Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4191 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/480022/100/100/threaded - http://secunia.com/advisories/26336 - http://www.securityfocus.com/archive/1/480443/100/100/threaded - http://www.securitytracker.com/id?10187
isories/26336 - http://www.securityfocus.com/archive/1/480443/100/100/threaded - http://www.securitytracker.com/id?1018722 - http://www.securityfocus.com/bid/25186 - http://www.securityfocus.com/archive/1/475373/100/0/threaded - https://tiifp.org/tarkus/advisories/panda030707.txt - http://securityreason.com/securityalert/2968 - http://www.pandasecurity.com/homeusers/support/card?id=41111&idIdioma=2&ref=PAV08Dev - http://www.vupen.com/english/advisories/2007/2784
CVE ID: CVE-2007-4192 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IDE Group DVD Rental System (DRS) 5.1 before 20070801 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application service provider. If so, then this issue should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26310 - http://www.securityfocus.com/bid/25177 - http://osvdb.org/395
ainer: References: - http://secunia.com/advisories/26310 - http://www.securityfocus.com/bid/25177 - http://osvdb.org/39522 - http://www.vupen.com/english/advisories/2007/2806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35768 - http://archives.neohapsis.com/archives/fulldisclosure/2007-08/0020.html
CVE ID: CVE-2007-4193 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in IDE Group DVD Rental System (DRS) 5.1 before 20070801 allow remote attackers to perform certain actions as arbitrary users, as demonstrated by (1) modifying data or (2) canceling a subscription. NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application service provider. If so, then this issue should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/adviso
hould not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26310 - http://www.vupen.com/english/advisories/2007/2806 - http://osvdb.org/39523 - http://archives.neohapsis.com/archives/fulldisclosure/2007-08/0020.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35769
CVE ID: CVE-2007-4194 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Guidance Software EnCase 5.0 allows user-assisted remote attackers to cause a denial of service (stack memory consumption) and possibly have other unspecified impact via a malformed file, related to "EnCase's file system parsing." NOTE: this information is based upon a vague pre-advisory. It might overlap CVE-2007-4036. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2967 - http://osvdb.org/44739 - http://www.securityfocus.com/archive/1/474811/100/0/threaded - https://ex
/securityalert/2967 - http://osvdb.org/44739 - http://www.securityfocus.com/archive/1/474811/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46230
CVE ID: CVE-2007-4195 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain ext2fs files via a malformed ext2fs image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474809/100/0/threaded - http://osvdb.org/47000 - http://www.securityfocus.com/bid/25181 - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http://sourceforge.
p://www.securityfocus.com/bid/25181 - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http://sourceforge.net/mailarchive/message.php?msg_name=A19F11EF-13CA-4940-AFF3-9BE08F67EE22%40sleuthkit.org - http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE ID: CVE-2007-4196 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 misinterprets a certain memory location as the holder of a loop iteration count, which allows user-assisted remote attackers to cause a denial of service (long loop) and prevent examination of certain NTFS files via a malformed NTFS image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474809/100/0/threaded - http://www.securityfocus.com/bid/25181 - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http:
threaded - http://www.securityfocus.com/bid/25181 - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http://sourceforge.net/mailarchive/message.php?msg_name=A19F11EF-13CA-4940-AFF3-9BE08F67EE22%40sleuthkit.org - http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE ID: CVE-2007-4197 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 omits NULL pointer checks in certain code paths, which allows user-assisted remote attackers to cause a denial of service (NULL dereference and application crash) and prevent examination of certain NTFS files via a malformed NTFS image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474809/100/0/threaded - http://www.securityfocus.com/bid/25181 - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http://s
eaded - http://www.securityfocus.com/bid/25181 - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http://sourceforge.net/mailarchive/message.php?msg_name=A19F11EF-13CA-4940-AFF3-9BE08F67EE22%40sleuthkit.org - http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE ID: CVE-2007-4198 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fs_data_put_str function in ntfs.c in fls in Brian Carrier The Sleuth Kit (TSK) before 2.09 does not validate a certain length value, which allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image, which triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474809/100/0/threaded - http://osvdb.org/46998 - http://www.securityfocus.com/bid/25181
www.securityfocus.com/archive/1/474809/100/0/threaded - http://osvdb.org/46998 - http://www.securityfocus.com/bid/25181 - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http://sourceforge.net/mailarchive/message.php?msg_name=A19F11EF-13CA-4940-AFF3-9BE08F67EE22%40sleuthkit.org - http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE ID: CVE-2007-4199 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image that triggers (1) dereference of a certain integer value by ntfs_dent.c in fls, or (2) dereference of a certain other integer value by ntfs.c in fsstat. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474809/100/0/threaded - http://osvdb.org/46997 - http://www.security
