Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-7165 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T20:57:39.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 5.0 through 5.1.1.0 allows remote attackers to obtain JSP source code and other sensitive information via certain "special URIs." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0970 - http://secunia.com/advisories/24478 - http://www-1.ibm.com/support/docview.wss?uid=swg21243541 - http://www-1.ibm.com/support/docview.wss?uid=swg24013032 - http://www.securityfocus.com/bid/22991
CVE ID: CVE-2006-7166 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T20:57:39.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier allows remote attackers to obtain JSP source code and other sensitive information via "a specific JSP URL." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0970 - http://secunia.com/advisories/24478 - http://www-1.ibm.com/support/docview.wss?uid=swg24011720 - http://www-1.ibm.com/support/docview.wss?uid=swg21243541 - http://www.securityfocus.com/bid/22991
CVE ID: CVE-2006-7167 State: PUBLISHED Published: 2007-03-20T10:00:00Z Last Updated: 2024-09-16T20:16:43.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ProRat Server 1.9 Fix2 allows remote attackers to bypass the authentication mechanism for remote login via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20293
CVE ID: CVE-2006-7168 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T20:57:39.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/not_mem.php in the Add Name module for PHP allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/448630/100/0/threaded - http://www.securityfocus.com/bid/20516 - http://securityreason.com/securityalert/2450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29595
CVE ID: CVE-2006-7169 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T20:57:41.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _CONFIG[skin_dir] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30025 - https://www.exploit-db.com/exploits/2721 - http://www.securityfocus.com/bid/20936
CVE ID: CVE-2006-7170 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T20:57:39.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the (1) t, (2) productId, (3) sk, (4) x, or (5) so parameter to (a) product_review.php; or the (6) orderNo parameter to (b) order-track.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21072 - http://marc.info/?l=bugtraq&m=116343783720459&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30214
CVE ID: CVE-2006-7171 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T20:57:41.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: product_review.php in Koan Software Mega Mall allows remote attackers to obtain the installation path via a request with an empty value of the x[] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30215 - http://marc.info/?l=bugtraq&m=116343783720459&w=2
CVE ID: CVE-2006-7172 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T20:57:40.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers to execute arbitrary code via a leading dotted-quad IP address string in the (1) PC-REMOTE-ADDR HTTP header, which is inserted into $_SERVER['HTTP_PC_REMOTE_ADDR'], or (2) ip parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24553 - https://www.exploit-db.com/exploits/3496 - http://osvdb.org/34280 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33
ps://www.exploit-db.com/exploits/3496 - http://osvdb.org/34280 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33031 - http://www.vupen.com/english/advisories/2007/1004 - https://www.exploit-db.com/exploits/3497
CVE ID: CVE-2006-7173 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T20:57:39.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to execute arbitrary PHP code via a crafted option_new[report_w_day] parameter in a preferenze action, which can be later accessed via option/php-stats-options.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24553 - http://www.vupen.com/english/advisories/2007/1004 - https://www.exploit-db.com/exploits/3502
CVE ID: CVE-2006-7174 State: PUBLISHED Published: 2007-03-21T21:00:00 Last Updated: 2024-08-07T20:57:39.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions.php in the Dimension module of phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: this may be the same issue as CVE-2006-5235. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2464 - http://www.securityfocus.com/archive/1/452012/100/200/threaded - http://www.securityfocus.com/archive/1/452100/100/200/threaded
CVE ID: CVE-2006-7175 State: PUBLISHED Published: 2007-03-27T23:00:00 Last Updated: 2024-08-07T20:57:39.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not allow the administrator to disable SSLv2 encryption, which could cause less secure channels to be used than desired. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=172352
CVE ID: CVE-2006-7176 State: PUBLISHED Published: 2007-03-27T23:00:00 Last Updated: 2024-08-07T20:57:39.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25098 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=171838 - http://www.redhat.com/support/errata/RHSA-2007-0252.html - http://secunia.com/advisories/25743 - http://support.avaya.com/
tp://www.redhat.com/support/errata/RHSA-2007-0252.html - http://secunia.com/advisories/25743 - http://support.avaya.com/elmodocs2/security/ASA-2007-248.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11499 - http://www.securityfocus.com/bid/23742
CVE ID: CVE-2006-7177 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T20:57:39.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: MadWifi, when Ad-Hoc mode is used, allows remote attackers to cause a denial of service (system crash) via unspecified vectors that lead to a kernel panic in the ieee80211_input function, related to "packets coming from a 'malicious' WinXP system." Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-479-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:082 - http://secunia.com/advisories/26083 - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://sec
