc.info/?l=bugtraq&m=120352263023774&w=2 - http://marc.info/?l=bugtraq&m=120352263023774&w=2 - http://www.vupen.com/english/advis
l=bugtraq&m=120352263023774&w=2 - http://marc.info/?l=bugtraq&m=120352263023774&w=2 - http://www.vupen.com/english/advisories/2007/4238 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10244 - http://secunia.com/advisories/27936 - http://www.securityfocus.com/archive/1/483563/100/0/threaded - http://secunia.com/advisories/28993 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10220 - https://issues.rpath.com/browse/RPL-1813 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-31524-1 - http://www.ubuntu.com/usn/usn-552-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10669 - http://
m/usn/usn-552-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10669 - http://securitytracker.com/id?1018899 - http://www.vupen.com/english/advisories/2008/0641 - http://secunia.com/advisories/27756 - http://www.redhat.com/support/errata/RHSA-2007-0966.html - http://secunia.com/advisories/29074 - http://www.securityfocus.com/archive/1/485936/100/0/threaded - http://secunia.com/advisories/27548 - http://www.redhat.com/support/errata/RHSA-2007-1011.html - http://lists.vmware.com/pipermail/security-announce/2008/000002.html - https://bugzilla.redhat.com/show_bug.cgi?id=323571 - http://secunia.com/advisories/27546 - http://www.gentoo.org/security/en/glsa
ugzilla.redhat.com/show_bug.cgi?id=323571 - http://secunia.com/advisories/27546 - http://www.gentoo.org/security/en/glsa/glsa-200711-28.xml - http://www.vupen.com/english/advisories/2007/3724 - http://support.avaya.com/elmodocs2/security/ASA-2008-014.htm - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.023.html - https://bugzilla.redhat.com/show_bug.cgi?id=378131 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-231524-1 - http://secunia.com/advisories/27531 - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://secunia.com/advisories/27515 - http://secunia.com/advisories/27570 - http://docs.info.apple.com/article.html?artnum=307179 - http://
advisories/27515 - http://secunia.com/advisories/27570 - http://docs.info.apple.com/article.html?artnum=307179 - http://secunia.com/advisories/27613 - http://secunia.com/advisories/28368 - http://www.novell.com/linux/security/advisories/2007_24_sr.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018985.1-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:207 - http://www.vupen.com/english/advisories/2007/4255 - http://www.securityfocus.com/archive/1/483584/100/0/threaded - http://www.ipcop.org/index.php?name=News&file=article&sid=41 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38270 - ftp://aix.software.ibm.com/aix/efixes/security/README - http://secuni
change.xforce.ibmcloud.com/vulnerabilities/38270 - ftp://aix.software.ibm.com/aix/efixes/security/README - http://secunia.com/advisories/31208 - http://secunia.com/advisories/28387 - http://www.vmware.com/security/advisories/VMSA-2008-0001.html - http://www.vupen.com/english/advisories/2008/0064 - http://secunia.com/advisories/28167 - http://www.securityfocus.com/bid/26350 - http://www.securityfocus.com/archive/1/486859/100/0/threaded
CVE ID: CVE-2007-5117 State: PUBLISHED Published: 2007-09-27T17:00:00 Last Updated: 2024-08-07T15:17:28.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.13, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter to (1) access/login.php and (2) includes/lang/language.php, different vectors than CVE-2007-4279. Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/14/rfi-02-frontaccounting/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/36796 - http://secunia.com/advisories/26962
-02-frontaccounting/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/36796 - http://secunia.com/advisories/26962 - http://www.securityfocus.com/bid/25812 - https://www.exploit-db.com/exploits/4456
CVE ID: CVE-2007-5118 State: PUBLISHED Published: 2007-09-27T17:00:00 Last Updated: 2024-08-07T15:17:28.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the HID (Human Interface Device) class driver in Sun Solaris 8, 9, and 10 before 20070925 allows local users to cause a denial of service (panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25814 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201059-1 - http://support.avaya.com/elmodocs2/security/ASA-2007-410.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102883-1 - https://oval.cisecurity.org
