Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
E Program Container: References: - http://www.eleytt.com/advisories/eleytt_ALLFUSIONLICRCMD.pdf - http://www.securityfocus.com/bid/24817 - http://osvdb.org/39597
CVE ID: CVE-2007-3696 State: PUBLISHED Published: 2007-07-11T22:00:00 Last Updated: 2024-08-07T14:28:52.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA ERwin Data Model Validator (formerly AllFusion Data Model Validator) allows remote attackers to (1) cause a denial of service (application hang) via a malformed .EXP database file and (2) cause a denial of service (aaplication crash) via a crafted .EXP database file, which triggers a NULL dereference. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39596 - http://www.eleytt.com/advisories/eleytt_ALLFUSIONDATAMODEL.pdf - http://www.securityfocus.com/bid/24814
CVE ID: CVE-2007-3697 State: PUBLISHED Published: 2007-07-11T22:00:00 Last Updated: 2024-08-07T14:28:51.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473281/100/0/threaded - http://www.vupen.com/english/advisories/2007/2514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35316 - http://osvdb.org/36139 - https://www.exploit-db.com/exploits/4169 - http://securityreason.com/securityalert
ties/35316 - http://osvdb.org/36139 - https://www.exploit-db.com/exploits/4169 - http://securityreason.com/securityalert/2881 - http://www.securityfocus.com/bid/24842 - http://secunia.com/advisories/26007
CVE ID: CVE-2007-3698 State: PUBLISHED Published: 2007-07-11T22:00:00 Last Updated: 2024-08-07T14:28:51.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0132.html - http://www.redhat.com/support/errata/RHSA-2007-0818.html - http://www.vupen.com/english/advisori
a/RHSA-2008-0132.html - http://www.redhat.com/support/errata/RHSA-2007-0818.html - http://www.vupen.com/english/advisories/2007/2660 - http://secunia.com/advisories/26933 - http://docs.info.apple.com/article.html?artnum=307177 - http://www.securityfocus.com/bid/24846 - http://secunia.com/advisories/26314 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10634 - http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html - http://www.cisco.com/en/US/products/products_security_response09186a008088bd19.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35333 - http://secunia.com/advisories/29897 - http://secunia.com/advisories/
xchange.xforce.ibmcloud.com/vulnerabilities/35333 - http://secunia.com/advisories/29897 - http://secunia.com/advisories/26015 - http://secunia.com/advisories/28056 - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html - http://www.redhat.com/support/errata/RHSA-2008-0100.html - http://secunia.com/advisories/26221 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html - http://www.redhat.com/support/errata/RHSA-2007-0956.html - http://secunia.com/advisories/26645 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 - http://secunia.com/advisories/28777 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objec
ID=c01269450 - http://secunia.com/advisories/28777 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 - http://www.securitytracker.com/id?1018357 - http://www.vupen.com/english/advisories/2007/4224 - http://www.vupen.com/english/advisories/2007/3861 - http://www.vupen.com/english/advisories/2007/3009 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102997-1 - http://secunia.com/advisories/28880 - http://secunia.com/advisories/27716 - http://osvdb.org/36663 - http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml - http://secunia.com/advisories/28115 - http://secunia.com/advisories/29340 - http://www.vupen.com/english/advisories/2007/2495 - http://
com/advisories/28115 - http://secunia.com/advisories/29340 - http://www.vupen.com/english/advisories/2007/2495 - http://www.redhat.com/support/errata/RHSA-2007-1086.html - http://secunia.com/advisories/27203 - http://secunia.com/advisories/26631 - http://dev2dev.bea.com/pub/advisory/249 - http://secunia.com/advisories/27635 - http://www.cisco.com/warp/public/707/cisco-sr-20070725-jsse.shtml
CVE ID: CVE-2007-3699 State: PUBLISHED Published: 2007-10-05T21:00:00 Last Updated: 2024-08-07T14:28:52.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26053 - http://www.vupen.com/english/advisories/2007/2508 - http://osvdb.org/36119 - http://www.zerodayinitiative.com/advisories/ZDI-07-039.html - http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html - http://www.
