Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
1.1.x before 1.1.2, (6) Balsa 2.3.16 and earlier, (7) Mailfilter before 0.8.2, and possibly other products. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25496 - http://secunia.com/advisories/25529 - http://sourceforge.net/forum/forum.php?forum_id=683706 - http://docs.info.apple.com/article.html?artnum=305530 - http://www.claws-mail.org/news.php - http://www.mandriva.com/security/advisories?name=MDKSA-2007:107 - http://www.trustix.org/errata/2007/0024/ - http://www.securityfocus.com/archive/1/464569/100/0/threaded - http://secunia.com/advisories/25894 - http://www.securityfocus.com/archive/1/471455/100/0/threaded - http://www.vupen.com/english
cunia.com/advisories/25894 - http://www.securityfocus.com/archive/1/471455/100/0/threaded - http://www.vupen.com/english/advisories/2007/1939 - http://secunia.com/advisories/26083 - http://www.vupen.com/english/advisories/2007/1468 - http://www.redhat.com/support/errata/RHSA-2009-1140.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 - http://www.securityfocus.com/archive/1/470172/100/200/threaded - http://secunia.com/advisories/26415 - http://fetchmail.berlios.de/fetchmail-SA-2007-01.txt - http://www.openwall.com/lists/oss-security/2009/08/18/1 - http://lists.apple.com/archives/security-announce/2007/May/msg00004.html - http://www.novell.com/linux/secur
9/08/18/1 - http://lists.apple.com/archives/security-announce/2007/May/msg00004.html - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://secunia.com/advisories/25402 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.securityfocus.com/archive/1/464477/30/0/threaded - http://www.novell.com/linux/security/advisories/2007_36_mozilla.html - http://security.gentoo.org/glsa/glsa-200706-06.xml - http://sylpheed.sraoss.jp/en/news.html - http://secunia.com/advisories/25534 - http://www.vupen.com/english/advisories/2007/1994 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857 - http://www
007/1994 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857 - http://www.securityfocus.com/bid/23257 - http://www.ubuntu.com/usn/usn-469-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:131 - http://www.debian.org/security/2007/dsa-1305 - https://issues.rpath.com/browse/RPL-1231 - http://www.vupen.com/english/advisories/2007/1467 - http://www.mozilla.org/security/announce/2007/mfsa2007-15.html - http://www.vupen.com/english/advisories/2007/2788 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 - https://issues.rpath.com/browse/RPL-1424 - http://secunia.com/advisories/25664 - http://www.mandriva.co
ctID=c00774579 - https://issues.rpath.com/browse/RPL-1424 - http://secunia.com/advisories/25664 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:119 - http://secunia.com/advisories/25546 - http://www.redhat.com/support/errata/RHSA-2007-0353.html - http://www.redhat.com/support/errata/RHSA-2007-0385.html - http://secunia.com/advisories/25858 - http://secunia.com/advisories/25798 - http://secunia.com/advisories/25353 - http://www.vupen.com/english/advisories/2008/0082 - http://www.openwall.com/lists/oss-security/2009/08/15/1 - http://www.redhat.com/support/errata/RHSA-2007-0401.html - http://www.trustix.org/errata/2007/0019/ - http://secunia.com/advisories/25476 - http://secunia.c
/RHSA-2007-0401.html - http://www.trustix.org/errata/2007/0019/ - http://secunia.com/advisories/25476 - http://secunia.com/advisories/35699 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:113 - http://mail.gnome.org/archives/balsa-list/2007-July/msg00000.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:105 - http://www.redhat.com/support/errata/RHSA-2007-0386.html - https://issues.rpath.com/browse/RPL-1232 - http://secunia.com/advisories/25750 - http://www.securityfocus.com/archive/1/471720/100/0/threaded - http://www.debian.org/security/2007/dsa-1300 - http://secunia.com/adviso
rityfocus.com/archive/1/471720/100/0/threaded - http://www.debian.org/security/2007/dsa-1300 - http://secunia.com/advisories/25559 - http://www.vupen.com/english/advisories/2007/1466 - http://www.securitytracker.com/id?1018008 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9782 - ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc - http://www.redhat.com/support/errata/RHSA-2007-0402.html - http://www.vupen.com/english/advisories/2007/1480 - http://www.ubuntu.com/usn/usn-520-1 - http://www.us-cert.gov/cas/techalerts/TA07-151A.html - http://www.redhat.com/support/errata/RHSA-2007-0344.html - http://www.securityfocus.com/archive/1/
