Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3375 State: PUBLISHED Published: 2007-06-25T20:00:00 Last Updated: 2024-08-07T14:14:12.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/enterprise/security_response/weblog/2007/06/beware_of_lzh.html - http://www.kb.cert.org/vuls/id/871497 - http://www.symantec.com/security_response/writeup.jsp?docid=2007-062506-5500-99&tabid=1 - https://exchange.xforce.ibmcloud.com/vulnera
antec.com/security_response/writeup.jsp?docid=2007-062506-5500-99&tabid=1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35116 - http://vuln.sg/lhaca121-en.html - http://www.securityfocus.com/bid/24604 - http://secunia.com/advisories/25826
CVE ID: CVE-2007-3376 State: PUBLISHED Published: 2007-06-25T20:00:00 Last Updated: 2024-08-07T14:14:12.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long value in the title HTML tag, which triggers the overflow when the user adds the page as a bookmark. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=118278848816602&w=2 - http://osvdb.org/40882 - http://www.securityfocus.com/bid/24619 - http://www.vupen.com/english/advisories/2007/2340 - https://exc
vdb.org/40882 - http://www.securityfocus.com/bid/24619 - http://www.vupen.com/english/advisories/2007/2340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35030 - http://www.securityfocus.com/archive/1/472209
CVE ID: CVE-2007-3377 State: PUBLISHED Published: 2007-06-25T21:00:00 Last Updated: 2024-08-07T14:14:12.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26231 - http://secunia.com/advisories/26417 - http://secunia.com/advisories/29354 - http://secunia.com/advisories/26014 - http://www.redh
cunia.com/advisories/26417 - http://secunia.com/advisories/29354 - http://secunia.com/advisories/26014 - http://www.redhat.com/support/errata/RHSA-2007-0675.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9904 - http://secunia.com/advisories/26012 - http://www.debian.org/security/2008/dsa-1515 - http://www.net-dns.org/docs/Changes.html - http://www.novell.com/linux/security/advisories/2007_17_sr.html - http://secunia.com/advisories/26543 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35112 - http://support.avaya.com/elmodocs2/security/ASA-2007-351.htm - http://www.ubuntu.com/usn/usn-483-1 - http://www.trustix.org/errata/2007/0023/ - http:
docs2/security/ASA-2007-351.htm - http://www.ubuntu.com/usn/usn-483-1 - http://www.trustix.org/errata/2007/0023/ - http://www.mandriva.com/security/advisories?name=MDKSA-2007:146 - http://www.redhat.com/support/errata/RHSA-2007-0674.html - http://secunia.com/advisories/26055 - http://secunia.com/advisories/26211 - http://osvdb.org/37053 - http://secunia.com/advisories/26075 - http://www.securitytracker.com/id?1018377 - http://secunia.com/advisories/26508 - http://www.securityfocus.com/bid/24669 - http://rt.cpan.org/Public/Bug/Display.html?id=23961 - ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc - http://secunia.com/advisories/25829 - https://bugzilla.redhat.com/bug
pport/free/security/advisories/20070701-01-P.asc - http://secunia.com/advisories/25829 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245458 - http://www.gentoo.org/security/en/glsa/glsa-200708-06.xml - http://www.securityfocus.com/archive/1/473871/100/0/threaded - http://www.nntp.perl.org/group/perl.qpsmtpd/2006/03/msg4810.html
CVE ID: CVE-2007-3378 State: PUBLISHED Published: 2007-06-29T18:00:00 Last Updated: 2024-08-07T14:14:12.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked from a .htaccess file, allow remote attackers to bypass safe_mode and open_basedir restrictions and possibly execute arbitrary commands, as demonstrated using (a) php_value, (b) php_flag, and (c) directives in .htaccess. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2831 - http://www.php.net/ChangeLog-5.php#5.2.5 - http://secunia.com/a
rences: - http://securityreason.com/securityalert/2831 - http://www.php.net/ChangeLog-5.php#5.2.5 - http://secunia.com/advisories/26822 - http://secunia.com/advisories/28750 - http://www.vupen.com/english/advisories/2008/0059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39403 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://www.vupen.com/english/advisories/2008/0924/references - http://securityreason.com/achievement_exploitalert/9 - http://www.php.net/releases/4_4_8.php - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136 - http://secunia.com/advisories/30040 - http://www.vupen.com/english/advisories/2008/0398 - http
ackware-security.335136 - http://secunia.com/advisories/30040 - http://www.vupen.com/english/advisories/2008/0398 - http://www.php.net/releases/5_2_5.php - http://www.php.net/ChangeLog-5.php#5.2.4 - http://secunia.com/advisories/28936 - http://www.trustix.org/errata/2007/0026/ - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - https://issues.rpath.com/browse/RPL-1693 - http://www.securityfocus.com/archive/1/491693/100/0/threaded - http://securityreason.com/securityalert/3389 - http://secunia.com/advisories/27648 - http://securityreason.com/achievement_securityalert/45 - https://issues.rpath.com/browse/RPL-1702 - http://secunia.c
