Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tion/oval%3Aorg.mitre.oval%3Adef%3A1680 - http://www.vupen.com/english/advisories/2007/2077 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102903-1 - http://www.securitytracker.com/id?1018206 - http://osvdb.org/36590 - http://www.securityfocus.com/bid/24327 - http://secunia.com/advisories/25566
CVE ID: CVE-2007-3094 State: PUBLISHED Published: 2007-06-06T21:00:00 Last Updated: 2024-08-07T14:05:28.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to execute arbitrary code via unspecified vectors, related to the WBEM server. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36591 - http://www.vupen.com/english/advisories/2007/2076 - http://www.securitytracker.com/id?1018205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34735 - http://sunsolve.sun.com/search/doc
tracker.com/id?1018205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34735 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102902-1 - http://www.securityfocus.com/bid/24326 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1341
CVE ID: CVE-2007-3095 State: PUBLISHED Published: 2007-06-06T22:00:00 Last Updated: 2024-08-07T14:05:29.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36107 - http://www.securityfocus.com/bid/24325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34895 - http://www.symant
http://www.securityfocus.com/bid/24325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34895 - http://www.symantec.com/avcenter/security/Content/2007.06.05.html - http://www.securitytracker.com/id?1018196 - http://www.vupen.com/english/advisories/2007/2074 - http://secunia.com/advisories/25543
CVE ID: CVE-2007-3096 State: PUBLISHED Published: 2007-06-06T22:00:00 Last Updated: 2024-08-07T14:05:28.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in login.php in PBLang (PBL) 4.67.16.a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4036 - http://secunia.com/advisories/25572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34751 - http://www.securityfocus.com/bid/24340 - http://osvdb.org/36985 - http://www.vupen.com/englis
om/vulnerabilities/34751 - http://www.securityfocus.com/bid/24340 - http://osvdb.org/36985 - http://www.vupen.com/english/advisories/2007/2093
CVE ID: CVE-2007-3097 State: PUBLISHED Published: 2007-06-06T22:00:00 Last Updated: 2024-08-07T14:05:29.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: my.activation.php3 in F5 FirePass 4100 SSL VPN allows remote attackers to execute arbitrary shell commands via shell metacharacters in the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018190 - http://secunia.com/advisories/25563 - http://www.s21sec.com/avisos/s21sec-035-en.txt - http://www.securityfocus.com/archive/1/470444/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34708 - http://www.vupen.com/english/advisories/2007/2073 - h
ded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34708 - http://www.vupen.com/english/advisories/2007/2073 - http://www.securityfocus.com/bid/24306 - http://www.osvdb.org/35246
CVE ID: CVE-2007-3098 State: PUBLISHED Published: 2007-06-06T22:00:00 Last Updated: 2024-08-07T14:05:29.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMPc Server (crserv.exe) process in Castle Rock Computing SNMPc before 7.0.19 allows remote attackers to cause a denial of service (crash) via a crafted packet to port 165/TCP. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34725 - http://osvdb.org/36916 - http://secunia.com/advisories/25485 - https://www.exploit-db.com/exploits/4033
CVE ID: CVE-2007-3099 State: PUBLISHED Published: 2007-06-14T19:00:00 Last Updated: 2024-08-07T14:05:29.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss). Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=243719 - http://secunia.com/advisories/25679 - http://www.securityfocus.com/bid/24471 - https://oval.cisecurity.or
gi?id=243719 - http://secunia.com/advisories/25679 - http://www.securityfocus.com/bid/24471 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11595 - http://www.securitytracker.com/id?1018246 - http://osvdb.org/37269 - http://support.novell.com/techcenter/psdb/187174044e1dbe78726bcf840f7530ed.html - http://secunia.com/advisories/26438 - http://www.novell.com/linux/security/advisories/2007_17_sr.html - http://secunia.com/advisories/26543 - http://secunia.com/advisories/25749 - http://svn.berlios.de/viewcvs/open-iscsi?rev=857&view=rev - http://www.debian.org/security/2007/dsa-1314 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34944 - http://www.r
http://www.debian.org/security/2007/dsa-1314 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34944 - http://www.redhat.com/support/errata/RHSA-2007-0497.html
CVE ID: CVE-2007-3100 State: PUBLISHED Published: 2007-06-14T19:00:00 Last Updated: 2024-08-07T14:05:29.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users to cause a denial of service (hang) by grabbing the semaphore. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=243719 - http://secunia.com/advisories/25679 - http://osvdb.org/37270 - http://www.securityfocus.com/bid/24471 - https://exchange.xf