erts/TA07-151A.html - http://www.redhat.com/support/errata/RHSA-2007-0344.html - http://www.securityfocus.com/archive/1/471842/100/0/threaded - http://balsa.gnome.org/download.html
CVE ID: CVE-2007-1559 State: PUBLISHED Published: 2007-04-11T22:00:00 Last Updated: 2024-08-07T12:59:08.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via (1) unspecified long property values to SonicMediaPlayer.dll or (2) long arguments to unspecified methods in SonicMediaPlayer.dll. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2007-46/advisory/ - http://osvdb.org/34779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33590 - http://www.securitytracker.com/id?1017906 - http://sec
79 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33590 - http://www.securitytracker.com/id?1017906 - http://secunia.com/advisories/22251 - http://www.securityfocus.com/bid/23412 - http://www.vupen.com/english/advisories/2007/1337
CVE ID: CVE-2007-1560 State: PUBLISHED Published: 2007-03-21T18:00:00 Last Updated: 2024-08-07T12:59:08.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200703-27.xml - http://www.vupen.com/english/advisories/2007/1035 - http://www.squid-cache.org/Versions/v2/2.6/changesets/11349.patch - http://secunia.com/advisories/24611 - http://www.novell.com/linux/security/a
rg/Versions/v2/2.6/changesets/11349.patch - http://secunia.com/advisories/24611 - http://www.novell.com/linux/security/advisories/2007_5_sr.html - http://www.securityfocus.com/bid/23085 - http://secunia.com/advisories/24625 - http://www.squid-cache.org/Advisories/SQUID-2007_1.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10291 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:068 - http://www.ubuntu.com/usn/usn-441-1 - http://www.securitytracker.com/id?1017805 - http://secunia.com/advisories/24662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33124 - http://secunia.com/advisories/24911 - http://www.redhat.com/support/errata/
.xforce.ibmcloud.com/vulnerabilities/33124 - http://secunia.com/advisories/24911 - http://www.redhat.com/support/errata/RHSA-2007-0131.html - http://secunia.com/advisories/24614
CVE ID: CVE-2007-1561 State: PUBLISHED Published: 2007-03-21T19:00:00 Last Updated: 2024-08-07T12:59:08.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP INVITE message with an SDP containing one valid and one invalid IP address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017794 - http://marc.info/?l=full-disclosure&m=117432783011737&w=2 - http://secunia.com/advisories/24564 - http://asterisk.org/node/48339 - http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - http:
s/24564 - http://asterisk.org/node/48339 - http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - http://www.securityfocus.com/archive/1/463434/100/0/threaded - http://www.securityfocus.com/bid/23031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33068 - http://security.gentoo.org/glsa/glsa-200704-01.xml - http://secunia.com/advisories/25582 - http://secunia.com/advisories/24719 - http://www.sineapps.com/news.php?rssid=1707 - http://www.vupen.com/english/advisories/2007/1039 - http://www.debian.org/security/2007/dsa-1358 - http://www.osvdb.org/34479 - http://voipsa.org/pipermail/voipsec_voipsa.org/2007-March/002275.html
CVE ID: CVE-2007-1562 State: PUBLISHED Published: 2007-03-21T19:00:00 Last Updated: 2024-08-07T12:59:08.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-443-1 - http://www.securityfocus.com/archive/1/470172/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33119 - http://h2000
yfocus.com/archive/1/470172/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33119 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.securitytracker.com/id?1017800 - http://www.novell.com/linux/security/advisories/2007_36_mozilla.html - http://www.redhat.com/support/errata/RHSA-2007-0400.html - http://www.securityfocus.com/archive/1/463501/100/0/threaded - http://www.vupen.com/english/advisories/2007/1034 - http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf - http://www.securityfocus.com/bid/23082 - https://issues.rpath.com/browse/RPL-1424 - http://secunia.com/advisories/25858 - http://secunia.com/advisori
bid/23082 - https://issues.rpath.com/browse/RPL-1424 - http://secunia.com/advisories/25858 - http://secunia.com/advisories/25476 - http://www.mozilla.org/security/announce/2007/mfsa2007-11.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11431 - https://bugzilla.mozilla.org/show_bug.cgi?id=370559 - http://secunia.com/advisories/25490 - http://www.redhat.com/support/errata/RHSA-2007-0402.html - https://issues.rpath.com/browse/RPL-1157 - http://www.openwall.com/lists/oss-security/2020/12/09/1