eferences: - http://www.securityfocus.com/archive/1/474809/100/0/threaded - http://osvdb.org/46997 - http://www.securityfocus.com/bid/25181 - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http://sourceforge.net/mailarchive/message.php?msg_name=A19F11EF-13CA-4940-AFF3-9BE08F67EE22%40sleuthkit.org - http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE ID: CVE-2007-4200 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntfs.c in fsstat in Brian Carrier The Sleuth Kit (TSK) before 2.09 interprets a certain variable as a byte count rather than a count of 32-bit integers, which allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474809/100/0/threaded - http://www.securityfocus.com/bid/25181 - http://www.securityfocus.com/archive/1/4753
m/archive/1/474809/100/0/threaded - http://www.securityfocus.com/bid/25181 - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http://osvdb.org/46996 - http://sourceforge.net/mailarchive/message.php?msg_name=A19F11EF-13CA-4940-AFF3-9BE08F67EE22%40sleuthkit.org - http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE ID: CVE-2007-4201 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Guidance Software EnCase 6.2 and 6.5 does not properly handle a volume with more than 25 partitions, which might allow remote attackers to prevent examination of certain data, a related issue to CVE-2007-4035. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474809/100/0/threaded - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http://www.kb.cert.org/vuls/id/310057 - http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE ID: CVE-2007-4202 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Guidance Software EnCase Enterprise Edition (EEE) 6 does not properly verify the identity of the acquisition target during communication with the EnCase Servlet (EEE servlet), which might allow remote attackers to spoof the disk image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474809/100/0/threaded - http://www.kb.cert.org/vuls/id/912593 - http://www.securityfocus.com/archive/1/475335/100/0/threaded - http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Softwar
ww.securityfocus.com/archive/1/475335/100/0/threaded - http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE ID: CVE-2007-4203 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/475241/100/0/threaded - http://securityreason.com/securityalert/2970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35744 - http://osvdb.org/42514
CVE ID: CVE-2007-4204 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus Collaboration Portal 06-32 through 06-32-/B, and Groupmax Collaboration Web Client - Mail/Schedule 07-32 through 07-32-/A, can assign schedule data to the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2723 - http://osvdb.org/4698
Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2723 - http://osvdb.org/46987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35704 - http://www.hitachi-support.com/security_e/vuls_e/HS07-022_e/index-e.html
CVE ID: CVE-2007-4205 State: PUBLISHED Published: 2007-08-08T01:52:00 Last Updated: 2024-08-07T14:46:39.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: XHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service (heartbeat control process crash) via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018505 - http://www.vupen.com/english/advisories/2007/2767 - http://osvdb.org/39396 - http://secunia.com/advisories/26265 - http://securityreason.com/securityalert/2978 - http://www.securityfocus.com/a
96 - http://secunia.com/advisories/26265 - http://securityreason.com/securityalert/2978 - http://www.securityfocus.com/archive/1/475455/100/0/threaded - http://www.securityfocus.com/archive/1/475065/100/0/threaded
CVE ID: CVE-2007-4206 State: PUBLISHED Published: 2007-08-08T01:52:00 Last Updated: 2024-08-07T14:46:39.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaspersky Anti-Spam 3.0 MP1 before Critical Fix 2 (3.0.278.4) sets incorrect permissions for application files in certain upgrade scenarios, which might allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25189 - http://www.kaspersky.com/technews?id=203038705 - http://secunia.com/advisories/26312 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35782 - http://osvdb.org/37216
CVE ID: CVE-2007-4207 State: PUBLISHED Published: 2007-08-08T01:52:00 Last Updated: 2024-08-07T14:46:39.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin_console/index.asp in Gallery In A Box allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password field. NOTE: these fields might be associated with the txtUsername and txtPassword parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2798 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35791 - http://securityreason.com/securityalert/2977 - http://osvdb.org/36284 - http://www.securi
ud.com/vulnerabilities/35791 - http://securityreason.com/securityalert/2977 - http://osvdb.org/36284 - http://www.securityfocus.com/bid/25194 - http://www.securityfocus.com/archive/1/475448/100/0/threaded - http://outlaw.aria-security.info/?p=13 - http://secunia.com/advisories/26334
CVE ID: CVE-2007-4208 State: PUBLISHED Published: 2007-08-08T01:52:00 Last Updated: 2024-08-07T14:46:39.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in Next Gen Portfolio Manager allows remote attackers to execute arbitrary SQL commands via the (1) Users_Email or (2) Users_Password parameter in an ExecuteTheLogin action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2976 - http://www.securityfocus.com/bid/25195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35787 - http://www.vupen.com/english/advisories/2007/2797 - http://outlaw.aria-security.info/?p=14 - http://s
