Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6059 State: PUBLISHED Published: 2007-11-20T20:00:00 Last Updated: 2024-08-07T15:54:26.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as username and password, and the domain portion of this address yields a Java UnknownHostException error, which allows remote attackers to cause a denial of service (connection pool exhaustion) via a large number of requests, resulting in a SQLNestedException. NOTE: Sun disputes this issue, stating "The report makes references to source code and files that do not exist in the mentioned products. Additional Analyst
g "The report makes references to source code and files that do not exist in the mentioned products. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45299 - http://archives.neohapsis.com/archives/bugtraq/2007-11/0239.html
CVE ID: CVE-2007-6060 State: PUBLISHED Published: 2007-11-20T20:00:00 Last Updated: 2024-08-07T15:54:26.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: AhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a filename string at a location indicated by the "Filename length" field in a ZIP header, which allows remote attackers to cause a denial of service (machine crash) and possibly execute arbitrary code via a ZIP file in which this field's value is larger than the actual number of bytes in the filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018977 - http://secunia.com/advisories/27757 - https://exchang
ntainer: References: - http://www.securitytracker.com/id?1018977 - http://secunia.com/advisories/27757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38514 - http://secway.org/advisory/AD20071116.txt - http://global.ahnlab.com/global/notice_view.ESD?fmethod=view&press_seq=803&printNum=2 - http://www.securityfocus.com/bid/26473 - http://osvdb.org/42352 - http://www.securityfocus.com/archive/1/483799/100/0/threaded - http://securityreason.com/securityalert/3382 - http://www.vupen.com/english/advisories/2007/3983
CVE ID: CVE-2007-6061 State: PUBLISHED Published: 2007-11-20T23:00:00 Last Updated: 2024-08-07T15:54:26.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29206 - http://www.securityfocus.com/bid/26608 - http://www.vupen.com/english/advisorie
- http://secunia.com/advisories/29206 - http://www.securityfocus.com/bid/26608 - http://www.vupen.com/english/advisories/2007/4025 - http://bugs.gentoo.org/show_bug.cgi?id=199751 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00087.html - http://security.gentoo.org/glsa/glsa-200803-03.xml - http://secunia.com/advisories/27841 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00075.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:074 - http://secunia.com/advisories/30191
CVE ID: CVE-2007-6062 State: PUBLISHED Published: 2007-11-20T23:00:00 Last Updated: 2024-08-07T15:54:26.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service (crash) via a JOIN command without a channel argument. Additional Analyst Notes: - CVE Program Container: References: - http://ngircd.barton.de/doc/ChangeLog - http://www.securityfocus.com/bid/26489 - http://osvdb.org/39295 - http://arthur.barton.de/pipermail/ngircd-ml/2007-July/000292.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=10%3Bfilename=90-remote-vulnerability.dpatch%3Batt=1%3Bbug=451875 - http://bugs.debian.org/cgi-bin
bin/bugreport.cgi?msg=10%3Bfilename=90-remote-vulnerability.dpatch%3Batt=1%3Bbug=451875 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=451875 - http://secunia.com/advisories/27692
CVE ID: CVE-2007-6063 State: PUBLISHED Published: 2007-11-21T00:00:00 Last Updated: 2024-08-07T15:54:26.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.kernel.org/show_bug.cgi?id=9416 - http://secunia.com/advisories/28806 - http://www.securityfocus.com/bid/26605 - http://www.redhat.com/support/errata/RHSA-2008-0154.html - http://www.debian.org/security/2007/dsa-1436 - http://www.vupen.com/english/advisories/2007/4046 -