8 - http://securityreason.com/achievement_securityalert/45 - https://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/26838 - http://secunia.com/advisories/27377 - http://www.securityfocus.com/archive/1/472343/100/0/threaded - http://www.securityfocus.com/archive/1/491693/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35102 - http://docs.info.apple.com/article.html?artnum=307562 - http://www.php.net/ChangeLog-4.php - http://secunia.com/advisories/27102 - http://www.vupen.com/english/advisories/2007/3023 - http://www.php.net/releases/5_2_4.php - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501 - http://secunia.com/advisori
2_4.php - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501 - http://secunia.com/advisories/28318 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501 - http://www.securityfocus.com/bid/25498 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6056 - http://secunia.com/advisories/26642 - http://www.securityfocus.com/bid/24661 - http://www.osvdb.org/38682 - http://www.openwall.com/lists/oss-security/2020/09/17/3 - http://seclists.org/fulldisclosure/2020/Sep/34
CVE ID: CVE-2007-3379 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T14:14:12.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kernel in Red Hat Enterprise Linux (RHEL) 4 on the x86_64 platform allows local users to cause a denial of service (OOPS) via unspecified vectors related to the get_gate_vma function and the fuser command. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=178981 - http://rhn.redhat.com/errata/RHBA-2007-0304.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10426
CVE ID: CVE-2007-3380 State: PUBLISHED Published: 2007-07-20T23:00:00 Last Updated: 2024-08-07T14:14:12.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Distributed Lock Manager (DLM) in the cluster manager for Linux kernel 2.6.15 allows remote attackers to cause a denial of service (loss of lock services) by connecting to the DLM port, which probably prevents other processes from accessing the service. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37109 - http://www.redhat.com/support/errata/RHSA-2007-0940.html - http://secunia.com/advisories/27322 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35516 - http://www.ubuntu.com/usn/
//secunia.com/advisories/27322 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35516 - http://www.ubuntu.com/usn/usn-489-2 - http://www.securityfocus.com/bid/24968 - http://www.ubuntu.com/usn/usn-489-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9337 - http://secunia.com/advisories/26139
CVE ID: CVE-2007-3381 State: PUBLISHED Published: 2007-08-07T10:00:00 Last Updated: 2024-08-07T14:14:12.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from the g_strsplit function, which allows local users to cause a denial of service (persistent daemon crash) via a crafted command to the daemon's socket, related to (1) gdm.c and (2) gdmconfig.c in daemon/, and (3) gdmconfig.c and (4) gdmflexiserver.c in gui/. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/gl
gdmflexiserver.c in gui/. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200709-11.xml - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.16/gdm-2.16.7.changes - http://secunia.com/advisories/26313 - http://www.vupen.com/english/advisories/2007/2781 - http://www.securityfocus.com/bid/25191 - http://secunia.com/advisories/26879 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10887 - https://issues.rpath.com/browse/RPL-1599 - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.14/gdm-2.14.13.news - http://secunia.com/advisories/26368 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:169 - http://ft
news - http://secunia.com/advisories/26368 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:169 - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.18/gdm-2.18.4.news - http://www.securityfocus.com/archive/1/475451/30/5550/threaded - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.19/gdm-2.19.5.news - http://www.redhat.com/support/errata/RHSA-2007-0777.html - http://www.securitytracker.com/id?1018523 - http://secunia.com/advisories/26900 - http://secunia.com/advisories/26520
CVE ID: CVE-2007-3382 State: PUBLISHED Published: 2007-08-14T22:00:00 Last Updated: 2024-08-07T14:14:12.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1453 - http://www.redhat.com/support/errata/RHSA-2007-0950.html - http://support.apple.com/kb/HT2163 - http://www.securityfocus.com/archi
.redhat.com/support/errata/RHSA-2007-0950.html - http://support.apple.com/kb/HT2163 - http://www.securityfocus.com/archive/1/476466/100/0/threaded - http://www.vupen.com/english/advisories/2008/1981/references - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html - http://secunia.com/advisories/27267 - http://secunia.com/advisories/29242 - http://www.vupen.com/english/advisories/2007/3527 - http://securitytracker.com/id?1018556 - http://secunia.com/advisories/26466 - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://secunia.com/advisories/33668 - http://www.vupen.c
opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://secunia.com/advisories/33668 - http://www.vupen.com/english/advisories/2007/2902 - http://www.securityfocus.com/archive/1/500396/100/0/threaded - http://secunia.com/advisories/26898 - http://secunia.com/advisories/28361 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55562 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554 - http://secunia.com/advisories/28317 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.vupen.com/english/advisories/2009/0233 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://tomcat.apache.