p://secunia.com/advisories/25679 - http://osvdb.org/37270 - http://www.securityfocus.com/bid/24471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34943 - http://www.securitytracker.com/id?1018246 - http://support.novell.com/techcenter/psdb/187174044e1dbe78726bcf840f7530ed.html - http://secunia.com/advisories/26438 - http://www.novell.com/linux/security/advisories/2007_17_sr.html - http://secunia.com/advisories/26543 - http://secunia.com/advisories/25749 - http://svn.berlios.de/viewcvs/open-iscsi?rev=858&view=rev - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10653 - http://www.debian.org/security/2007/dsa-1314 - http://www.redhat.com/support/
tion/oval%3Aorg.mitre.oval%3Adef%3A10653 - http://www.debian.org/security/2007/dsa-1314 - http://www.redhat.com/support/errata/RHSA-2007-0497.html
CVE ID: CVE-2007-3101 State: PUBLISHED Published: 2007-06-18T10:00:00 Last Updated: 2024-08-07T14:05:28.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attackers to inject arbitrary web script via the autoscroll parameter, which is injected into Javascript that is sent to the client. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25618 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34872 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=544 - http://osvdb.org/36377 - ht
abilities/34872 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=544 - http://osvdb.org/36377 - http://www.securityfocus.com/bid/24480 - http://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12312536&styleName=Text&projectId=12310272 - http://www.vupen.com/english/advisories/2007/2212
CVE ID: CVE-2007-3102 State: PUBLISHED Published: 2007-10-18T20:00:00 Last Updated: 2024-08-07T14:05:29.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28319 - http://www.redhat.com/support/errata/RHSA-2007-0555.html - https://www.redhat.com/archives/fedora-package-announce/2007-Octobe
/www.redhat.com/support/errata/RHSA-2007-0555.html - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00214.html - http://secunia.com/advisories/27588 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11124 - http://support.avaya.com/elmodocs2/security/ASA-2007-527.htm - http://osvdb.org/39214 - http://www.redhat.com/support/errata/RHSA-2007-0737.html - https://bugzilla.redhat.com/show_bug.cgi?id=248059 - http://secunia.com/advisories/27235 - http://www.redhat.com/support/errata/RHSA-2007-0703.html - http://secunia.com/advisories/28320 - http://www.redhat.com/support/errata/RHSA-2007-0540.html - http://secunia.com/advisories/27590
ia.com/advisories/28320 - http://www.redhat.com/support/errata/RHSA-2007-0540.html - http://secunia.com/advisories/27590 - http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm - http://www.securityfocus.com/bid/26097
CVE ID: CVE-2007-3103 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T14:05:29.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10802 - http://secunia.com/advisories/35674 - http://www.securityfocus.com/bid/24888 - http://www.redhat.com/support/errata/RHSA-2007-0520.html - http://secunia.com/adv
tp://www.securityfocus.com/bid/24888 - http://www.redhat.com/support/errata/RHSA-2007-0520.html - http://secunia.com/advisories/26081 - http://www.debian.org/security/2007/dsa-1342 - https://issues.rpath.com/browse/RPL-1485 - http://secunia.com/advisories/27240 - http://secunia.com/advisories/26056 - http://www.securityfocus.com/archive/1/473869/100/0/threaded - https://www.exploit-db.com/exploits/5167 - http://www.securitytracker.com/id?1018375 - http://security.gentoo.org/glsa/glsa-200710-11.xml - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00095.html - http://bugzilla.redhat.com/242903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35375 - http://labs.idef
html - http://bugzilla.redhat.com/242903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35375 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=557 - http://secunia.com/advisories/26282 - http://www.redhat.com/support/errata/RHSA-2007-0519.html - http://osvdb.org/40945 - http://bugs.gentoo.org/show_bug.cgi?id=185660 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00096.html
CVE ID: CVE-2007-3104 State: PUBLISHED Published: 2007-06-26T18:00:00 Last Updated: 2024-08-07T14:05:29.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sysfs_readdir function in the Linux kernel 2.6, as used in Red Hat Enterprise Linux (RHEL) 4.5 and other distributions, allows users to cause a denial of service (kernel OOPS) by dereferencing a null pointer to an inode in a dentry. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018289 - http://secunia.com/advisories/26643 - http://secunia.com/advisories/28643 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11233 - http://secunia.
