Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3345 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in PHPAccounts 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) Outgoing_Type_ID, (2) Outgoing_ID, (3) Project_ID, (4) Client_ID, (5) Invoice_ID, or (6) Vendor_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels-team.blogspot.com/2007/06/phpaccounts-vuln.html - http://osvdb.org/35980 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35028
CVE ID: CVE-2007-3346 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PHPAccounts 0.5 allows remote attackers to include arbitrary local files via unspecified manipulations of the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels-team.blogspot.com/2007/06/phpaccounts-vuln.html - http://www.securityfocus.com/bid/24572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35027 - http://osvdb.org/37683
CVE ID: CVE-2007-3347 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID. Additional Analyst Notes: - CVE Program Container: References: - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=219& - http://www.vupen.com/english/advisories/2007/2320 - http://secunia.com/advisories/25803 - http://www.securityfocus.com/bid/24560 - https:
com/english/advisories/2007/2320 - http://secunia.com/advisories/25803 - http://www.securityfocus.com/bid/24560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35063
CVE ID: CVE-2007-3348 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service (device outage) via a malformed SDP header in a SIP INVITE message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2320 - http://www.securityfocus.com/bid/24538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35062 - http://secunia.com/advisories/25803 - http://osvdb.org/36158 - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=218&
CVE ID: CVE-2007-3349 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to (1) cause a denial of service (device freeze) via a malformed SIP message of a certain length or (2) cause a denial of service (continuous ring) via a malformed SIP message of a certain other length. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25806 - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=277& - https://exchange.xforce.ibmcloud.com/vulnerabi
://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=277& - https://exchange.xforce.ibmcloud.com/vulnerabilities/35060 - http://osvdb.org/37496 - http://www.securityfocus.com/bid/24537 - http://www.vupen.com/english/advisories/2007/2318
CVE ID: CVE-2007-3350 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service (application hang) via a flood of spoofed SIP INVITE requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=293& - http://osvdb.org/38562 - http://www.securityfocus.com/bid/24533 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35068
CVE ID: CVE-2007-3351 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service (device hang and traffic amplification) via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=217& - https://exchange.xforce.ibmcloud.com/vulnerabilities/35078 - http://www.securityfocus.com/bid/24549
CVE ID: CVE-2007-3352 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that contain an apostrophe. Additional Analyst Notes: - CVE Program Container: References: - http://ostermiller.org/contactform/ - http://osvdb.org/36372 - http://www.securityfocus.com/bid/24559 - http://www.vupen.com/english/advisories/2007/2333 - http://bugzilla.ostermiller.com/show_bug.cgi?id=151 - https://exchange.xforce.ibmclo
.com/english/advisories/2007/2333 - http://bugzilla.ostermiller.com/show_bug.cgi?id=151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34962 - http://www.attrition.org/pipermail/vim/2007-June/001669.html - http://secunia.com/advisories/25812
CVE ID: CVE-2007-3353 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/template.php in MyEvent 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the myevent_path parameter. NOTE: a reliable third party disputes this issue, saying "the entire file is a class. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36230 - http://marc.info/?l=bugtraq&m=118080045229127&w=2 - http://www.securityfocus.com/archive/1/470348/100/200/threaded
CVE ID: CVE-2007-3354 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL commands via the s_user_id parameter to ViewCat.php and other unspecified vectors. NOTE: the CatID/ViewCat.php, CatID/gallery.php, and ItemNum/ViewItem.php vectors are already covered by CVE-2005-3978. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34994 - http://www.securityfocus.com/archive/1/471944/100/0/thread
https://exchange.xforce.ibmcloud.com/vulnerabilities/34994 - http://www.securityfocus.com/archive/1/471944/100/0/threaded - http://www.securityfocus.com/bid/24584 - http://securityreason.com/securityalert/2824
CVE ID: CVE-2007-3355 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NetClassifieds Premium Edition allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/471944/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34996 - http://www.securityfocus.com/bid/24584 - http://securityreason.com/securityalert/2824 - http://osvdb.org/37066
