Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0141 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:03:37.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in yald.php in Yet Another Link Directory 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31626 - http://www.vupen.com/english/advisories/2007/0082 - http://www.securityfocus.com/archive/1/456122/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31322 - http://secunia.com/advisories/23646 - http://securityreason.com/securityalert/2121 - http:
d.com/vulnerabilities/31322 - http://secunia.com/advisories/23646 - http://securityreason.com/securityalert/2121 - http://www.securityfocus.com/bid/21904
CVE ID: CVE-2007-0142 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:03:37.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2120 - http://www.securityfocus.com/archive/1/456127/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31313 - http://secunia.com/advisories/23642 - http://www.securityfocus.com/bid/21905 - http://osvdb.org/31665 - http://www.vupen.com/engli
unia.com/advisories/23642 - http://www.securityfocus.com/bid/21905 - http://osvdb.org/31665 - http://www.vupen.com/english/advisories/2007/0080
CVE ID: CVE-2007-0143 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:03:37.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitrary PHP code via a URL in the custom_admin_path parameter to (1) index.php or (2) archives.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31312 - http://www.vupen.com/english/advisories/2007/0078 - http://secunia.com/advisories/23635 - https://www.exploit-db.com/exploits/3090 - http://osvdb.org/31208 - http://osvdb.org/31209 - http://w
advisories/23635 - https://www.exploit-db.com/exploits/3090 - http://osvdb.org/31208 - http://osvdb.org/31209 - http://www.securityfocus.com/archive/1/456242/100/0/threaded
CVE ID: CVE-2007-0144 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:03:37.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the ordernum parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23652 - https://www.exploit-db.com/exploits/3089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31321 - http://osvdb.org/31690
CVE ID: CVE-2007-0145 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:03:37.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in bn_smrep1.php in BinGoPHP News (BP News) 3.01 allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter, a different vector than CVE-2006-4648 and CVE-2006-4649. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31328 - http://osvdb.org/35898 - http://securitytracker.com/id?1017477
CVE ID: CVE-2007-0146 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:03:37.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Fix and Chips CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in (a) delete-announce.php; the (2) Announcement form field in (b) staff.php; the (3) Client Name, (4) Business Name, (5) Street, (6) Address 2, (7) Town/City, (8) Postcode, (9) Phone Number, (10) Email Address and (11) Website Address form fields in (c) new_customer.php; and unspecified fields in (d) search.php and (e) client-results.php. Additional Analyst Notes:
in (c) new_customer.php; and unspecified fields in (d) search.php and (e) client-results.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/32649 - http://www.osvdb.org/32647 - http://www.osvdb.org/32648 - http://secunia.com/advisories/23625 - http://securityreason.com/securityalert/2119 - http://www.osvdb.org/32646 - http://www.vupen.com/english/advisories/2007/0081 - http://www.securityfocus.com/archive/1/456121/100/0/threaded - http://www.osvdb.org/32650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31319
CVE ID: CVE-2007-0147 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:03:37.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which allows remote attackers to upload files when these privileges were intended only for the Administrator and Editor roles. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32643 - http://cuyahoga.svn.sourceforge.net/viewvc/cuyahoga?view=rev&revision=551 - http://secunia.com/advisories/23662 - http://www.securityfocus.com/bid/21927 - http://www.cuyahoga-project.org/10/section.aspx/61
CVE ID: CVE-2007-0148 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:03:37.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in the Javascript alert function. Additional Analyst Notes: - CVE Program Container: References: - http://www.omnigroup.com/applications/omniweb/releasenotes/ - http://www.securityfocus.com/bid/21911 - https://www.exploit-db.com/exploits/3098 - http://secunia.com/advisories/23624 - http://blog.omnigroup.com/2007/01/07/omniweb-552-now-available-and