s/28643 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11233 - http://secunia.com/advisories/26651 - http://secunia.com/advisories/26289 - http://secunia.com/advisories/25838 - http://www.ubuntu.com/usn/usn-510-1 - http://www.ubuntu.com/usn/usn-509-1 - http://www.securityfocus.com/bid/24631 - http://www.debian.org/security/2007/dsa-1428 - http://secunia.com/advisories/27912 - http://secunia.com/advisories/25771 - http://secunia.com/advisories/28033 - http://osvdb.org/37115 - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html - http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm - http://bugzilla.redhat.com/bugzilla/sh
12/msg00001.html - http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=242558 - http://www.redhat.com/support/errata/RHSA-2008-0089.html - http://www.ubuntu.com/usn/usn-508-1 - http://rhn.redhat.com/errata/RHSA-2007-0488.html
CVE ID: CVE-2007-3105 State: PUBLISHED Published: 2007-07-27T21:00:00 Last Updated: 2024-08-07T14:05:29.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wakeup threshold to a value greater than the output pool size, which triggers writing random numbers to the stack by the pool transfer function involving "bound check ordering". NOTE: this issue might only cross privilege boundaries in environments that have granular assignment of privileges for root. Additional Anal
ht only cross privilege boundaries in environments that have granular assignment of privileges for root. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0940.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10371 - http://secunia.com/advisories/27747 - http://secunia.com/advisories/27212 - http://secunia.com/advisories/27227 - http://secunia.com/advisories/26664 - http://secunia.com/advisories/26643 - http://www.novell.com/linux/security/advisories/2007_51_kernel.html - http://www.novell.com/linux/security/advisories/2007_53_kernel.html - http://secunia.com/advisories/27322 - http://w
l - http://www.novell.com/linux/security/advisories/2007_53_kernel.html - http://secunia.com/advisories/27322 - http://www.debian.org/security/2007/dsa-1363 - http://secunia.com/advisories/26651 - https://issues.rpath.com/browse/RPL-1650 - http://www.redhat.com/support/errata/RHSA-2007-0939.html - http://www.ubuntu.com/usn/usn-510-1 - http://www.debian.org/security/2008/dsa-1504 - http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm - http://www.securityfocus.com/bid/25348 - http://www.ubuntu.com/usn/usn-509-1 - http://secunia.com/advisories/26647 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:216 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 - http
iva.com/security/advisories?name=MDKSA-2007:216 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 - http://secunia.com/advisories/29058 - http://secunia.com/advisories/26500 - http://www.ubuntu.com/usn/usn-508-1 - http://secunia.com/advisories/27436 - http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.22-git14.log - http://www.mandriva.com/security/advisories?name=MDKSA-2007:195
CVE ID: CVE-2007-3106 State: PUBLISHED Published: 2007-07-26T21:00:00 Last Updated: 2024-08-07T14:05:29.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via invalid (1) blocksize_0 and (2) blocksize_1 values, which trigger a "heap overwrite" in the _01inverse function in res0.c. NOTE: this issue has been RECAST so that CVE-2007-4029 handles additional vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.isecpartners.com/advisories/2007-003-libvorbis.txt - https://issues.rpath
VE Program Container: References: - http://www.isecpartners.com/advisories/2007-003-libvorbis.txt - https://issues.rpath.com/browse/RPL-1590 - http://www.ubuntu.com/usn/usn-498-1 - http://www.vupen.com/english/advisories/2007/2760 - http://secunia.com/advisories/26299 - https://bugzilla.redhat.com/show_bug.cgi?id=249780 - http://secunia.com/advisories/28614 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11449 - http://www.debian.org/security/2008/dsa-1471 - http://secunia.com/advisories/26429 - https://bugzilla.redhat.com/show_bug.cgi?id=245991 - http://www.redhat.com/support/errata/RHSA-2007-0912.html - http://security.gentoo.org/glsa/glsa-200710-03
gi?id=245991 - http://www.redhat.com/support/errata/RHSA-2007-0912.html - http://security.gentoo.org/glsa/glsa-200710-03.xml - https://trac.xiph.org/changeset/13160 - http://secunia.com/advisories/26087 - http://www.securityfocus.com/bid/25082 - http://www.securityfocus.com/archive/1/474729/100/0/threaded - http://www.tellini.org/blog/archives/32-Music-Box-1.6.html - http://secunia.com/advisories/24923 - http://secunia.com/advisories/26535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35622 - http://www.vupen.com/english/advisories/2007/2698 - http://secunia.com/advisories/27099 - http://secunia.com/advisories/26232 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:167-1