visories/ZDI-07-039.html - http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html - http://www.securityfocus.com/bid/24282
CVE ID: CVE-2007-3700 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:51.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the message debug level is configured in the com.iplanet.services.debug.level property in AMConfig.properties, logs cleartext login passwords, which allows local users to gain privileges by reading /var/opt/SUNWam/debug/amAuth. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24859 - http://www.vupen.com/english/advisories/2007/2496 - http://secunia.com/advisories/26030 - http://osvdb.org
m/bid/24859 - http://www.vupen.com/english/advisories/2007/2496 - http://secunia.com/advisories/26030 - http://osvdb.org/37249 - http://www.securitytracker.com/id?1018370 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101918-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200386-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35339
CVE ID: CVE-2007-3701 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:51.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24855 - http://secunia.com/advisories/26013 - http://www.securitytracker.com/id?1018361 - http://www.3com.com/securityalert/alerts/3COM-07-003.html - http://security-assessment.com/files/advisorie
/id?1018361 - http://www.3com.com/securityalert/alerts/3COM-07-003.html - http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html - http://www.vupen.com/english/advisories/2007/2490 - http://www.securityfocus.com/archive/1/473311/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35336 - http://osvdb.org/35970
CVE ID: CVE-2007-3702 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:51.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the archives parameter in a Load action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24852 - http://secunia.com/advisories/26009 - http://osvdb.org/38452 - http://www.vupen.com/english/advisories/2007/2519 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35327 - https://www.exploi
vupen.com/english/advisories/2007/2519 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35327 - https://www.exploit-db.com/exploits/4171
CVE ID: CVE-2007-3703 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:51.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in a certain ActiveX control in sasatl.dll 1.5.0.531 in Zenturi Program Checker (ProgramChecker) Pro allows remote attackers to execute arbitrary code via a long argument to the Fill method. NOTE: this is probably a different issue than CVE-2007-2987. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37707 - http://www.exploit-db.com/exploits/4170 - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0180.html - http://www.securityfocus.com/bid/24848
CVE ID: CVE-2007-3704 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:51.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Entertainment CMS allows remote attackers to bypass authentication and perform certain administrative actions by setting the adminLogged cookie to "Administrator." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473282/100/0/threaded - http://www.securityfocus.com/bid/24847 - http://secunia.com/advisories/26016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35330 - http://securityreason.com/securityalert/2878 - http://osvdb.org/37908
CVE ID: CVE-2007-3705 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:51.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via the FTVAR_SUBCAT (txForumID) parameter to forum/index.cfm and possibly other unspecified components, related to forum/include/error/forumerror.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2879 - http://www.securityfocus.com/archive/1/471637/100/200/threaded - http://osvdb.org/37140
CVE ID: CVE-2007-3706 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:52.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _sanitize_globals function in CodeIgniter 1.5.3 before 20070628 allows remote attackers to unset arbitrary global variables with unspecified impact, as demonstrated by a _SERVER cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25991 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html - http://www.securityfocus.com/archive/1/473190/100/0/threaded - http://osvdb.org/37905 - http://securityreason.com/securityalert/2877
CVE ID: CVE-2007-3707 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:52.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in CodeIgniter 1.5.3 before 20070628, when enable_query_strings is true, allows remote attackers to read arbitrary files via a .. (dot dot) in the c parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25991 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35348 - http://osvdb.org/37906 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html - http://www.securityfocus.com/archive/1/473190/100/0/threaded
k.org.uk/pipermail/full-disclosure/2007-July/064500.html - http://www.securityfocus.com/archive/1/473190/100/0/threaded - http://securityreason.com/securityalert/2877
CVE ID: CVE-2007-3708 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:52.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CodeIgniter 1.5.3 before 20070626 allows remote attackers to inject arbitrary web script or HTML via (1) String.fromCharCode and (2) malformed nested tag manipulations in an unspecified component, related to insufficient sanitization by the xss_clean function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37907 - http://secunia.com/advisories/25991 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35350 - http://lists.grok.org.uk/pipermail/ful
m/advisories/25991 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35350 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html - http://www.securityfocus.com/archive/1/473190/100/0/threaded - http://securityreason.com/securityalert/2877
CVE ID: CVE-2007-3709 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:51.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the redirect function in url_helper.php in CodeIgniter 1.5.3 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in an unspecified parameter, as demonstrated by a Set-Cookie header. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39370 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html - http://www.securityfocus.com/archive/1/473190/100/0/threaded - http://securityreason.com/securityalert/2877
CVE ID: CVE-2007-3710 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:51.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in example/gamedemo/inc.functions.php in PHP Comet-Server allows remote attackers to execute arbitrary PHP code via a URL in the projectPath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2876 - http://osvdb.org/36150 - http://www.securityfocus.com/archive/1/473188/100/0/threaded