exploits/3098 - http://secunia.com/advisories/23624 - http://blog.omnigroup.com/2007/01/07/omniweb-552-now-available-and-more-secure/ - http://www.vupen.com/english/advisories/2007/0075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31324 - http://projects.info-pull.com/moab/MOAB-07-01-2007.html - http://www.securityfocus.com/archive/1/456578/100/0/threaded - http://osvdb.org/31222 - http://www.digitalmunition.com/DMA%5B2007-0107a%5D.txt
CVE ID: CVE-2007-0149 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:03:37.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMembersPro 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for users.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2118 - http://www.securityfocus.com/archive/1/456228/100/0/threaded - http://osvdb.org/33403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31329
CVE ID: CVE-2007-0150 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:03:37.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in index.php in Dayfox Blog allow remote attackers to execute arbitrary PHP code via a URL in the (1) page, (2) subject, and (3) q parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23661 - http://www.vupen.com/english/advisories/2007/0099 - http://www.securityfocus.com/archive/1/456212/100/0/threaded - http://osvdb.org/31259 - http://securityreason.com/securityalert/2117 - https://exchange.xforce.ibmcloud.com/vulnerabili
http://osvdb.org/31259 - http://securityreason.com/securityalert/2117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31336
CVE ID: CVE-2007-0151 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:03:37.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: MitiSoft stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for access_MS/MitiSoft.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/456230/100/0/threaded - http://osvdb.org/33409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31341
CVE ID: CVE-2007-0152 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:12:16.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: OhhASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/OhhASP.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31342 - http://www.securityfocus.com/archive/1/456117/100/0/threaded - http://osvdb.org/33381 - http://64.38.62.221/ariasecucom/forum/showthread.php?t=89
CVE ID: CVE-2007-0153 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:12:16.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: AJLogin 3.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for ajlogin.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31331 - http://www.securityfocus.com/archive/1/456226/100/0/threaded - http://osvdb.org/33404
CVE ID: CVE-2007-0154 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:12:16.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webulas stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/db.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2126 - http://osvdb.org/33401 - http://www.securityfocus.com/archive/1/456239/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31338
CVE ID: CVE-2007-0155 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:12:17.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: HarikaOnline 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for harikaonline.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31339 - http://www.securityfocus.com/archive/1/456238/100/0/threaded - http://osvdb.org/33410 - http://securityreason.com/securityalert/2125
CVE ID: CVE-2007-0156 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:12:17.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: M-Core stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to db/uyelik.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/456235/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31340 - http://osvdb.org/33402 - http://securityreason.com/securityalert/2124
CVE ID: CVE-2007-0157 State: PUBLISHED Published: 2007-01-09T21:00:00 Last Updated: 2024-08-07T12:12:16.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the uri_lookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platforms, allows remote malicious servers to cause a denial of service (crash) via a URI with non-ASCII characters, which triggers a buffer under-read due to a type conversion error that generates a negative index. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23984 - http://mailman.webdav.org/pipermail/neon/2007-January/002362.html - http://bugs.debian.org/cgi-bin/