082 - http://secunia.com/advisories/26083 - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://secunia.com/advisories/24841 - http://www.securityfocus.com/archive/1/466689/30/6900/threaded - http://www.securityfocus.com/bid/23433 - http://secunia.com/advisories/25861 - http://madwifi.org/ticket/880
CVE ID: CVE-2006-7178 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T20:57:41.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which allows remote attackers to cause a denial of service (system crash) via a certain AUTH frame. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-479-1 - http://www.securityfocus.com/bid/23431 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:082 - http://secunia.com/advisories/24670 - http://secunia.com/advisories/24931 - http://secunia.com/advisories/26083 - http://www.vupen.c
ia.com/advisories/24670 - http://secunia.com/advisories/24931 - http://secunia.com/advisories/26083 - http://www.vupen.com/english/advisories/2007/1187 - http://madwifi.org/ticket/880 - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://madwifi.org/wiki/Releases/0.9.3 - http://secunia.com/advisories/24841 - http://www.securityfocus.com/archive/1/466689/30/6900/threaded - http://security.gentoo.org/glsa/glsa-200704-15.xml - http://secunia.com/advisories/25861
CVE ID: CVE-2006-7179 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T20:57:40.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: ieee80211_input.c in MadWifi before 0.9.3 does not properly process Channel Switch Announcement Information Elements (CSA IEs), which allows remote attackers to cause a denial of service (loss of communication) via a Channel Switch Count less than or equal to one, triggering a channel change. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-479-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:082 - http://www.securityfocus.com/bid/23436 - http://secunia.com/advisorie
riva.com/security/advisories?name=MDKSA-2007:082 - http://www.securityfocus.com/bid/23436 - http://secunia.com/advisories/24670 - http://secunia.com/advisories/24931 - http://secunia.com/advisories/26083 - http://www.vupen.com/english/advisories/2007/1187 - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://www.osvdb.org/34645 - http://madwifi.org/wiki/Releases/0.9.3 - http://secunia.com/advisories/24841 - http://madwifi.org/ticket/963 - http://www.securityfocus.com/archive/1/466689/30/6900/threaded - http://security.gentoo.org/glsa/glsa-200704-15.xml - http://secunia.com/advisories/25861 - http://dev.lintrack.org/ticket/101
CVE ID: CVE-2006-7180 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T20:57:40.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: ieee80211_output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows remote attackers to obtain sensitive information (related to network structure), and possibly cause a denial of service (disrupted authentication) and conduct spoofing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-479-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:082 - http://secunia.com/advisories/24670 - http://secunia.com/advisories/
driva.com/security/advisories?name=MDKSA-2007:082 - http://secunia.com/advisories/24670 - http://secunia.com/advisories/24931 - http://secunia.com/advisories/26083 - http://www.vupen.com/english/advisories/2007/1187 - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://madwifi.org/ticket/967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33514 - http://madwifi.org/wiki/Releases/0.9.3 - http://secunia.com/advisories/24841 - http://www.securityfocus.com/archive/1/466689/30/6900/threaded - http://security.gentoo.org/glsa/glsa-200704-15.xml - http://secunia.com/advisories/25861 - http://www.securityfocus.com/bid/23434
CVE ID: CVE-2006-7181 State: PUBLISHED Published: 2007-03-30T10:00:00 Last Updated: 2024-08-07T20:57:39.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Morcego CMS 0.9.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) fichero parameter to morcegoCMS.php or the (2) path parameter to adodb/adodb.inc.php. NOTE: vector 1 has been disputed by a third party who shows that $fichero can not be controlled by an attacker Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/448545/100/0/threaded - http://www.securityfocus.com/archive/1/485403/100
nces: - http://www.securityfocus.com/archive/1/448545/100/0/threaded - http://www.securityfocus.com/archive/1/485403/100/0/threaded - http://securityreason.com/securityalert/2494
CVE ID: CVE-2006-7182 State: PUBLISHED Published: 2007-03-30T10:00:00 Last Updated: 2024-08-07T20:57:39.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in noticias.php in MNews 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2493 - http://www.securityfocus.com/archive/1/448629/100/0/threaded
CVE ID: CVE-2006-7183 State: PUBLISHED Published: 2007-03-30T21:00:00 Last Updated: 2024-08-07T20:57:40.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in styles.php in Exhibit Engine (EE) 1.22 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the toroot parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30516 - https://www.exploit-db.com/exploits/2850
CVE ID: CVE-2006-7184 State: PUBLISHED Published: 2007-03-30T21:00:00Z Last Updated: 2024-09-16T19:36:27.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Exhibit Engine (EE) 1.22, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the toroot parameter to (1) fetchsettings.php or (2) fstyles.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20793
CVE ID: CVE-2006-7185 State: PUBLISHED Published: 2007-03-30T21:00:00 Last Updated: 2024-08-07T20:57:41.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/user_standard.php in CMSmelborp Beta allows remote attackers to execute arbitrary PHP code via a URL in the relative_root parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30192 - https://www.exploit-db.com/exploits/2766