urity/ASA-2007-410.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102883-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2021 - http://secunia.com/advisories/26874 - http://secunia.com/advisories/27019 - http://www.vupen.com/english/advisories/2007/3273 - http://osvdb.org/37334 - http://www.securitytracker.com/id?1018738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36794
CVE ID: CVE-2007-5119 State: PUBLISHED Published: 2007-09-27T17:00:00 Last Updated: 2024-08-07T15:17:28.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information (full path) via an invalid integer in the version parameter to the default URI under attach/Main/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36768 - http://www.securityfocus.com/archive/1/480570/100/0/threaded - http://www.ecyrd.com/~jalkanen/JSPWiki/2.4.104/ChangeLog - http://securityreason.com/securityalert/3167 - http://lists.grok.org.uk/pipermail/full-disclosur
iki/2.4.104/ChangeLog - http://securityreason.com/securityalert/3167 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/066096.html - http://secunia.com/advisories/26961
CVE ID: CVE-2007-5120 State: PUBLISHED Published: 2007-09-27T17:00:00 Last Updated: 2024-08-07T15:17:28.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web script or HTML via the (1) group and (2) members parameters in (a) NewGroup.jsp; the (3) edittime parameter in (b) Edit.jsp; the (4) edittime, (5) author, and (6) link parameters in (c) Comment.jsp; the (7) loginname, (8) wikiname, (9) fullname, and (10) email parameters in (d) UserPreferences.jsp and (e) Login.jsp; the (11) r1 and (12) r2 parameters in (f) Diff.jsp; and the (13) changenote par
) UserPreferences.jsp and (e) Login.jsp; the (11) r1 and (12) r2 parameters in (f) Diff.jsp; and the (13) changenote parameter in (g) PageInfo.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25803 - http://www.securityfocus.com/archive/1/480570/100/0/threaded - http://www.ecyrd.com/~jalkanen/JSPWiki/2.4.104/ChangeLog - http://securityreason.com/securityalert/3167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36766 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/066096.html - http://secunia.com/advisories/26961
CVE ID: CVE-2007-5121 State: PUBLISHED Published: 2007-09-27T17:00:00 Last Updated: 2024-08-07T15:17:28.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in JSPWiki 2.5.139-beta allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to wiki-3/Login.jsp and unspecified other components. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25803 - http://www.securityfocus.com/archive/1/480570/100/0/threaded - http://www.ecyrd.com/~jalkanen/JSPWiki/2.4.104/ChangeLog - http://securityreason.com/securityalert/3167 - http://lists.grok.org.uk/pipermail/full-disclosu
Wiki/2.4.104/ChangeLog - http://securityreason.com/securityalert/3167 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/066096.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36767 - http://secunia.com/advisories/26961
CVE ID: CVE-2007-5122 State: PUBLISHED Published: 2007-09-27T17:00:00 Last Updated: 2024-08-07T15:17:28.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in store_info.php in SoftBiz Classifieds PLUS allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36797 - http://www.securityfocus.com/bid/25818 - https://www.exploit-db.com/exploits/4457
CVE ID: CVE-2007-5123 State: PUBLISHED Published: 2007-09-27T17:00:00 Last Updated: 2024-08-07T15:17:28.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute arbitrary SQL commands via the nota_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36795 - https://www.exploit-db.com/exploits/4458 - http://osvdb.org/37344 - http://www.securityfocus.com/bid/25815 - http://secunia.com/advisories/26966
CVE ID: CVE-2007-5124 State: PUBLISHED Published: 2007-09-27T19:00:00 Last Updated: 2024-08-07T15:17:28.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: The embedded Internet Explorer server control in AOL Instant Messenger (AIM) 6.5.3.12 and earlier allows remote attackers to execute arbitrary code via unspecified web script or HTML in an instant message, related to AIM's filtering of "specific tags and attributes" and the lack of Local Machine Zone lockdown. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4901. Additional Analyst Notes: - CVE Program Container: References: - http://aviv.raffon.net/2007/09/25/ReadyAIMFire.aspx - http://www.securit
t Notes: - CVE Program Container: References: - http://aviv.raffon.net/2007/09/25/ReadyAIMFire.aspx - http://www.securityfocus.com/archive/1/480647/100/0/threaded
CVE ID: CVE-2007-5125 State: REJECTED Published: 2007-09-27T19:00:00 Last Updated: 2007-11-28T10:00:00 Description: No description available.