CVE ID: CVE-2007-3356 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an error message, related to the display_errors setting in (1) Common.php and (2) imageresizer.php, and (3) the use of __FILE__ in error reporting by imageresizer.php; and (4) via certain requests that reveal the table name and complete query, related to the Halt_On_Error setting in Mysql_db.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/
in Mysql_db.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/471944/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34997 - http://www.securityfocus.com/bid/24584 - http://osvdb.org/38565 - http://osvdb.org/38566 - http://osvdb.org/38567 - http://securityreason.com/securityalert/2824 - http://osvdb.org/38564
CVE ID: CVE-2007-3357 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetClassifieds Premium Edition does not use encryption for (1) stored passwords or (2) sensitive data, which might allow attackers to obtain information via certain vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/471944/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35151 - http://osvdb.org/38563 - http://securityreason.com/securityalert/2824
CVE ID: CVE-2007-3358 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _SERWEB[serwebdir] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36324 - http://secunia.com/advisories/25680 - https://www.exploit-db.com/exploits/4089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34973 - http://www.vupen.com/english/advisories/2007/2291 - http://www.securityfocus.com/bid/24581
CVE ID: CVE-2007-3359 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:13.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SerWeb 0.9.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _SERWEB[serwebdir] parameter to (1) html/load_apu.php or (2) html/mail_prepend.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36326 - http://secunia.com/advisories/25680 - http://osvdb.org/36325
CVE ID: CVE-2007-3360 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands. Additional Analyst Notes: - CVE Program Container: References: - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.285737 - http://secunia.com/advisories/34870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34969 -
re-security.285737 - http://secunia.com/advisories/34870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34969 - https://www.exploit-db.com/exploits/4087 - http://www.securityfocus.com/bid/24579 - http://secunia.com/advisories/25759 - http://osvdb.org/37479
CVE ID: CVE-2007-3361 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to cause a denial of service (device crash) via a SIP message with a malformed header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24536 - http://secunia.com/advisories/25782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35154 - http://www.vupen.com/english/advisories/2007/2319 - http://osvdb.org/37498 - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=298&
CVE ID: CVE-2007-3362 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: ageet AGEphone before 1.6.2, running on Windows Mobile 5 on the HTC HyTN Pocket PC device, allows remote attackers to (1) cause a denial of service (call disruption and device hang) via a SIP message with a malformed header and (2) cause a denial of service (call disruption, false ring indication, and device outage) via a SIP message with a malformed SDP delimiter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35067 - http://www.securityfocus.com/bid/24540
ainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35067 - http://www.securityfocus.com/bid/24540 - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=215& - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=214& - http://secunia.com/advisories/25781 - http://www.ageet.com/us/agephone/help/index.htm#vers - http://www.securityfocus.com/bid/24543 - http://osvdb.org/37729
CVE ID: CVE-2007-3363 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in ageet AGEphone before 1.6.3 allow remote attackers to have an unknown impact via malformed SIP packets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25781 - http://www.ageet.com/us/agephone/help/index.htm#vers - https://exchange.xforce.ibmcloud.com/vulnerabilities/35066 - http://osvdb.org/37730
CVE ID: CVE-2007-3364 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote attackers to inject arbitrary web script or HTML via the body content. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34975 - http://securityreason.com/securityalert/2823 - http://www.securityfocus.com/bid/24583 - http://www.securityfocus.com/archive/1/471915/100/0/threaded - http://osvdb.org/37506 - http://osvdb.org/36340
CVE ID: CVE-2007-3365 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:13.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information (script source code) via a modified extension, as demonstrated by post.mscgI. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37505 - http://secunia.com/advisories/25754 - http://securityreason.com/securityalert/2827 - http://www.securityfocus.com/archive/1/471914/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/3497
http://www.securityfocus.com/archive/1/471914/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34977 - http://www.securityfocus.com/bid/24571
CVE ID: CVE-2007-3366 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35008 - http://www.securityfocus.com/bid/24586 - http://secunia.com/advisories/25722 - http:
bmcloud.com/vulnerabilities/35008 - http://www.securityfocus.com/bid/24586 - http://secunia.com/advisories/25722 - http://osvdb.org/35860
CVE ID: CVE-2007-3367 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to obtain sensitive information via a direct request, which reveals the path in an error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35861 - http://www.securityfocus.com/bid/24586 - http://secunia.com/advisories/25722 - https://exchange.xforce.ibmcloud.com/vu
- http://www.securityfocus.com/bid/24586 - http://secunia.com/advisories/25722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35009
CVE ID: CVE-2007-3368 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service (device reboot) via a malformed CGI parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.polycom.com/common/documents/support/downloads/voice/soundpoint_ip_soundstation_ip_sip_2.1.1_release_notes.pdf - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=273& - http://www.securityfocus.com/bid/24547 - http://osvdb.org/37611
CVE ID: CVE-2007-3369 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service (device hang or reboot) via an INVITE message with a long Via header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25780 - http://www.securityfocus.com/bid/24542 - http://knowledgebase.polycom.com/KanisaPlatform/Publishing/927/11898_f.SAL_PUBLIC_1_2.html - http://www.polycom.com/common/pw_item_show_doc/1%2C%2C7482%2C00.pd
Platform/Publishing/927/11898_f.SAL_PUBLIC_1_2.html - http://www.polycom.com/common/pw_item_show_doc/1%2C%2C7482%2C00.pdf - http://osvdb.org/37610 - http://www.vupen.com/english/advisories/2007/2329 - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=272&
CVE ID: CVE-2007-3370 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL in (1) the sunPath parameter to include.php or (2) the dir parameter to skin/board/default/doctype.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36281 - http://osvdb.org/36282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35006 - http://www.securityfocus.com/bid/24588 - http://www.vupen.com/english/advisories/2007/2307 - https://www.exploi
/35006 - http://www.securityfocus.com/bid/24588 - http://www.vupen.com/english/advisories/2007/2307 - https://www.exploit-db.com/exploits/4091
CVE ID: CVE-2007-3371 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to execute arbitrary PHP code via a URL in the _POWL[installPath] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35005 - http://www.vupen.com/english/advisories/2007/2306 - http://osvdb.org/36368 - https://www.exploit-db.com/exploits/4090 - http://www.securityfocus.com/bid/24589
CVE ID: CVE-2007-3372 State: PUBLISHED Published: 2007-06-22T21:00:00 Last Updated: 2024-08-07T14:14:12.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via empty TXT data over D-Bus, which triggers an assert error. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26083 - http://secunia.com/advisories/33220 - http://www.securityfocus.com/archive/1/472443/100/0/threaded - http://www.securitytracker.com/id?1018706 - http://secunia.com/advisories/33279 - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://www.securityfocus
ecunia.com/advisories/33279 - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://www.securityfocus.com/bid/24614 - http://www.vupen.com/english/advisories/2007/2317 - http://osvdb.org/37507 - http://secunia.com/advisories/25811 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:185 - http://avahi.org/changeset/1482 - http://www.ubuntu.com/usn/usn-696-1 - http://www.debian.org/security/2008/dsa-1690 - http://secunia.com/advisories/26791 - http://avahi.org/milestone/Avahi%200.6.20 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35036
CVE ID: CVE-2007-3373 State: PUBLISHED Published: 2007-06-25T19:00:00 Last Updated: 2024-08-07T14:14:12.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: daemon.c in cman (redhat-cluster-suite) before 20070622 does not clear a buffer for reading requests, which might allow local users to obtain sensitive information from previous requests. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35152 - https://www.redhat.com/archives/cluster-devel/2007-June/msg00130.html
CVE ID: CVE-2007-3374 State: PUBLISHED Published: 2007-06-25T20:00:00 Last Updated: 2024-08-07T14:14:12.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in cluster/cman/daemon/daemon.c in cman (redhat-cluster-suite) before 20070622 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via long client messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35034 - http://sourceware.org/cgi-bin/cvsweb.cgi/cluster/cman/daemon/daemon.c.diff?cvsroot=cluster&r1=1.34&r2=1.35 - http://secunia.com/advisories/25818 - http://secunia.com/advisories/25886 - https://
f?cvsroot=cluster&r1=1.34&r2=1.35 - http://secunia.com/advisories/25818 - http://secunia.com/advisories/25886 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9524 - http://www.securityfocus.com/bid/24595 - http://www.securitytracker.com/id?1018323 - https://rhn.redhat.com/errata/RHSA-2007-0559.html - http://osvdb.org/37497 - http://www.ubuntu.com/usn/usn-476-1 - https://launchpad.net/bugs/121780 - https://www.redhat.com/archives/cluster-devel/2007-June/msg00130.html - http://secunia.com/advisories/25799