RHSA-2008-0154.html - http://www.debian.org/security/2007/dsa-1436 - http://www.vupen.com/english/advisories/2007/4046 - http://secunia.com/advisories/28141 - http://secunia.com/advisories/28706 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 - http://www.debian.org/security/2008/dsa-1504 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:008 - http://secunia.com/advisories/27912 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9846 - http://secunia.com/advisories/33280 - http://secunia.com/advisories/29236 - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html - http://lists.opensuse.org/opensuse-secu
6 - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html - http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/27842 - http://secunia.com/advisories/28748 - http://www.ubuntu.com/usn/usn-574-1 - http://secunia.com/advisories/29058 - http://www.redhat.com/support/errata/RHSA-2008-0973.html - http://secunia.com/advisories/28971 - http://www.redhat.com/support/errata/RHSA-2008-0787.html - http://www.ubuntu.com/usn/usn-578-1 - http://rhn.redhat.com/errata/RHSA-2008-0055.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6514 - http
RHSA-2008-0055.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6514 - http://secunia.com/advisories/33201
CVE ID: CVE-2007-6067 State: PUBLISHED Published: 2008-01-09T21:00:00 Last Updated: 2024-08-07T15:54:26.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:004 - http://www.debian.org/security/2008/dsa-1460 - http://
http://www.mandriva.com/security/advisories?name=MDVSA-2008:004 - http://www.debian.org/security/2008/dsa-1460 - http://rhn.redhat.com/errata/RHSA-2013-0122.html - http://www.securityfocus.com/bid/27163 - https://issues.rpath.com/browse/RPL-1768 - http://www.redhat.com/support/errata/RHSA-2008-0038.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39498 - http://secunia.com/advisories/28454 - http://www.securityfocus.com/archive/1/485864/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10235 - http://secunia.com/advisories/28359 - http://www.postgresql.org/about/news.905 - http://lists.opensuse.org/opensuse-security-announce/20
om/advisories/28359 - http://www.postgresql.org/about/news.905 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html - http://www.vupen.com/english/advisories/2008/0061 - http://secunia.com/advisories/28679 - http://www.vupen.com/english/advisories/2008/0109 - http://secunia.com/advisories/28376 - http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1 - http://secunia.com/advisories/28437 - http://secunia.com/advisories/28455 - http://secunia.com/advisories/28477 - http://secunia.com/advisories/29638 - http://secunia.com/advisories/28479 - http://sourceforge.net/pro
dvisories/28477 - http://secunia.com/advisories/29638 - http://secunia.com/advisories/28479 - http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894 - http://www.debian.org/security/2008/dsa-1463 - http://www.redhat.com/support/errata/RHSA-2008-0040.html - http://www.securityfocus.com/archive/1/486407/100/0/threaded - http://secunia.com/advisories/28464 - http://secunia.com/advisories/28698 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1 - https://usn.ubuntu.com/568-1/ - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html - http://secuni
n.ubuntu.com/568-1/ - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html - http://secunia.com/advisories/28438 - http://securitytracker.com/id?1019157 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154 - http://security.gentoo.org/glsa/glsa-200801-15.xml - http://www.vupen.com/english/advisories/2008/1071/references
CVE ID: CVE-2007-6070 State: REJECTED Published: 2020-01-17T18:22:04 Last Updated: 2020-01-17T18:22:04 Description: No description available.