CVE ID: CVE-2007-5126 State: PUBLISHED Published: 2007-09-27T19:00:00 Last Updated: 2024-08-07T15:17:28.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine. Additional Analyst Notes: - CVE Program Container: References: - http://wslabi.com/wabisabilabi/showBidInfo.
determine. Additional Analyst Notes: - CVE Program Container: References: - http://wslabi.com/wabisabilabi/showBidInfo.do?code=ZD-00000147 - http://www.securityfocus.com/bid/25793 - http://osvdb.org/45522
CVE ID: CVE-2007-5127 State: PUBLISHED Published: 2007-09-27T19:00:00 Last Updated: 2024-08-07T15:17:28.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SimpGB 1.46.02 allow remote attackers to inject arbitrary web script or HTML via (1) the l_username parameter to the default URI under admin/ or (2) the l_emoticonlist parameter to admin/emoticonlist.php. Additional Analyst Notes: - CVE Program Container: References: - http://forum.boesch-it.de/viewtopic.php?t=2790 - http://www.netvigilance.com/advisory0067 - http://secunia.com/advisories/26974 - http://www.securityfocus.com/archive/1/480596/100/0/threaded - http://securit
67 - http://secunia.com/advisories/26974 - http://www.securityfocus.com/archive/1/480596/100/0/threaded - http://securityreason.com/securityalert/3171 - http://www.securityfocus.com/bid/25808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36773
CVE ID: CVE-2007-5128 State: PUBLISHED Published: 2007-09-27T19:00:00 Last Updated: 2024-08-07T15:17:28.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain link_date parameter to events.php, which reveals the path in an error message due to an unsupported argument type for the mktime function on Windows. Additional Analyst Notes: - CVE Program Container: References: - http://forum.boesch-it.de/viewtopic.php?t=2791 - http://www.securityfocus.com/archive/1/480588/100/0/threaded - http://securityreason.com/securityalert/3174 - http://www.netvigilance.com
tyfocus.com/archive/1/480588/100/0/threaded - http://securityreason.com/securityalert/3174 - http://www.netvigilance.com/advisory0068
CVE ID: CVE-2007-5129 State: PUBLISHED Published: 2007-09-27T19:00:00 Last Updated: 2024-08-07T15:17:28.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimpGB 1.46.02 stores sensitive information under the web root with insufficient access control, which allows remote attackers to (1) obtain sensitive configuration information via a direct request for admin/cfginfo.php; and (2) download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc. Additional Analyst Notes: - CVE Program Container: References: - http://forum.boesch-it.de/viewtopic.php?t=2790 - http://osvdb.org/40612 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36777 - htt
h-it.de/viewtopic.php?t=2790 - http://osvdb.org/40612 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36777 - http://secunia.com/advisories/26974 - http://osvdb.org/40613 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36776 - http://www.netvigilance.com/advisory0066 - http://www.netvigilance.com/advisory0065 - http://www.securityfocus.com/archive/1/480592/100/0/threaded - http://www.securityfocus.com/archive/1/480590/100/0/threaded
CVE ID: CVE-2007-5130 State: PUBLISHED Published: 2007-09-27T19:00:00 Last Updated: 2024-08-07T15:17:28.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimpGB 1.46.02 allows remote attackers to obtain sensitive information via (1) an invalid lang parameter to admin/index.php or (2) a direct request to admin/trailer.php, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://forum.boesch-it.de/viewtopic.php?t=2790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36775 - http://www.securityfocus.com/archive/1/480593/100/0/threaded - http://securityreason.com/securityalert/3172 - http://www.netvigilance.com