m/advisories/23984 - http://mailman.webdav.org/pipermail/neon/2007-January/002362.html - http://bugs.debian.org/cgi-bin/bugreport.cgi/neon26_0.26.2-3_to_mdx1.diff?bug=404723%3Bmsg=5%3Batt=2 - http://www.webdav.org/cadaver/ - http://mailman.webdav.org/pipermail/cadaver/2007-January/001015.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:013 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=404723 - http://www.novell.com/linux/security/advisories/2007_02_sr.html - http://www.securityfocus.com/bid/22035 - http://www.vupen.com/english/advisories/2007/0172 - http://secunia.com/advisories/23763 - http://www.vupen.com/english/advisories/2007/0362 - http://secunia.com/advisories/2
ttp://secunia.com/advisories/23763 - http://www.vupen.com/english/advisories/2007/0362 - http://secunia.com/advisories/23751 - http://osvdb.org/39247
CVE ID: CVE-2007-0158 State: PUBLISHED Published: 2019-12-27T17:03:20 Last Updated: 2024-08-07T12:12:16.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: thttpd 2007 has buffer underflow. Additional Analyst Notes: - CVE Program Container: References: - http://taviso.decsystem.org/research.t2t
CVE ID: CVE-2007-0159 State: PUBLISHED Published: 2007-01-10T00:00:00 Last Updated: 2024-08-07T12:12:16.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the GeoIP_update_database_general function in libGeoIP/GeoIPUpdate.c in GeoIP 1.4.0 allows remote malicious update servers (possibly only update.maxmind.com) to overwrite arbitrary files via a .. (dot dot) in the database filename, which is returned by a request to app/update_getfilename. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31383 - http://www.securityfocus.co
/english/advisories/2007/0117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31383 - http://www.securityfocus.com/bid/21959 - http://secunia.com/advisories/23880 - http://www.vupen.com/english/advisories/2007/0118 - http://secunia.com/advisories/23906 - http://arctic.org/~dean/patches/GeoIP-1.4.0-update-vulnerability.patch - http://osvdb.org/31618 - http://www.ubuntu.com/usn/usn-412-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:004
CVE ID: CVE-2007-0160 State: PUBLISHED Published: 2007-01-10T00:00:00 Last Updated: 2024-08-07T12:12:17.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the LiveJournal support (hooks/ljhook.cc) in CenterICQ 4.9.11 through 4.21.0, when using unofficial LiveJournal servers, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by adding the victim as a friend and using long (1) username and (2) real name strings. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2129 - http://www.securityfocus.com/bid/21932 - http://www.vupen.com/english/advisories/20
urityreason.com/securityalert/2129 - http://www.securityfocus.com/bid/21932 - http://www.vupen.com/english/advisories/2007/0306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31330 - http://www.gentoo.org/security/en/glsa/glsa-200701-20.xml - http://securitytracker.com/id?1017545 - http://www.securityfocus.com/archive/1/456255/100/0/threaded - http://osvdb.org/33408
CVE ID: CVE-2007-0161 State: PUBLISHED Published: 2007-01-10T00:00:00 Last Updated: 2024-08-07T12:12:17.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to CVE-2006-0023. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31361 - http://secunia.com/advisories/23663 - http://
yalert/2128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31361 - http://secunia.com/advisories/23663 - http://www.vupen.com/english/advisories/2007/0094 - http://osvdb.org/32654 - http://secway.org/advisory/AD20070108.txt - http://www.securityfocus.com/bid/21935 - http://www.securityfocus.com/archive/1/456259/100/0/threaded
CVE ID: CVE-2007-0162 State: PUBLISHED Published: 2007-01-10T00:00:00 Last Updated: 2024-08-07T12:12:16.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unsanity Application Enhancer (APE) 2.0.2 installs with insecure permissions for the (1) ApplicationEnhancer binary and the (2) /Library/Frameworks/ApplicationEnhancer.framework directory, which allows local users to gain privileges by modifying or replacing the binary or library files. Additional Analyst Notes: - CVE Program Container: References: - http://projects.info-pull.com/moab/MOAB-08-01-2007.html - http://landonf.bikemonkey.org/code/macosx/MOAB_Day_8.20070109002959.18582.timor.html - http://osvdb.org/32661 - http://ww
ttp://landonf.bikemonkey.org/code/macosx/MOAB_Day_8.20070109002959.18582.timor.html - http://osvdb.org/32661 - http://www.securityfocus.com/bid/21951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31349 - http://secunia.com/advisories/23649
