Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
om/archive/1/476747/100/0/threaded - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=576 - http://www.vupen.com/english/advisories/2007/2866 - http://www.securityfocus.com/archive/1/476527/100/0/threaded - http://www.securityfocus.com/bid/25301 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-042 - http://secunia.com/advisories/26447 - http://www.zerodayinitiative.com/advisories/ZDI-07-048/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2069
CVE ID: CVE-2007-2224 State: PUBLISHED Published: 2007-08-14T21:00:00 Last Updated: 2024-08-07T13:23:51.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote attackers to execute arbitrary code via the substringData method on a TextNode object, which causes an integer overflow that leads to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-043 - http://secunia.com/advisories/26449 - http://www.securi
oft.com/en-us/security-updates/securitybulletins/2007/ms07-043 - http://secunia.com/advisories/26449 - http://www.securitytracker.com/id?1018560 - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1248 - http://www.vupen.com/english/advisories/2007/2867 - http://www.securityfocus.com/archive/1/476527/100/0/threaded - http://www.securityfocus.com/bid/25282
CVE ID: CVE-2007-2225 State: PUBLISHED Published: 2007-06-12T20:00:00 Last Updated: 2024-08-07T13:23:51.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034 - http://www.securitytracker.com/id?1018232 - http://www
soft.com/en-us/security-updates/securitybulletins/2007/ms07-034 - http://www.securitytracker.com/id?1018232 - http://www.kb.cert.org/vuls/id/682825 - http://www.securityfocus.com/archive/1/471947/100/0/threaded - http://www.securityfocus.com/bid/24392 - http://openmya.hacker.jp/hasegawa/security/ms07-034.txt - http://www.securityfocus.com/archive/1/472002/100/0/threaded - http://archive.openmya.devnull.jp/2007.06/msg00060.html - http://osvdb.org/35345 - http://www.securitytracker.com/id?1018231 - http://www.us-cert.gov/cas/techalerts/TA07-163A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2045 - http://secunia.com/advisories/25639 - http://www.
.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2045 - http://secunia.com/advisories/25639 - http://www.vupen.com/english/advisories/2007/2154 - http://www.securityfocus.com/archive/1/471947/100/0/threaded
CVE ID: CVE-2007-2226 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-2227 State: PUBLISHED Published: 2007-06-12T21:00:00 Last Updated: 2024-08-07T13:23:51.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Domain Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034 - http://www.securityfocus.com/archive/1/47194
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034 - http://www.securityfocus.com/archive/1/471947/100/0/threaded - http://openmya.hacker.jp/hasegawa/security/ms07-034.txt - http://www.securityfocus.com/archive/1/472002/100/0/threaded - http://www.securitytracker.com/id?1018233 - http://www.securitytracker.com/id?1018234 - http://archive.openmya.devnull.jp/2007.06/msg00060.html - http://www.securityfocus.com/bid/24410 - http://www.us-cert.gov/cas/techalerts/TA07-163A.html - http://secunia.com/advisories/25639 - http://osvdb.org/35346 - http://www.vupen.com/english/advisories/2007/2154 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
n.com/english/advisories/2007/2154 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2085 - http://www.securityfocus.com/archive/1/471947/100/0/threaded
CVE ID: CVE-2007-2228 State: PUBLISHED Published: 2007-10-09T22:00:00 Last Updated: 2024-08-07T13:23:51.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service (RPCSS service stop and system restart) via an RPC request that uses NTLMSSP PACKET authentication with a zero-valued verification trailer signature, which triggers an invalid dereference. NOTE: this also affects Windows 2000 SP4, although the impact is an information leak. Add
iggers an invalid dereference. NOTE: this also affects Windows 2000 SP4, although the impact is an information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-07-055.html - http://secunia.com/advisories/27153 - http://securitytracker.com/id?1018787 - http://www.securityfocus.com/bid/25974 - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://secunia.com/advisories/27134 - http://www.securityfocus.com/archive/1/482023/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-058 - http://www.vupen.com/engli
hreaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-058 - http://www.vupen.com/english/advisories/2007/3438 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2310 - http://www.us-cert.gov/cas/techalerts/TA07-282A.html
CVE ID: CVE-2007-2229 State: PUBLISHED Published: 2007-06-12T19:00:00 Last Updated: 2024-08-07T13:33:27.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista uses insecure default permissions for unspecified "local user information data stores" in the registry and the file system, which allows local users to obtain sensitive information such as administrative passwords, aka "Permissive User Information Store ACLs Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25623 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-032 - http://osvdb.org/35344
ries/25623 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-032 - http://osvdb.org/35344 - http://www.securitytracker.com/id?1018225 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1529 - http://www.securityfocus.com/archive/1/471947/100/0/threaded - http://www.vupen.com/english/advisories/2007/2152 - http://www.us-cert.gov/cas/techalerts/TA07-163A.html - http://www.securityfocus.com/bid/24411 - http://www.securityfocus.com/archive/1/471947/100/0/threaded
CVE ID: CVE-2007-2230 State: PUBLISHED Published: 2007-04-25T15:00:00 Last Updated: 2024-08-07T13:33:27.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via (1) the ofinterest parameter in a light search query, (2) description parameter in the advanced search query, and possibly other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.hacktics.com/AdvCleverPathApr07.html - http://www.vupen.com/english/advisories/2007/1544 - http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0
ml - http://www.vupen.com/english/advisories/2007/1544 - http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0648.html - http://www.securityfocus.com/bid/23671 - ftp://ftp.ca.com/pub/portal/4.71/4.71.001_188_070329/readme_4.71.001_188_070329.txt - http://supportconnectw.ca.com/public/cp/portal/infodocs/portal-secnot.asp - http://www.securityfocus.com/archive/1/466760/100/0/threaded - http://secunia.com/advisories/25002 - http://www.securitytracker.com/id?1017970 - http://www.osvdb.org/34128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33853 - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=136879
CVE ID: CVE-2007-2231 State: PUBLISHED Published: 2007-04-25T15:00:00 Last Updated: 2024-08-07T13:33:27.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-487-1 - http://secunia.com/advisories/30342 - http://www.redhat.com/support/errata/RHSA-2008-0297.html - http://www.securityfocus.com/bid/23552 - http://www.debian.org/security/2007/dsa-1359
pport/errata/RHSA-2008-0297.html - http://www.securityfocus.com/bid/23552 - http://www.debian.org/security/2007/dsa-1359 - http://dovecot.org/doc/NEWS - http://dovecot.org/list/dovecot-cvs/2007-March/008488.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34082 - http://www.novell.com/linux/security/advisories/2007_8_sr.html - http://www.vupen.com/english/advisories/2007/1452 - http://dovecot.org/list/dovecot-news/2007-March/000038.html - http://secunia.com/advisories/25072 - http://www.securityfocus.com/archive/1/466168/100/0/threaded
CVE ID: CVE-2007-2232 State: PUBLISHED Published: 2007-04-25T15:00:00 Last Updated: 2024-08-07T13:33:27.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR (\r) sequences in the cosign cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465386/100/100/threaded - http://secunia.com/advisories/24845 - http://www.umich.edu/~umweb/software/cosign/cosign-vuln-2007-001.txt - http://www.vupen.com/english/advisories/2007/1359
CVE ID: CVE-2007-2233 State: PUBLISHED Published: 2007-04-25T15:00:00 Last Updated: 2024-08-07T13:33:27.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as an arbitrary user by using CR (\r) sequences in the service parameter to inject LOGIN and REGISTER commands with the desired username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465386/100/100/threaded - http://secunia.com/advisories/24845 - http://www.vupen.com/english/advisories/2007/1359 - http://www.umich.edu/~umweb/software/cosign/cosign-vuln-20
s/24845 - http://www.vupen.com/english/advisories/2007/1359 - http://www.umich.edu/~umweb/software/cosign/cosign-vuln-2007-002.txt