CVE ID: CVE-2007-1563 State: PUBLISHED Published: 2007-03-21T19:00:00 Last Updated: 2024-08-07T12:59:08.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response. Additional Analyst Notes: - CVE Program Container: References: - http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf - http://www.vupen.com/english/advisories/2007/1075 - http://secunia.com/advisories/25027 - http://www.novell.com/linux/securi
://www.vupen.com/english/advisories/2007/1075 - http://secunia.com/advisories/25027 - http://www.novell.com/linux/security/advisories/2007_28_opera.html - http://www.securityfocus.com/bid/23089 - http://www.securitytracker.com/id?1017802
CVE ID: CVE-2007-1564 State: PUBLISHED Published: 2007-03-21T19:00:00 Last Updated: 2024-08-07T12:59:08.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0909.html - https://issues.rpath.com/browse/RPL-1201 - http://secunia.com/advisories/24889 - http://www.ubuntu.com/usn/usn-447-1 - https://oval.cisecurity.org/repository/
01 - http://secunia.com/advisories/24889 - http://www.ubuntu.com/usn/usn-447-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10646 - http://www.novell.com/linux/security/advisories/2007_6_sr.html - http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf - http://www.kde.org/info/security/advisory-20070326-1.txt - http://secunia.com/advisories/27108 - http://securitytracker.com/id?1017801 - http://www.securityfocus.com/bid/23091 - http://www.vupen.com/english/advisories/2007/1076 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:072
CVE ID: CVE-2007-1565 State: PUBLISHED Published: 2007-03-21T19:00:00Z Last Updated: 2024-09-16T19:25:44.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Konqueror 3.5.5 allows remote attackers to cause a denial of service (crash) by using JavaScript to read a child iframe having an ftp:// URI. Additional Analyst Notes: - CVE Program Container: References: - http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf
CVE ID: CVE-2007-1566 State: PUBLISHED Published: 2007-03-21T19:00:00 Last Updated: 2024-08-07T12:59:08.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in News/page.asp in NetVIOS Portal allows remote attackers to execute arbitrary SQL commands via the NewsID parameter. NOTE: this issue might be the same as CVE-2006-5954. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33072 - http://www.securityfocus.com/bid/23045 - https://www.exploit-db.com/exploits/3520
CVE ID: CVE-2007-1567 State: PUBLISHED Published: 2007-03-21T21:00:00 Last Updated: 2024-08-07T12:59:08.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors, as demonstrated by warftp_165.tar by Immunity. NOTE: this might be the same issue as CVE-1999-0256, CVE-2000-0131, or CVE-2006-2171, but due to Immunity's lack of details, this cannot be certain. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22944 - http://secunia.com/advisories/24494 - https://www.im
m Container: References: - http://www.securityfocus.com/bid/22944 - http://secunia.com/advisories/24494 - https://www.immunityinc.com/downloads/immpartners/warftp_165.tar - http://www.vupen.com/english/advisories/2007/0933
CVE ID: CVE-2007-1568 State: PUBLISHED Published: 2007-03-21T21:00:00 Last Updated: 2024-08-07T12:59:08.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in DaanSystems NewsReactor 20070220.21 allows remote attackers to execute arbitrary code via a yEnc (yEncode) encoded article with a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24487 - http://osvdb.org/34035 - http://www.vupen.com/english/advisories/2007/0934 - https://www.exploit-db.com/exploits/3462 - https://www.exploit-db.com/exploits/3463
CVE ID: CVE-2007-1569 State: PUBLISHED Published: 2007-03-21T21:00:00 Last Updated: 2024-08-07T12:59:08.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in NewsBin Pro 4.32 allows remote attackers to cause a denial of service or execute arbitrary code via a yEnc (yEncode) encoded article with a long filename, as demonstrated using a .nzb file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24491 - http://www.securityfocus.com/bid/22940 - http://osvdb.org/34003 - http://www.vupen.com/english/advisories/2007/0935 - https://www.exploit
tyfocus.com/bid/22940 - http://osvdb.org/34003 - http://www.vupen.com/english/advisories/2007/0935 - https://www.exploit-db.com/exploits/3464
CVE ID: CVE-2007-1570 State: REJECTED Published: 2007-03-21T21:00:00 Last Updated: 2007-04-18T09:00:00 Description: No description available.