rabilities/35787 - http://www.vupen.com/english/advisories/2007/2797 - http://outlaw.aria-security.info/?p=14 - http://secunia.com/advisories/26338 - http://www.securityfocus.com/archive/1/475449/100/0/threaded - http://osvdb.org/36280
CVE ID: CVE-2007-4209 State: PUBLISHED Published: 2007-08-08T01:52:00 Last Updated: 2024-08-07T14:46:39.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Recherche.php in Aceboard forum allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/475469/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35793 - http://www.securityfocus.com/bid/25197
CVE ID: CVE-2007-4210 State: PUBLISHED Published: 2007-08-08T01:52:00 Last Updated: 2024-08-07T14:46:39.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbitrary SQL commands via (1) the mid parameter in an faqviewgroup action in the FAQ Modules, (2) the cid parameter in the EZSHOPINGCART Modules, or (3) the gid parameter in a view action in the GALLERY Modules. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37470 - http://osvdb.org/37471 - http://www.securityfocus.com/archive/1/475447 - https://exchange.xforce.ibmcloud.com/vul
7470 - http://osvdb.org/37471 - http://www.securityfocus.com/archive/1/475447 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35786 - http://osvdb.org/36438 - http://securityreason.com/securityalert/2975 - http://secunia.com/advisories/26339 - http://www.securityfocus.com/bid/25193
CVE ID: CVE-2007-4211 State: PUBLISHED Published: 2007-08-08T01:52:00 Last Updated: 2024-08-07T14:46:39.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a (1) COPY or (2) APPEND command. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35767 - http://secunia.com/advisories/30342 - http://www.redhat.com/support/errata/RHSA-2008-0297.html - http://www.securityfocus.com/bid/25182 - https://issues.rpa
- http://www.redhat.com/support/errata/RHSA-2008-0297.html - http://www.securityfocus.com/bid/25182 - https://issues.rpath.com/browse/RPL-1621 - http://secunia.com/advisories/26320 - http://www.dovecot.org/list/dovecot-news/2007-August/000048.html - http://secunia.com/advisories/26475
CVE ID: CVE-2007-4212 State: PUBLISHED Published: 2007-08-08T01:52:00 Last Updated: 2024-08-07T14:46:39.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing "<" instead of a ">" in (1) the onerror attribute of an IMG element, (2) the onload attribute of an IFRAME element, or (3) redirect users to other sites via the META tag. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2974 - http://osvdb.org/42538 - http://www.securityfocus.com/bid/25171 - http://www.securityfo
yreason.com/securityalert/2974 - http://osvdb.org/42538 - http://www.securityfocus.com/bid/25171 - http://www.securityfocus.com/archive/1/475249/100/0/threaded
CVE ID: CVE-2007-4213 State: PUBLISHED Published: 2007-08-21T17:00:00 Last Updated: 2024-08-07T14:46:39.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palm OS on Treo 650, 680, 700p, and 755p Smart phones allows remote attackers to cause a denial of service (device reset or hang) via a flood of large ICMP echo requests. NOTE: this is probably a different vulnerability than CVE-2003-0293. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477128/100/0/threaded - http://securityreason.com/securityalert/3034 - http://www.securityfocus.com/archive/1/477346/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/3
- http://www.securityfocus.com/archive/1/477346/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36124 - http://www.securityfocus.com/archive/1/477169/100/0/threaded - http://www.securityfocus.com/archive/1/477235/100/0/threaded - http://www.securityfocus.com/bid/25074 - http://www.securityfocus.com/archive/1/477350/100/0/threaded - http://www.securityfocus.com/archive/1/477231/100/0/threaded - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-007.txt
CVE ID: CVE-2007-4216 State: PUBLISHED Published: 2007-08-21T17:00:00 Last Updated: 2024-08-07T14:46:39.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in a METHOD_NEITHER (1) IOCTL 0x8400000F or (2) IOCTL 0x84000013 request, which can be used to overwrite arbitrary memory locations. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36107 - http://www.vupen.com/english/advisories/2007/2929 - http://securitytracker.com/
rce.ibmcloud.com/vulnerabilities/36107 - http://www.vupen.com/english/advisories/2007/2929 - http://securitytracker.com/id?1018589 - http://www.securityfocus.com/bid/25365 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=585 - http://www.securityfocus.com/bid/25377 - http://www.securityfocus.com/archive/1/477155/100/0/threaded - http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53
CVE ID: CVE-2007-4217 State: PUBLISHED Published: 2007-11-05T16:00:00 Last Updated: 2024-08-07T14:46:39.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the domacro function in ftp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long parameter to a macro, as demonstrated by executing a macro via the '$' command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38162 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=616 - http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&headin
/vulnerabilities/display.php?id=616 - http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200709%2FSECURITY%2F20070905%2Fdatafile101815 - http://securitytracker.com/id?1018871 - http://www.ibm.com/support/docview.wss?uid=isg1IZ05488 - ftp://aix.software.ibm.com/aix/efixes/security/ftp_ifix.tar - http://www.vupen.com/english/advisories/2007/3669 - http://www.ibm.com/support/docview.wss?uid=isg1IZ05487 - http://www.securityfocus.com/bid/26260