CVE ID: CVE-2007-6077 State: PUBLISHED Published: 2007-11-21T21:00:00 Last Updated: 2024-08-07T15:54:26.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session fixation protection mechanism in cgi_process.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookie_only attribute from the DEFAULT_SESSION_OPTIONS constant, which effectively causes cookie_only to be applied only to the first instantiation of CgiRequest, which allows remote attackers to conduct session fixation attacks. NOTE: this is due to an incomplete fix for CVE-2007-5380. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4238 - http://www.u
l Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4238 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://secunia.com/advisories/28136 - http://secunia.com/advisories/27781 - http://dev.rubyonrails.org/changeset/8177 - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://www.securityfocus.com/bid/26598 - http://docs.info.apple.com/article.html?artnum=307179 - http://dev.rubyonrails.org/ticket/10048 - http://www.vupen.com/english/advisories/2007/4009 - http://weblog.rubyonrails.org/2007/11/24/ruby-on-rails-1-2-6-security-and-maintenance-release
CVE ID: CVE-2007-6078 State: PUBLISHED Published: 2007-11-21T22:00:00 Last Updated: 2024-08-07T15:54:26.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) nc_top.asp; (2) inc_bookmarks.asp, possibly involving a parameter passed from cp_main.asp; (3) inc_profile_functions.asp; or (4) inc_SUBSCRIPTIONS.asp; or the (5) Avatar_URL, (6) LINK1, or (7) LINK2 parameter to cp_main.asp in an EditIt action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38595 - https://www.ex
otes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38595 - https://www.exploit-db.com/exploits/4638 - http://www.kb.cert.org/vuls/id/315107 - http://www.securityfocus.com/bid/26504
CVE ID: CVE-2007-6079 State: PUBLISHED Published: 2007-11-21T22:00:00 Last Updated: 2024-08-07T15:54:26.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the xoopsOption[pagetype] parameter to the default URI for modules/news/. NOTE: this can be leveraged by using legitimate product functionality to upload a file that contains the code, then including that file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26505 - https://www.exploit-db.com/exploits/4637 - http://ww
m Container: References: - http://www.securityfocus.com/bid/26505 - https://www.exploit-db.com/exploits/4637 - http://www.vupen.com/english/advisories/2007/3962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38592
CVE ID: CVE-2007-6080 State: PUBLISHED Published: 2007-11-21T22:00:00 Last Updated: 2024-08-07T15:54:26.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the bid parameter. NOTE: it was later reported that 1.0.13 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38594 - https://www.exploit-db.com/exploits/4637 - http://www.vupen.com/english/advisories/2007/3962 - https://exchange.xforce.ibmcloud.co
w.exploit-db.com/exploits/4637 - http://www.vupen.com/english/advisories/2007/3962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46156 - http://www.securityfocus.com/bid/31941/exploit - http://www.securityfocus.com/bid/31941
CVE ID: CVE-2007-6081 State: PUBLISHED Published: 2007-11-21T23:00:00 Last Updated: 2024-08-07T15:54:26.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42423 - http://forums.adventnet.com/viewtopic.php?t=247521 - http://www.securityfocus.com/bid/26304 - http://secunia.com/advisories/27833
CVE ID: CVE-2007-6082 State: PUBLISHED Published: 2007-11-22T00:00:00 Last Updated: 2024-08-07T15:54:26.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject arbitrary PHP code via the filecontents parameter, which can be executed by accessing includes/news.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3388 - https://www.exploit-db.com/exploits/4635 - http://www.securityfocus.com/archive/1/483867/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38543 - http://ww
curityfocus.com/archive/1/483867/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38543 - http://www.securityfocus.com/bid/26481 - http://www.r57.li/exploit.txt
CVE ID: CVE-2007-6083 State: PUBLISHED Published: 2007-11-22T00:00:00 Last Updated: 2024-08-07T15:54:26.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26483 - http://osvdb.org/38732 - http://www.securityfocus.com/archive/1/483926/100/0/threaded - https://www.exploit-db.com/exploits/4634 - http://www.aeroxteam.fr/exploit-IceBB-1.0rc6.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/38550 - http://www.aeroxteam.fr/