CVE ID: CVE-2007-1571 State: PUBLISHED Published: 2007-03-21T21:00:00 Last Updated: 2024-08-07T12:59:08.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platform (AMP) 3.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462805/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33009 - http://www.vupen.com/english/advisories/2007/0939 - http://advisories.echo.or.id/adv/adv71-th
om/vulnerabilities/33009 - http://www.vupen.com/english/advisories/2007/0939 - http://advisories.echo.or.id/adv/adv71-theday-2007.txt - https://www.exploit-db.com/exploits/3471
CVE ID: CVE-2007-1572 State: PUBLISHED Published: 2007-03-21T21:00:00 Last Updated: 2024-08-07T12:59:08.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter, a different vector than CVE-2007-1440. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0940
CVE ID: CVE-2007-1573 State: PUBLISHED Published: 2007-03-21T21:00:00 Last Updated: 2024-08-07T12:59:09.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin 3.6.5 allows remote authenticated administrators to execute arbitrary SQL commands via the "Attached Before" field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462963/100/0/threaded - http://secunia.com/advisories/24503 - http://www.vbulletin.com/forum/project.php?issueid=21615 - http://osvdb.org/34070
CVE ID: CVE-2007-1574 State: PUBLISHED Published: 2007-03-21T21:00:00 Last Updated: 2024-08-07T12:59:08.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: CARE2X 2.2, and possibly earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24481 - http://osvdb.org/34044
CVE ID: CVE-2007-1575 State: PUBLISHED Published: 2007-03-21T21:00:00 Last Updated: 2024-08-07T12:59:08.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via (1) unspecified vectors to the (a) calendar and (2) search modules, and an (2) unspecified cookie when the user logs out. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462789/100/0/threaded - http://www.securityfocus.com/bid/22955 - http://secunia.com/advisories/24509 - http://www.phprojekt.com/index.php?nam
- http://www.securityfocus.com/bid/22955 - http://secunia.com/advisories/24509 - http://www.phprojekt.com/index.php?name=News&file=article&sid=276 - http://www.nruns.com/security_advisory_phprojekt_sql_injection.php - http://security.gentoo.org/glsa/glsa-200706-07.xml - http://securityreason.com/securityalert/2466 - http://secunia.com/advisories/25748
CVE ID: CVE-2007-1576 State: PUBLISHED Published: 2007-03-21T21:00:00 Last Updated: 2024-08-07T12:59:08.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the (1) Projects, (2) Contacts, (3) Helpdesk, (4) Search (only Gecko engine driven Browsers), and (5) Notes modules; the (6) Mail summary page; and unspecified other files. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34064 - http://osvdb.org/34068 - http://www.securityfocus.com/archive/1
rogram Container: References: - http://osvdb.org/34064 - http://osvdb.org/34068 - http://www.securityfocus.com/archive/1/462788/100/0/threaded - http://osvdb.org/34065 - http://osvdb.org/34066 - http://osvdb.org/34067 - http://osvdb.org/34069 - http://secunia.com/advisories/24509 - http://www.securityfocus.com/bid/22957 - http://www.phprojekt.com/index.php?name=News&file=article&sid=276 - http://security.gentoo.org/glsa/glsa-200706-07.xml - http://www.nruns.de/security_advisory_phprojekt_xss_and_filter_evasion.php - http://securityreason.com/securityalert/2459 - http://secunia.com/advisories/25748
CVE ID: CVE-2007-1577 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[tplname] parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33089 - http://www.osvdb.org/33776 - http://www.securityfocus.com/bid/
ps://exchange.xforce.ibmcloud.com/vulnerabilities/33089 - http://www.osvdb.org/33776 - http://www.securityfocus.com/bid/23052
CVE ID: CVE-2007-1578 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33120 - http://www.digit-labs.org/files/exploits/mercur-v1.pl - https://www.exploit-db.com/exploits/3527 - http://www.vupen.com/english/advisories/2007/1053 - http://securit
ur-v1.pl - https://www.exploit-db.com/exploits/3527 - http://www.vupen.com/english/advisories/2007/1053 - http://securitytracker.com/id?1017798 - http://www.osvdb.org/33545 - http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0280.html - http://www.securityfocus.com/bid/23058 - http://secunia.com/advisories/24596
CVE ID: CVE-2007-1579 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSCRIBE command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1092 - http://www.securityfocus.com/bid/23050 - https://www.immunityinc.com/downloads/immpartners/MercurImapSubscribe.tar - http://secunia.com/advisories/24619 - http://www.immunitysec.com/partners-index.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/33216 - https://www.exp