CVE ID: CVE-2007-0163 State: PUBLISHED Published: 2007-01-10T00:00:00 Last Updated: 2024-08-07T12:12:17.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/456283/100/0/threaded - http://www.securityfocus.com/archive/1/456519/100/0/threaded - http://osvdb.org/31244 - https://exchange.xforce.ibmcloud.com/vul
ww.securityfocus.com/archive/1/456519/100/0/threaded - http://osvdb.org/31244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31378 - http://homepage.mac.com/adonismac/Advisory/steg/steganography.html - http://secunia.com/advisories/23639
CVE ID: CVE-2007-0164 State: PUBLISHED Published: 2007-01-10T00:00:00 Last Updated: 2024-08-07T12:12:16.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Camouflage 1.2.1 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing certain bytes of the JPEG image with alternate password information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21939 - http://secunia.com/advisories/23578 - http://www.securityfocus.com/archive/1/456541/100/0/threaded - http://homepage.mac.com/adonismac/Advisory/steg/camouflage.html - https://
tyfocus.com/archive/1/456541/100/0/threaded - http://homepage.mac.com/adonismac/Advisory/steg/camouflage.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/31375 - http://osvdb.org/32651
CVE ID: CVE-2007-0165 State: PUBLISHED Published: 2007-01-10T00:00:00 Last Updated: 2024-08-07T12:12:17.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash) via malformed RPC requests that trigger a crash in rpcbind. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2007-036.htm - http://securitytracker.com/id?1017492 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5920 - http://www.vupen.com/english/advisories/2007/0110 - http://secunia.com/advisories/24056 -
org.mitre.oval%3Adef%3A5920 - http://www.vupen.com/english/advisories/2007/0110 - http://secunia.com/advisories/24056 - http://osvdb.org/31576 - http://www.securityfocus.com/bid/21964 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31366 - http://secunia.com/advisories/23700 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102713-1
CVE ID: CVE-2007-0166 State: PUBLISHED Published: 2007-01-11T20:00:00 Last Updated: 2024-08-07T12:12:17.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jail rc.d script in FreeBSD 5.3 up to 6.2 does not verify pathnames when writing to /var/log/console.log during a jail start-up, or when file systems are mounted or unmounted, which allows local root users to overwrite arbitrary files, or mount/unmount files, outside of the jail via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://security.freebsd.org/advisories/FreeBSD-SA-07:01.jail.asc - http://www.securityfocus.com/bid/22011 - http://osvdb.org/32726 - http://securitytracker.com/i
eeBSD-SA-07:01.jail.asc - http://www.securityfocus.com/bid/22011 - http://osvdb.org/32726 - http://securitytracker.com/id?1017505 - http://secunia.com/advisories/23730
CVE ID: CVE-2007-0167 State: PUBLISHED Published: 2007-01-10T01:00:00 Last Updated: 2024-08-07T12:12:16.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow remote attackers to execute arbitrary PHP code via a URL in the INC parameter in (1) config_admin.php, (2) config_main.php, (3) config_member.php, and (4) mysql_config.php in config/; (5) admin.php and (6) index.php in admini/; (7) paypalipn/ipnprocess.php; (8) index.php and (9) registration.php in members/; and (10) ppcbannerclick.php and (11) ppcclick.php in main/. Additional Analyst Notes: - CVE Program C
n.php in members/; and (10) ppcbannerclick.php and (11) ppcclick.php in main/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3104 - http://www.osvdb.org/33449 - http://www.osvdb.org/33445 - http://securityreason.com/securityalert/2134 - http://www.osvdb.org/33447 - http://www.osvdb.org/33454 - http://www.securityfocus.com/bid/21961 - http://www.securityfocus.com/archive/1/456386/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-January/001221.html - http://www.osvdb.org/33450 - http://www.osvdb.org/33444 - http://www.osvdb.org/33448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31355 - http://www.osvdb.org/33451 - htt
tp://www.osvdb.org/33448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31355 - http://www.osvdb.org/33451 - http://www.osvdb.org/33452 - http://www.osvdb.org/33446 - http://www.osvdb.org/33453
CVE ID: CVE-2007-0168 State: PUBLISHED Published: 2007-01-11T22:00:00 Last Updated: 2024-08-07T12:12:16.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed. Additional Analyst Notes: - CVE Program Container: References: - http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp - http://livesploit.com/advisories/LS-20061002.pdf - http://www.securityfocus.com/bid/22010 - https