CVE ID: CVE-2007-3711 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:52.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_3Com_TippingPoint_IPS_Detection_Bypass_2.pdf - http://www.securityfocus.com/bid/24861 - http://www.vupen.com/english/advisories/2007/2489 - http://secunia.com/advisories/26017 - http://www.3com.com/securityalert/alerts/3COM-07
om/english/advisories/2007/2489 - http://secunia.com/advisories/26017 - http://www.3com.com/securityalert/alerts/3COM-07-002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35343 - http://www.securitytracker.com/id?1018386 - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0210.html - http://osvdb.org/35969 - http://www.securityfocus.com/archive/1/473394/100/0/threaded
CVE ID: CVE-2007-3712 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:52.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in HiddenChest "is ve Bayi Basvuru Formu" (Yb ve Bayi Babvuru Formu) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36873 - http://www.securityfocus.com/bid/24812
CVE ID: CVE-2007-3713 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:52.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Konst CenterICQ 4.9.11 through 4.21 allow remote attackers to execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this might overlap CVE-2007-0160. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28103 - http://www.debian.org/security/2007/dsa-1433 - http://www.securityfocus.com/bid/24854
CVE ID: CVE-2007-3714 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:52.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Ada Image Server (ImgSvr) 0.6.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter to the default URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this is probably a different issue than CVE-2004-2464. NOTE: it was later reported that 0.6.21 and earlier is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26000 - h
also affected. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26000 - http://osvdb.org/38083 - http://www.securityfocus.com/archive/1/485490/100/100/threaded - http://www.securityfocus.com/bid/24853
CVE ID: CVE-2007-3715 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:51.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3716. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473552/100/0/threaded - http://secunia.com/advisories/26023 - http://www.securityfocus.com/archive/1/473553/100/0/threaded - http:
/0/threaded - http://secunia.com/advisories/26023 - http://www.securityfocus.com/archive/1/473553/100/0/threaded - http://www.isecpartners.com/files/XMLDSIG_Command_Injection.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/35335 - http://www.isecpartners.com/advisories/2007-04-dsig.txt - http://osvdb.org/37248 - http://www.securityfocus.com/bid/24850 - http://www.vupen.com/english/advisories/2007/2493 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102992-1 - http://www.vupen.com/english/advisories/2007/2785 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200054-1
CVE ID: CVE-2007-3716 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:52.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26933 - http://www.securityfocus.com/archive/1/473552/100/0/threaded - http://dev2dev.bea.com/pub/advisory/248 - http://www.securityfocus.com/arch
yfocus.com/archive/1/473552/100/0/threaded - http://dev2dev.bea.com/pub/advisory/248 - http://www.securityfocus.com/archive/1/473553/100/0/threaded - http://www.isecpartners.com/files/XMLDSIG_Command_Injection.pdf - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102993-1 - http://www.isecpartners.com/advisories/2007-04-dsig.txt - http://secunia.com/advisories/26031 - http://www.vupen.com/english/advisories/2007/3009 - http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml - http://www.securitytracker.com/id?1018365 - http://www.vupen.com/english/advisories/2007/2492 - http://osvdb.org/36664 - http://secunia.com/advisories/26631
CVE ID: CVE-2007-3717 State: PUBLISHED Published: 2007-07-12T16:00:00 Last Updated: 2024-08-07T14:28:52.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: rcp on Sun Solaris 8, 9, and 10 before 20070710 does not properly call certain helper applications, which allows local users to gain privileges by creating files with certain names, possibly containing shell metacharacters or spaces, a similar issue to CVE-2006-0225. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36611 - http://secunia.com/advisories/26024 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1772 - https://exchange.xforce.ibmcloud.com/vulne
ecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1772 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35334 - http://www.vupen.com/english/advisories/2007/2494 - http://secunia.com/advisories/26210 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102978-1 - http://support.avaya.com/elmodocs2/security/ASA-2007-319.htm
CVE ID: CVE-2007-3718 State: PUBLISHED Published: 2007-07-12T16:00:00 Last Updated: 2024-08-07T14:28:52.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact. NOTE: this issue contains no actionable information, but it was released by a reliable researcher. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24446 - http://osvdb.org/38858 - http://security-protocols.com/2007/06/12/safari-3-beta-released-on-windows/
CVE ID: CVE-2007-3719 State: PUBLISHED Published: 2007-07-12T16:00:00 Last Updated: 2024-08-07T14:28:51.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process scheduler in the Linux kernel 2.6.16 gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service (CPU consumption), as described in "Secretly Monopolizing the CPU Without Superuser Privileges." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37127 - http://www.cs.huji.ac.il/~dants/papers/Cheat07Security.pdf
CVE ID: CVE-2007-3720 State: PUBLISHED Published: 2007-07-12T16:00:00 Last Updated: 2024-08-07T14:28:52.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process scheduler in the Linux kernel 2.4 performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service (CPU consumption) by performing voluntary nanosecond sleeps that result in the process not being active during a clock interrupt, as described in "Secretly Monopolizing the CPU Without Superuser Privileges." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37126 - http://www.cs.huji.ac.il/~dants/papers/Cheat07
st Notes: - CVE Program Container: References: - http://osvdb.org/37126 - http://www.cs.huji.ac.il/~dants/papers/Cheat07Security.pdf
CVE ID: CVE-2007-3721 State: PUBLISHED Published: 2007-07-12T16:00:00 Last Updated: 2024-08-07T14:28:51.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ULE process scheduler in the FreeBSD kernel gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service (CPU consumption), as described in "Secretly Monopolizing the CPU Without Superuser Privileges." Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.huji.ac.il/~dants/papers/Cheat07Security.pdf - http://osvdb.org/39598