CVE ID: CVE-2007-2234 State: PUBLISHED Published: 2007-04-25T15:00:00 Last Updated: 2024-08-07T13:33:28.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/common.php in PunBB 1.2.14 and earlier does not properly handle a disabled ini_get function when checking the register_globals setting, which allows remote attackers to register global parameters, as demonstrated by an SQL injection attack on the search_id parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465338/100/100/threaded - http://dev.punbb.org/changeset/933 - http://www.acid-root.new.fr/advisories/13070411.txt - http://securityreason
eaded - http://dev.punbb.org/changeset/933 - http://www.acid-root.new.fr/advisories/13070411.txt - http://securityreason.com/securityalert/2613 - http://www.securityfocus.com/archive/1/465400/100/100/threaded
CVE ID: CVE-2007-2235 State: PUBLISHED Published: 2007-04-25T15:00:00 Last Updated: 2024-08-07T13:33:27.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PunBB 1.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Referer HTTP header to misc.php or the (2) category name when deleting a category in admin_categories.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465338/100/100/threaded - http://dev.punbb.org/changeset/938 - http://dev.punbb.org/changeset/934 - http://www.acid-root.new.fr/advisories/13070411.txt - http://secuni
changeset/938 - http://dev.punbb.org/changeset/934 - http://www.acid-root.new.fr/advisories/13070411.txt - http://secunia.com/advisories/24843 - http://securityreason.com/securityalert/2613 - http://www.vupen.com/english/advisories/2007/1362 - http://www.securityfocus.com/archive/1/465400/100/100/threaded
CVE ID: CVE-2007-2236 State: PUBLISHED Published: 2007-04-25T15:00:00 Last Updated: 2024-08-07T13:33:27.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: footer.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include/user/ via a cross-site scripting (XSS) attack, or via the pun_include tag, as demonstrated by use of admin_options.php to execute PHP code from an uploaded avatar file. Additional Analyst Notes: - CVE Program Container: References: - http://dev.punbb.org/changeset/937 - http://www.securityfocus.com/archive/1/465338/100/100/threaded - http://www.acid-root.new.fr/advisories/13070411.txt - http://secunia.com/advisories/24843 - http://
8/100/100/threaded - http://www.acid-root.new.fr/advisories/13070411.txt - http://secunia.com/advisories/24843 - http://securityreason.com/securityalert/2613 - http://www.vupen.com/english/advisories/2007/1362 - http://www.securityfocus.com/archive/1/465400/100/100/threaded
CVE ID: CVE-2007-2237 State: PUBLISHED Published: 2007-06-06T20:00:00 Last Updated: 2024-08-07T13:33:27.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, which triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24346 - http://www.kb.cert.org/vuls/id/290961 - http://www.vupen.com/english/advisories/2007/2083 - https://www.exploit-db.com/exploits/4044 - http://www.securitytracker.com/id?1018202 - http://w
h/advisories/2007/2083 - https://www.exploit-db.com/exploits/4044 - http://www.securitytracker.com/id?1018202 - http://www.securityfocus.com/archive/1/470746/100/0/threaded - http://www.csis.dk/dk/forside/GdiPlus.pdf - http://osvdb.org/38494 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34743
CVE ID: CVE-2007-2238 State: PUBLISHED Published: 2009-04-16T15:00:00 Last Updated: 2024-08-07T13:33:27.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2) UpdateComponents methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/789121 - http://www.vupen.com/english/advisories/2009/1061 - http://secunia.com/advisories/34725 - http://www.securityfocus.com/bid/34
//www.vupen.com/english/advisories/2009/1061 - http://secunia.com/advisories/34725 - http://www.securityfocus.com/bid/34532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49888
CVE ID: CVE-2007-2239 State: PUBLISHED Published: 2007-05-07T19:00:00 Last Updated: 2024-08-07T13:33:27.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34133 - http://osvdb.org/35602 - http://ww
Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34133 - http://osvdb.org/35602 - http://www.vupen.com/english/advisories/2007/1663 - http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdf - http://www.securityfocus.com/bid/23816 - http://www.kb.cert.org/vuls/id/355809 - http://secunia.com/advisories/25093
CVE ID: CVE-2007-2240 State: PUBLISHED Published: 2007-08-15T19:00:00 Last Updated: 2024-08-07T13:33:27.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 (Automated Solutions 1.0 before fix pack 1), does not properly validate digital signatures of downloaded software, which makes it easier for remote attackers to spoof a download. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2882 - http://osvdb.org/39555 - http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=