CVE ID: CVE-2006-7186 State: PUBLISHED Published: 2007-04-03T00:00:00Z Last Updated: 2024-09-17T02:06:42.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-lib/subs.pl in web-app.net WebAPP before 0.9.9.3.5 allows attackers to open list files in "profile and other functions," a different vulnerability than CVE-2005-0927. Additional Analyst Notes: - CVE Program Container: References: - http://www.bantychick.com/live/?action=forum&board=shootbreeze&op=display&num=19&start=15
CVE ID: CVE-2006-7187 State: PUBLISHED Published: 2007-04-03T00:00:00Z Last Updated: 2024-09-16T19:19:38.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the show_recent_searches function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to inject arbitrary web script or HTML via the srch variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=security&id=1 - http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=security&id=1
CVE ID: CVE-2006-7188 State: PUBLISHED Published: 2007-04-03T00:00:00Z Last Updated: 2024-09-16T17:14:30.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The search function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to read internal forum posts via certain requests, possibly related to the $info{'forum'} variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=security&id=1 - http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=security&id=1
CVE ID: CVE-2006-7189 State: PUBLISHED Published: 2007-04-03T00:00:00Z Last Updated: 2024-09-16T20:06:36.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/admin/logs.cgi in web-app.net WebAPP before 20060403 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the Statistics Log Viewer. Additional Analyst Notes: - CVE Program Container: References: - http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1 - http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1
CVE ID: CVE-2006-7190 State: PUBLISHED Published: 2007-04-03T00:00:00Z Last Updated: 2024-09-16T20:27:27.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP before 20060515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the viewnews function, related to use of doubbctopic instead of doubbc. Additional Analyst Notes: - CVE Program Container: References: - http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1 - http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1
CVE ID: CVE-2006-7191 State: PUBLISHED Published: 2007-04-03T00:00:00 Last Updated: 2024-08-07T20:57:40.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program. Additional Analyst Notes: - CVE Program Container: References: - http://lam.cvs.sourceforge.net/lam/lam/lib/lamdaemon.pl?r1=1.32&r2=1.33 - http://www.us.debian.org/security/2007/dsa-1287 - http://lam.cvs.sourceforge.net/lam/lam/lib/lamdaemon.pl - http://www.securityfocus.com/bid/23857 - http://secunia.com/advisories/25157 - http://lam.sou
lam/lam/lib/lamdaemon.pl - http://www.securityfocus.com/bid/23857 - http://secunia.com/advisories/25157 - http://lam.sourceforge.net/changelog/index.htm
CVE ID: CVE-2006-7192 State: PUBLISHED Published: 2007-04-10T22:00:00 Last Updated: 2024-08-07T20:57:41.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote attackers to bypass request filtering and conduct cross-site scripting (XSS) attacks, or cause a denial of service, as demonstrated via an xss:expression STYLE attribute in a closing XSS HTML tag. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2530 - http://osvdb.org/35269 - http://www.cpni.gov.uk/docs/re-20061020-00710.pdf - http://www.securityfocus.com/ar
lert/2530 - http://osvdb.org/35269 - http://www.cpni.gov.uk/docs/re-20061020-00710.pdf - http://www.securityfocus.com/archive/1/464796/100/0/threaded - http://www.procheckup.com/Vulner_PR0703.php - http://www.securityfocus.com/bid/20753
CVE ID: CVE-2006-7193 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T20:57:41.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in unit_test/test_cases.php in Smarty 2.6.1 allows remote attackers to execute arbitrary PHP code via a URL in the SMARTY_DIR parameter. NOTE: this issue is disputed by CVE and a third party because SMARTY_DIR is a constant Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=116163668213491&w=2 - http://osvdb.org/31096 - http://marc.info/?l=bugtraq&m=116170769322920&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29739
CVE ID: CVE-2006-7194 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T20:57:40.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/Mysqlfinder/MysqlfinderAdmin.php in Agora 1.4 RC1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the _SESSION[PATH_COMPOSANT] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2726 - http://advisories.echo.or.id/adv/adv59-theday-2006.txt - http://marc.info/?l=bugtraq&m=116283849004075&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30031
CVE ID: CVE-2006-7195 State: PUBLISHED Published: 2007-05-09T22:00:00 Last Updated: 2024-08-07T20:57:40.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values. Additional Analyst Notes: - CVE Program Container: References: - http://lists.vmware.com/pipermail/security-announce/2008/000003.html - http://www.securityfocus.com/bid/28481 - http://www.vupen.com/english/advisories/2008/0065 - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://secunia.com/adv
com/english/advisories/2008/0065 - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://secunia.com/advisories/33668 - http://www.securityfocus.com/archive/1/485938/100/0/threaded - http://www.securityfocus.com/archive/1/500396/100/0/threaded - http://www.vupen.com/english/advisories/2007/1729 - http://www.vupen.com/english/advisories/2009/0233 - http://secunia.com/advisories/28365 - http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm - http://www.redhat.com/support/errata/RHSA-2007-0327.html - http://tomcat.apache.org/security-5.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10514 - http://www.redhat.com/support/errata
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10514 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540