visories/27099 - http://secunia.com/advisories/26232 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:167-1 - http://secunia.com/advisories/26865 - http://www.redhat.com/support/errata/RHSA-2007-0845.html
CVE ID: CVE-2007-3107 State: PUBLISHED Published: 2007-07-10T22:00:00 Last Updated: 2024-08-07T14:05:29.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0595.html - http://secunia.com/advisories/25955 - http://secunia.com/advisories/27227 - http://secunia.com/advisories/26664 - http://www.novell.com
com/advisories/25955 - http://secunia.com/advisories/27227 - http://secunia.com/advisories/26664 - http://www.novell.com/linux/security/advisories/2007_51_kernel.html - http://www.novell.com/linux/security/advisories/2007_53_kernel.html - http://osvdb.org/37118 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9936 - http://secunia.com/advisories/28706 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245580 - http://www.securityfocus.com/bid/24845 - http://www.securitytracker.com/id?1018347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35383 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 - http://www.ubuntu.com/usn/usn-574-1 -
ulnerabilities/35383 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 - http://www.ubuntu.com/usn/usn-574-1 - http://secunia.com/advisories/25963
CVE ID: CVE-2007-3108 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:05:28.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys. Additional Analyst Notes: - CVE Program Container: References: - http://support.attachmate.com/techdocs/2374.html - http://www.kb.cert.org/vuls/id/RGII-74KLP3 - http://www.kb.cert.org/vuls/id/724968 - http://secunia.com/advisories/26893 - http://www.debian.org/security/2008/dsa-1571 - http://secunia
org/vuls/id/724968 - http://secunia.com/advisories/26893 - http://www.debian.org/security/2008/dsa-1571 - http://secunia.com/advisories/27205 - http://www.securityfocus.com/archive/1/476341/100/0/threaded - http://secunia.com/advisories/27097 - http://www.vupen.com/english/advisories/2008/2362 - http://www.vupen.com/english/advisories/2007/2759 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9984 - http://secunia.com/advisories/31489 - http://www.redhat.com/support/errata/RHSA-2007-1003.html - http://secunia.com/advisories/31531 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:193 - http://www.bluecoat.com/support/securityadvisories/advis
tp://www.mandriva.com/security/advisories?name=MDKSA-2007:193 - http://www.bluecoat.com/support/securityadvisories/advisory_openssl_rsa_key_reconstruction_vulnerability - http://secunia.com/advisories/30220 - https://issues.rpath.com/browse/RPL-1633 - http://www.vupen.com/english/advisories/2007/4010 - http://www.securityfocus.com/archive/1/485936/100/0/threaded - http://secunia.com/advisories/27770 - http://lists.vmware.com/pipermail/security-announce/2008/000002.html - http://secunia.com/advisories/26411 - https://usn.ubuntu.com/522-1/ - http://openssl.org/news/patch-CVE-2007-3108.txt - http://www.vupen.com/english/advisories/2008/2361 - http://secunia.com/advisories/31467 - http://www.red
2007-3108.txt - http://www.vupen.com/english/advisories/2008/2361 - http://secunia.com/advisories/31467 - http://www.redhat.com/support/errata/RHSA-2007-0964.html - http://secunia.com/advisories/27870 - http://www.vupen.com/english/advisories/2008/2396 - http://secunia.com/advisories/27330 - http://secunia.com/advisories/30161 - http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml - http://www.vmware.com/security/advisories/VMSA-2008-0013.html - http://secunia.com/advisories/28368 - http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm - http://secunia.com/advisories/27078 - http://security.gentoo.org/glsa/glsa-200710-06.xml - http://cvs.openssl.org/chngview?cn=16275 - https://is
ories/27078 - http://security.gentoo.org/glsa/glsa-200710-06.xml - http://cvs.openssl.org/chngview?cn=16275 - https://issues.rpath.com/browse/RPL-1613 - http://www.redhat.com/support/errata/RHSA-2007-0813.html - http://www.securityfocus.com/bid/25163 - http://www.vmware.com/security/advisories/VMSA-2008-0001.html - http://www.vupen.com/english/advisories/2008/0064 - http://secunia.com/advisories/27021 - http://www.securityfocus.com/archive/1/486859/100/0/threaded
CVE ID: CVE-2007-3109 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:28.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial contents, of arbitrary files under the web root via a relative pathname in the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/470458/100/0/threaded - http://osvdb.org/42058 - http://securityreason.com/securityalert/2784