Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0434 State: PUBLISHED Published: 2007-01-23T02:00:00 Last Updated: 2024-08-07T12:19:30.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22082 - http://dev2dev.bea.com/pub/advisory/220 - http://secunia.com/advisories/23786 - http://osvdb.org/32860
CVE ID: CVE-2007-0435 State: PUBLISHED Published: 2007-01-23T02:00:00 Last Updated: 2024-08-07T12:19:30.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457453/100/0/threaded - http://osvdb.org/32995 - http://www.securityfocus.com/archive/1/457656/100/0/threaded - http://www.securityfocus.com/archive/1/457645/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31621 - http://secunia.com/advisories/2385
/457645/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31621 - http://secunia.com/advisories/23853 - http://www.securityfocus.com/archive/1/460319/100/0/threaded - http://www.securityfocus.com/bid/22160
CVE ID: CVE-2007-0436 State: PUBLISHED Published: 2007-02-04T00:00:00 Last Updated: 2024-08-07T12:19:30.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Install BMS1472) in X-Kryptor Secure Client does not drop privileges when launching an Explorer window in response to a help command, which allows local users to gain LocalSystem privileges via interactive use of Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22424 - http://www.vupen.com/english/advisories/2007/0496 - http://www.cpni.gov.uk/Products/advisories/default.aspx?id=al-20070129-0107.xml - http://www.b
sh/advisories/2007/0496 - http://www.cpni.gov.uk/Products/advisories/default.aspx?id=al-20070129-0107.xml - http://www.bemacpromotions.com/files/xkpatch462660.zip - http://www.cpni.gov.uk/Products/vulnerabilitydisclosures/default.aspx?id=va-20070129-0107.xml - http://osvdb.org/33110 - http://www.barronmccann.com/ISec/s2pressrelease.asp?PRID=141&S2ID=14 - http://jvn.jp/niscc/NISCC-462660/index.html - http://secunia.com/advisories/24045
CVE ID: CVE-2007-0437 State: PUBLISHED Published: 2007-08-20T18:00:00Z Last Updated: 2024-09-16T20:53:06.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the sample Cache' Server Page (CSP) scripts in InterSystems Cache' allow remote attackers to inject arbitrary web script or HTML via (1) the TO parameter to loop.csp, (2) the VALUE parameter to cookie.csp, and (3) the PAGE parameter to showsource.csp in csp/samples/; and allow remote authenticated users to inject arbitrary web script or HTML via (4) the ERROR parameter to csp/samples/xmlclasseserror.csp, and unspecified vectors in (5) object.csp and (6) lotteryhistory.csp
ERROR parameter to csp/samples/xmlclasseserror.csp, and unspecified vectors in (5) object.csp and (6) lotteryhistory.csp in csp/samples/. Additional Analyst Notes: - CVE Program Container: References: - http://www.mwrinfosecurity.com/news/1658.html - http://www.mwrinfosecurity.com/advisories/mwri_cache-sample-files-xss-advisory_2007-04-04.pdf - http://www.cpni.gov.uk/Products/alerts/2928.aspx
CVE ID: CVE-2007-0441 State: PUBLISHED Published: 2007-01-23T16:00:00 Last Updated: 2024-08-07T12:19:30.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allows remote attackers to execute arbitrary commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/456623/100/100/threaded - http://www.securityfocus.com/archive/1/456623/100/100/threaded - http://osvdb.org/32728 - http://securitytracker.com/id?1017504 - http://www.vupen.com/english/advisories/2007/0153
CVE ID: CVE-2007-0442 State: PUBLISHED Published: 2007-01-23T16:00:00 Last Updated: 2024-08-07T12:19:30.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to an "Integrity Problem" involving LIC-TCPIP and TCP reset. NOTE: it is possible that this issue is related to CVE-2004-0230, but this is not certain. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=nas2c8623b2ed01d45d08625718e0043edc2 - http://secunia.com/advisories/23765 - http://osvdb.org/32812 - http://www-1.ibm.com/support/docview.wss?uid=nas204b3e62c8a6
p://secunia.com/advisories/23765 - http://osvdb.org/32812 - http://www-1.ibm.com/support/docview.wss?uid=nas204b3e62c8a63af708625718e0043eddc
CVE ID: CVE-2007-0443 State: PUBLISHED Published: 2007-04-24T16:00:00 Last Updated: 2024-08-07T12:19:29.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23567 - http://www.securityfocus.com/archive/1/466403/100/0/threaded - http://www.gracenote.com/corporate/FAQs.html/faqset=update/page=0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33773 - http://www.zerodayinitiative.c