tyfocus.com/archive/1/480593/100/0/threaded - http://securityreason.com/securityalert/3172 - http://www.netvigilance.com/advisory0064
CVE ID: CVE-2007-5131 State: PUBLISHED Published: 2007-09-27T19:00:00 Last Updated: 2024-08-07T15:17:28.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39624 - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://www.securityfocus.com/bid/25820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36831 - https://www.exploit-db.com/exploits
tyfocus.com/bid/25820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36831 - https://www.exploit-db.com/exploits/4459 - http://securityvulns.ru/Rdocument901.html
CVE ID: CVE-2007-5132 State: PUBLISHED Published: 2007-09-27T19:00:00 Last Updated: 2024-08-07T15:17:28.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service (panic) via unspecified vectors related to "the handling of thread contexts." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2214 - http://www.securityfocus.com/bid/25821 - http://secunia.com/advisories/27059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36793 - http://www.securitytracker.com/id?1018744 - http:/
/27059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36793 - http://www.securitytracker.com/id?1018744 - http://secunia.com/advisories/26950 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103084-1 - http://www.vupen.com/english/advisories/2007/3274 - http://support.avaya.com/elmodocs2/security/ASA-2007-403.htm - http://osvdb.org/37712
CVE ID: CVE-2007-5133 State: PUBLISHED Published: 2007-09-27T19:00:00 Last Updated: 2024-08-07T15:17:28.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/480594/100/0/threaded - http://www.securityfocus.com/archive/1/480854/100/0/threaded - http://www.securityfocus.com/archive/1/480706/100/0/threade
tp://www.securityfocus.com/archive/1/480854/100/0/threaded - http://www.securityfocus.com/archive/1/480706/100/0/threaded - http://www.securityfocus.com/archive/1/480827/100/0/threaded - http://www.securityfocus.com/bid/25816 - http://osvdb.org/45521 - http://www.securityfocus.com/archive/1/480864/100/0/threaded
CVE ID: CVE-2007-5134 State: PUBLISHED Published: 2007-09-27T19:00:00 Last Updated: 2024-08-07T15:17:28.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send packets to an interface for which network exposure was unintended. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018743 - http://secunia.com/advisories/26988 - http://www.vupen.com/english/advisories/2007/3276 - http://seclists.org/fulldisclosure/2007/Sep/0573.html - https://exchange.xforce.ibmclo
om/english/advisories/2007/3276 - http://seclists.org/fulldisclosure/2007/Sep/0573.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36826 - http://www.securityfocus.com/bid/25822 - http://www.cisco.com/warp/public/707/cisco-sr-20070926-lb.shtml - http://securitytracker.com/id?1018742
CVE ID: CVE-2007-5135 State: PUBLISHED Published: 2007-09-27T20:00:00 Last Updated: 2024-08-07T15:17:28.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738. As of 20071012, it is unknown whether code execution is possible. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/show_bug.cgi?id=194039 - http://www.securityfocus.com/archive/1/484353/100/
ainer: References: - https://bugs.gentoo.org/show_bug.cgi?id=194039 - http://www.securityfocus.com/archive/1/484353/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5337 - http://www.securityfocus.com/archive/1/481217/100/0/threaded - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0241 - http://secunia.com/advisories/27205 - http://secunia.com/advisories/27097 - http://www.vupen.com/english/advisories/2008/2362 - http://www.securitytracker.com/id?1018755 - http://secunia.com/advisories/31489 - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - https://www.redhat.com/archives/fedora-package-announce/2007-October/