team.fr/exploit-IceBB-1.0rc6.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/38550 - http://www.aeroxteam.fr/advisory-IceBB-1.0rc6.txt - http://www.securityfocus.com/archive/1/483916/100/0/threaded - http://secunia.com/advisories/27709
CVE ID: CVE-2007-6084 State: PUBLISHED Published: 2007-11-22T00:00:00 Last Updated: 2024-08-07T15:54:26.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38554 - https://www.exploit-db.com/exploits/4633 - http://www.securityfocus.com/bid/26485
CVE ID: CVE-2007-6085 State: PUBLISHED Published: 2007-11-22T00:00:00 Last Updated: 2024-08-07T15:54:26.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the (1) vedipm or (2) live_chat module. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38556 - https://www.exploit-db.com/exploits/4632 - http://www.securityfocus.com/bid/26484 - http://www.securityfocus.com/archive/1/483907/100/0/threaded
CVE ID: CVE-2007-6086 State: PUBLISHED Published: 2007-11-22T00:00:00 Last Updated: 2024-08-07T15:54:26.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the module parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4632 - http://www.securityfocus.com/bid/26484 - http://www.securityfocus.com/archive/1/483907/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38557
CVE ID: CVE-2007-6087 State: PUBLISHED Published: 2007-11-22T00:00:00 Last Updated: 2024-08-07T15:54:26.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the admin password via certain parameters to the changepass module. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38558 - https://www.exploit-db.com/exploits/4632 - http://www.securityfocus.com/bid/26484 - http://www.securityfocus.com/archive/1/483907/100/0/threaded
CVE ID: CVE-2007-6088 State: PUBLISHED Published: 2007-11-22T00:00:00 Last Updated: 2024-08-07T15:54:26.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBBViet 02.03.07 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38551 - https://www.exploit-db.com/exploits/4631 - http://osvdb.org/38734 - http://www.securityfocus.com/bid/26482 - http://secunia.com/advisories/27698
CVE ID: CVE-2007-6089 State: PUBLISHED Published: 2007-11-22T00:00:00 Last Updated: 2024-08-07T15:54:26.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote attackers to execute arbitrary PHP code via a URL in the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26480 - http://osvdb.org/38743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38540 - http://www.vupen.com/english/advisories/2007/3909 - http://secunia.com/advisories/27722 - https://www.exploit-db.com/exploits/4630
CVE ID: CVE-2007-6090 State: PUBLISHED Published: 2007-11-22T00:00:00Z Last Updated: 2024-09-16T21:56:54.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/26458.txt - http://www.securityfocus.com/bid/26458
CVE ID: CVE-2007-6091 State: PUBLISHED Published: 2007-11-22T00:00:00 Last Updated: 2024-08-07T15:54:26.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3384 - http://www.securityfocus.com/bid/26479 - http://www.securityfocus.com/archive/1/483859/100/0/threaded - http://osvdb.org/38740 - http:/
rityfocus.com/bid/26479 - http://www.securityfocus.com/archive/1/483859/100/0/threaded - http://osvdb.org/38740 - http://osvdb.org/38741 - http://secunia.com/advisories/27713
CVE ID: CVE-2007-6092 State: PUBLISHED Published: 2007-11-22T00:00:00 Last Updated: 2024-08-07T15:54:26.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27688 - http://osvdb.org/42175 - http://www.securityfocus.com/bid/26486 - http://www.ingate.com/relnote-460.php
CVE ID: CVE-2007-6093 State: PUBLISHED Published: 2007-11-22T00:00:00 Last Updated: 2024-08-07T15:54:26.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service (kernel crash) via an RTCP index that is "much more than expected." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27688 - http://www.securityfocus.com/bid/26486 - http://osvdb.org/42174 - http://www.ingate.com/relnote-460.php
CVE ID: CVE-2007-6094 State: PUBLISHED Published: 2007-11-22T00:00:00 Last Updated: 2024-08-07T15:54:26.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service (module crash) via an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy (PFS). Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42173 - http://secunia.com/advisories/27688 - http://www.securityfocus.com/bid/26486 - http://www.ingate.com/relnote-460.php
CVE ID: CVE-2007-6095 State: PUBLISHED Published: 2007-11-22T00:00:00 Last Updated: 2024-08-07T15:54:26.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42172 - http://secunia.com/advisories/27688 - http://www.securityfocus.com/bid/26486 - http://www.ingate.com/relnote-460.php