dvisories/2009/0233 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://tomcat.apache.org/security-6.html - http://www.redhat.com/support/errata/RHSA-2007-0871.html - http://www.vupen.com/english/advisories/2007/3386 - http://secunia.com/advisories/30802 - http://www.redhat.com/support/errata/RHSA-2008-0195.html - http://secunia.com/advisories/27037 - http://www.securityfocus.com/bid/25316 - http://www.kb.cert.org/vuls/id/993544 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://secunia.com/advisories/27727 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://www.securityfocus.co
s/27727 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://www.securityfocus.com/archive/1/476442/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://secunia.com/advisories/36486 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554 - http://www.debian.org/security/2008/dsa-1447 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11269 - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36006 - http:/
rj/portal/anonymous/phpsupcontent?contentID=197540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36006 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:241 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2007-3383 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:14:12.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the From field and possibly other fields, related to generation of error messages. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39000 - http://tomcat.apache.org/security-4.html - http://support.apple.com/kb/HT2163 - http://www.vupen.com/engl
db.org/39000 - http://tomcat.apache.org/security-4.html - http://support.apple.com/kb/HT2163 - http://www.vupen.com/english/advisories/2008/1981/references - http://www.securityfocus.com/archive/1/474413/100/0/threaded - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://secunia.com/advisories/30802 - http://www.kb.cert.org/vuls/id/862600 - http://securityreason.com/securityalert/2918 - http://www.securityfocus.com/bid/24999 - http://www.vupen.com/english/advisories/2007/2618 - http://seclists.org/fulldisclosure/2007/Jul/0448.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35536 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e
xchange.xforce.ibmcloud.com/vulnerabilities/35536 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2007-3384 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:14:12.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Value field, related to error messages. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-3.html - http://securityreason.com/securityalert/2971 - http://www.securityfocus.com/archive/1/475321/100/0/threaded - http://www.securityfocus.com/bid/25174 - http://securitytracker.com
.securityfocus.com/archive/1/475321/100/0/threaded - http://www.securityfocus.com/bid/25174 - http://securitytracker.com/id?1018503 - http://osvdb.org/39035
CVE ID: CVE-2007-3385 State: PUBLISHED Published: 2007-08-14T22:00:00 Last Updated: 2024-08-07T14:14:12.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1453 - http://www.redhat.com/support/errata/RHSA-2007-0950.html - http://support.apple.com/kb/HT2163 - http://www.vupen.com/eng
http://www.redhat.com/support/errata/RHSA-2007-0950.html - http://support.apple.com/kb/HT2163 - http://www.vupen.com/english/advisories/2008/1981/references - http://securityreason.com/securityalert/3011 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html - http://secunia.com/advisories/27267 - http://secunia.com/advisories/29242 - http://www.vupen.com/english/advisories/2007/3527 - http://secunia.com/advisories/26466 - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://secunia.com/advisories/33668 - http://www.vupen.com/english/advisories/2007/2902 - http://www.s
3/msg00001.html - http://secunia.com/advisories/33668 - http://www.vupen.com/english/advisories/2007/2902 - http://www.securityfocus.com/archive/1/500396/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35999 - http://secunia.com/advisories/26898 - http://secunia.com/advisories/28361 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55562 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554 - http://secunia.com/advisories/44183 - http://secunia.com/advisories/28317 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.vupen.com/english/advisories/2009/0233 - http://lists.opensuse.org/opensuse-security-a
8//Jun/msg00002.html - http://www.vupen.com/english/advisories/2009/0233 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://tomcat.apache.org/security-6.html - http://www.redhat.com/support/errata/RHSA-2007-0871.html - http://www.vupen.com/english/advisories/2007/3386 - http://secunia.com/advisories/30802 - http://www.redhat.com/support/errata/RHSA-2008-0195.html - http://secunia.com/advisories/27037 - http://securitytracker.com/id?1018557 - http://www.securityfocus.com/bid/25316 - http://www.kb.cert.org/vuls/id/993544 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://secunia.com/advisories/27727 - http://h20000.www
.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://secunia.com/advisories/27727 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://secunia.com/advisories/36486 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554 - http://www.debian.org/security/2008/dsa-1447 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9549 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 - http://www.securityfocus.com/archive/1
spx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 - http://www.securityfocus.com/archive/1/476444/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2007:241 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.a
org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2007-3386 State: PUBLISHED Published: 2007-08-14T22:00:00 Last Updated: 2024-08-07T14:14:13.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36417 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html - http://secunia.com/advisories/27267 - http://www.vupen.com/english/advisories/20
-announce/2007-November/msg00525.html - http://secunia.com/advisories/27267 - http://www.vupen.com/english/advisories/2007/3527 - http://jvn.jp/jp/JVN%2359851336/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36001 - http://www.securityfocus.com/bid/25314 - http://secunia.com/advisories/26465 - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://secunia.com/advisories/33668 - http://www.securityfocus.com/archive/1/500396/100/0/threaded - http://secunia.com/advisories/26898 - http://securitytracker.com/id?1018558 - http://securityreason.com/securityalert/3010 - http://www.vupen.com/english/advisories/2007/2880 - http://h20000.www2.hp.com/bizsupport/TechSup