.html/faqset=update/page=0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33773 - http://www.zerodayinitiative.com/advisories/ZDI-07-021.html - http://osvdb.org/34327 - http://www.vupen.com/english/advisories/2007/1475 - http://secunia.com/advisories/22924 - http://www.securitytracker.com/id?1017937
CVE ID: CVE-2007-0444 State: PUBLISHED Published: 2007-01-24T22:00:00 Last Updated: 2024-08-07T12:19:30.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23869 - http://www.securityfocus.com/bid/22217 - http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c - http://support
/www.securityfocus.com/bid/22217 - http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c - http://support.citrix.com/article/CTX111686 - http://www.zerodayinitiative.com/advisories/ZDI-07-006.html - http://securitytracker.com/id?1017553 - http://osvdb.org/32958 - http://www.vupen.com/english/advisories/2007/0328 - http://www.securityfocus.com/archive/1/458002/100/0/threaded
CVE ID: CVE-2007-0445 State: PUBLISHED Published: 2007-04-06T00:00:00 Last Updated: 2024-08-07T12:19:30.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to execute arbitrary code via crafted ARJ archives. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-07-013.html - http://secunia.com/advisories/24778 - http://www.securitytracker.com/id?1017882 - http://www.kasp
ries/ZDI-07-013.html - http://secunia.com/advisories/24778 - http://www.securitytracker.com/id?1017882 - http://www.kaspersky.com/technews?id=203038694 - http://www.vupen.com/english/advisories/2007/1268 - http://www.securityfocus.com/archive/1/464878/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33489 - http://www.securityfocus.com/bid/23346 - http://www.kaspersky.com/technews?id=203038693 - http://www.securitytracker.com/id?1017883
CVE ID: CVE-2007-0446 State: PUBLISHED Published: 2007-02-08T23:00:00 Last Updated: 2024-08-07T12:19:30.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32390 - http://www.zerodayinitiative.com/advisories/ZDI-07-007.html - http://security
force.ibmcloud.com/vulnerabilities/32390 - http://www.zerodayinitiative.com/advisories/ZDI-07-007.html - http://securitytracker.com/id?1017612 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00854250 - http://osvdb.org/33132 - http://www.ciac.org/ciac/bulletins/r-123.shtml - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00854250 - http://www.securityfocus.com/archive/1/459505/100/0/threaded - http://www.kb.cert.org/vuls/id/303012 - http://www.vupen.com/english/advisories/2007/0535 - http://secunia.com/advisories/24112 - http://securitytracker.com/id?1017613 - http://www.securityfocus.com/bid/22487 - http://securitytracker.com/id?1017611
CVE ID: CVE-2007-0447 State: PUBLISHED Published: 2007-10-05T21:00:00 Last Updated: 2024-08-07T12:19:30.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26053 - http://www.vupen.com/english/advisories/2007/2508 - http://osvdb.org/36118 - http://www.zerodayinitiative.com/advisories/ZDI-07-040.html - http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html - http://www.securityfocus.com/bid/24282
CVE ID: CVE-2007-0448 State: PUBLISHED Published: 2007-05-24T18:00:00 Last Updated: 2024-08-07T12:19:29.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fopen function in PHP 5.2.0 does not properly handle invalid URI handlers, which allows context-dependent attackers to bypass safe_mode restrictions and read arbitrary files via a file path specified with an invalid URI, as demonstrated via the srpath URI. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/achievement_securityalert/44 - http://www.securityfocus.com/bid/22261 - http://securityreason.com/securityalert/2175
CVE ID: CVE-2007-0449 State: PUBLISHED Published: 2007-01-23T21:00:00 Last Updated: 2024-08-07T12:19:30.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted packets to TCP port (1) 1900 or (2) 2200. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22340 - http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=97696 - http://www.os