nglish/advisories/2007/2882 - http://osvdb.org/39555 - http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-67649 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-045 - http://secunia.com/advisories/26482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36028 - http://www.securityfocus.com/bid/25311 - http://www.kb.cert.org/vuls/id/570705
CVE ID: CVE-2007-2241 State: PUBLISHED Published: 2007-05-02T10:00:00 Last Updated: 2024-08-07T13:33:27.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in query.c in ISC BIND 9.4.0, and 9.5.0a1 through 9.5.0a3, when recursion is enabled, allows remote attackers to cause a denial of service (daemon exit) via a sequence of queries processed by the query_addsoa function. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2007:100 - http://www.kb.cert.org/vuls/id/718460 - http://secunia.com/advisories/25070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33988 - http://www.isc.or
0 - http://secunia.com/advisories/25070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33988 - http://www.isc.org/index.pl?/sw/bind/bind-security.php - http://www.securityfocus.com/bid/23738 - http://www.securitytracker.com/id?1017985 - http://osvdb.org/34748 - http://www.vupen.com/english/advisories/2007/1593
CVE ID: CVE-2007-2242 State: PUBLISHED Published: 2007-04-25T16:00:00 Last Updated: 2024-08-07T13:33:27.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers (IPV6_RTHDR_TYPE_0) that create network amplification between two routers. Additional Analyst Notes: - CVE Program Container: References: - http://security.freebsd.org/advisories/FreeBSD-SA-07:03.ipv6.asc - http://secunia.com/advisories/24978 - http://secunia.com/advisories/26703 - http://www.redhat.com/support/errata/RHSA-2007-0347.html - http://secunia.com/advisories/25770 - http://secunia.com/advisories/26664 - http:
m/support/errata/RHSA-2007-0347.html - http://secunia.com/advisories/25770 - http://secunia.com/advisories/26664 - http://www.novell.com/linux/security/advisories/2007_51_kernel.html - http://www.securityfocus.com/archive/1/467939/30/6690/threaded - http://secunia.com/advisories/28806 - http://www.securityfocus.com/bid/23615 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9574 - http://docs.info.apple.com/article.html?artnum=306375 - http://secunia.com/advisories/26651 - http://openbsd.org/errata39.html#022_route6 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:171 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:216 - http:
va.com/security/advisories?name=MDKSA-2007:171 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:216 - http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf - http://www.securitytracker.com/id?1017949 - http://openbsd.org/errata40.html#012_route6 - http://secunia.com/advisories/25288 - http://www.vupen.com/english/advisories/2007/1563 - http://secunia.com/advisories/25083 - http://secunia.com/advisories/26620 - http://www.vupen.com/english/advisories/2007/2270 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 - http://www.securityfocus.com/archive/1/471457 - http://secunia.com/advisories/25068 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002
e/1/471457 - http://secunia.com/advisories/25068 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html - http://www.kb.cert.org/vuls/id/267289 - http://www.ubuntu.com/usn/usn-486-1 - http://www.ubuntu.com/usn/usn-508-1 - http://www.vupen.com/english/advisories/2007/3050 - http://secunia.com/advisories/25691 - https://issues.rpath.com/browse/RPL-1310 - http://secunia.com/advisories/25033 - http://docs.info.apple.com/article.html?artnum=305712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33851 - http://secunia.com/advisories/26133
CVE ID: CVE-2007-2243 State: PUBLISHED Published: 2007-04-25T16:00:00 Last Updated: 2024-08-07T13:33:27.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a different response if the user account exists, a similar issue to CVE-2001-1483. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053906.html - http://www.securityfocus.com/bid/23601 - http://securityreason.com/securityalert/2631 - http://www.osvdb.org/3
06.html - http://www.securityfocus.com/bid/23601 - http://securityreason.com/securityalert/2631 - http://www.osvdb.org/34600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33794 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053951.html - https://security.netapp.com/advisory/ntap-20191107-0003/