/www.securityfocus.com/bid/22340 - http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=97696 - http://www.osvdb.org/31593 - http://www.kb.cert.org/vuls/id/611276 - http://www.securityfocus.com/archive/1/458648/100/0/threaded - http://secunia.com/advisories/23897 - http://www.securityfocus.com/archive/1/458644/100/0/threaded - http://www3.ca.com/securityadvisor/vulninfo/Vuln.aspx?ID=34993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31704 - http://www.securityfocus.com/archive/1/457945/30/8460/threaded - http://www.securityfocus.com/bid/22199 - http://www.securityfocus.com/bid/22342 - http://www.vupen.com/english/advisories/2007/0314 - http://www.kb.cert.org/vuls/id/3573
ww.securityfocus.com/bid/22342 - http://www.vupen.com/english/advisories/2007/0314 - http://www.kb.cert.org/vuls/id/357308 - http://securitytracker.com/id?1017548 - http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp
CVE ID: CVE-2007-0450 State: PUBLISHED Published: 2007-03-16T22:00:00 Last Updated: 2024-08-07T12:19:30.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html -
t in Apache. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://secunia.com/advisories/30908 - http://lists.vmware.com/pipermail/security-announce/2008/000003.html - http://www.vupen.com/english/advisories/2007/2732 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1 - http://www.vupen.com/english/advisories/2007/3087 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32988 - http://secunia.com/advisories/30899 - http://www.vupen.com/english/advisories/2008/1979/references - http://www.novell.com/linux/security/advisories/2007_5_sr.html - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.ht
l.com/linux/security/advisories/2007_5_sr.html - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://www.vupen.com/english/advisories/2008/0065 - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://secunia.com/advisories/33668 - http://www.securityfocus.com/archive/1/485938/100/0/threaded - http://www.securityfocus.com/archive/1/500396/100/0/threaded - http://secunia.com/advisories/25280 - http://www.redhat.com/support/errata/RHSA-2007-0360.html - http://secunia.com/advisories/24732 - http://www.vupen.com/english/advisories/2009/0233 - http://www.securityfocus.com/bid/22960 - http://secunia.com/advisories/28365 - http://support.avaya.com/elmod
009/0233 - http://www.securityfocus.com/bid/22960 - http://secunia.com/advisories/28365 - http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm - http://tomcat.apache.org/security-6.html - http://www.sec-consult.com/287.html - http://www.vupen.com/english/advisories/2007/3386 - http://www.sec-consult.com/fileadmin/Advisories/20070314-0-apache_tomcat_directory_traversal.txt - http://www.redhat.com/support/errata/RHSA-2007-0327.html - http://secunia.com/advisories/27037 - http://docs.info.apple.com/article.html?artnum=306172 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://www.vupen.com/english/advisories/2007/0975 - http://h20000.www2.hp.com/b
upport/Document.jsp?objectID=c01178795 - http://www.vupen.com/english/advisories/2007/0975 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://tomcat.apache.org/security-5.html - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/26660 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200702e.html - http://security.gentoo.org/glsa/glsa-200705-03.xml - http://secunia.com/advisories/25106 - http://securityreason.com/securityalert/2446 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/
/2446 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 - http://www.securityfocus.com/archive/1/462791/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2007:241 - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://secunia.com/advisories/26235 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10643 - https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e
517d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.h
7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2007-0451 State: PUBLISHED Published: 2007-02-16T19:00:00 Last Updated: 2024-08-07T12:19:30.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage." Additional Analyst Notes: - CVE Program Container: References: - http://spamassassin.apache.org/advisories/cve-2007-0451.txt - http://secunia.com/advisories/24200 - https://issues.rpath.com/browse/RPL-1073 - http://secunia.com/advisories/24889 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:049 - http://secunia.com/advisories/24265 - http://fedoranews.org/cm
ww.mandriva.com/security/advisories?name=MDKSA-2007:049 - http://secunia.com/advisories/24265 - http://fedoranews.org/cms/node/2659 - http://www.novell.com/linux/security/advisories/2007_6_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018 - http://fedoranews.org/cms/node/2657 - http://www.vupen.com/english/advisories/2007/0628 - http://www.securityfocus.com/bid/22584 - http://secunia.com/advisories/24250 - http://www.securitytracker.com/id?1017666 - http://rhn.redhat.com/errata/RHSA-2007-0074.html - http://secunia.com/advisories/24256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32536 - http://osvdb.org/33207 - http://secunia.com
isories/24256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32536 - http://osvdb.org/33207 - http://secunia.com/advisories/24197 - http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt - http://secunia.com/advisories/24307 - http://security.gentoo.org/glsa/glsa-200703-02.xml - http://www.redhat.com/support/errata/RHSA-2007-0075.html
CVE ID: CVE-2007-0452 State: PUBLISHED Published: 2007-02-06T02:00:00 Last Updated: 2024-08-07T12:19:30.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exhaustion) by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24046 - http://secunia.com/advisories/24101 - http://secunia.com/advisories/24076 - http://www.securityfocus.com/archive/1/459365/100/0/threaded - http://h20000.www2.hp.com/biz
unia.com/advisories/24076 - http://www.securityfocus.com/archive/1/459365/100/0/threaded - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00943462 - http://www.gentoo.org/security/en/glsa/glsa-200702-01.xml - http://securityreason.com/securityalert/2219 - http://www.vupen.com/english/advisories/2007/1278 - http://secunia.com/advisories/24151 - http://www.vupen.com/english/advisories/2007/0483 - http://secunia.com/advisories/24030 - http://secunia.com/advisories/24140 - http://us1.samba.org/samba/security/CVE-2007-0452.html - http://secunia.com/advisories/24021 - http://secunia.com/advisories/24284 - http://www.securityfocus.com/archive/1/459167/100/0/threaded - http:
ories/24021 - http://secunia.com/advisories/24284 - http://www.securityfocus.com/archive/1/459167/100/0/threaded - http://www.securityfocus.com/bid/22395 - https://issues.rpath.com/browse/RPL-1005 - http://securitytracker.com/id?1017587 - http://secunia.com/advisories/24067 - http://secunia.com/advisories/24145 - http://secunia.com/advisories/24060 - http://www.redhat.com/support/errata/RHSA-2007-0060.html - http://osvdb.org/33100 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00943462 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:034 - http://www.trustix.org/errata/2007/0007 - http://www.ubuntu.com/usn/usn-419-1 - http://sunsolve.sun.com/search/doc
034 - http://www.trustix.org/errata/2007/0007 - http://www.ubuntu.com/usn/usn-419-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1 - http://fedoranews.org/cms/node/2579 - http://www.redhat.com/support/errata/RHSA-2007-0061.html - http://fedoranews.org/cms/node/2580 - ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916 - http://secunia.com/advisories/24792 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32301 - http://www.debian.org/security/2007/dsa-1257 - http://secunia.com/advisories/24188 - https://oval.cisecurity.org/repository/search/definit
org/security/2007/dsa-1257 - http://secunia.com/advisories/24188 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9758 - http://lists.suse.com/archive/suse-security-announce/2007-Feb/0002.html
CVE ID: CVE-2007-0453 State: PUBLISHED Published: 2007-02-06T02:00:00 Last Updated: 2024-08-07T12:19:30.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the nss_winbind.so.1 library in Samba 3.0.21 through 3.0.23d, as used in the winbindd daemon on Solaris, allows attackers to execute arbitrary code via the (1) gethostbyname and (2) getipnodebyname functions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24101 - http://osvdb.org/33098 - http://www.securityfocus.com/archive/1/459365/100/0/threaded - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html - https://exchange.xforce.ibmcloud.com/vulner
aded - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/32231 - http://secunia.com/advisories/24151 - http://www.vupen.com/english/advisories/2007/0483 - https://issues.rpath.com/browse/RPL-1005 - http://securitytracker.com/id?1017589 - http://www.securityfocus.com/archive/1/459168/100/0/threaded - http://www.securityfocus.com/bid/22410 - http://us1.samba.org/samba/security/CVE-2007-0453.html - http://www.trustix.org/errata/2007/0007 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916 - http://secunia.com/advisories/24043