Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
m Container: References: - http://www.icecast.org/ezstream.php#ez_relnotes - http://www.securityfocus.com/bid/22840 - http://osvdb.org/33869 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32867 - http://secunia.com/advisories/24383 - http://www.vupen.com/english/advisories/2007/0852
CVE ID: CVE-2007-1345 State: PUBLISHED Published: 2007-03-10T19:00:00 Last Updated: 2024-08-07T12:50:35.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in cube.exe in the GINA component for CA (Computer Associates) eTrust Admin 8.1.0 through 8.1.2 allows attackers with physical interactive or Remote Desktop access to bypass authentication and gain privileges via the password reset interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22885 - http://www.securityfocus.com/archive/1/462312/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32887 - http://www.securitytracker.com/id
1/462312/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32887 - http://www.securitytracker.com/id?1017740 - http://www.osvdb.org/32722 - http://securityreason.com/securityalert/2404 - http://secunia.com/advisories/24441 - http://www.vupen.com/english/advisories/2007/0885 - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=35145
CVE ID: CVE-2007-1346 State: PUBLISHED Published: 2007-03-08T01:00:00 Last Updated: 2024-08-07T12:50:35.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ipmitool for Sun Fire X2100M2 and X2200M2 allows local users to gain privileges and reset or turn off the server. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33889 - http://www.securityfocus.com/bid/22859 - http://secunia.com/advisories/24447 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102828-1 - http://www.vupen.com/english/advisories/2007/0869 - http://www.securitytracker.com/id?1017738
CVE ID: CVE-2007-1347 State: PUBLISHED Published: 2007-03-08T01:00:00 Last Updated: 2024-08-07T12:50:35.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption and crash) via an Office file with crafted document summary information, which causes an error in Ole32.dll. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2007/08/windows-extended-file-attributes-buffer.html - http://osvdb.org/36141 - http://www.securityfocus.com/bid/22847 - https://www.exploit-db.com/ex
attributes-buffer.html - http://osvdb.org/36141 - http://www.securityfocus.com/bid/22847 - https://www.exploit-db.com/exploits/3419 - http://www.securitytracker.com/id?1017736 - http://www.kb.cert.org/vuls/id/194944
CVE ID: CVE-2007-1348 State: REJECTED Published: 2018-02-23T16:00:00 Last Updated: 2018-02-23T15:57:01 Description: No description available.
CVE ID: CVE-2007-1349 State: PUBLISHED Published: 2007-03-30T00:00:00 Last Updated: 2024-08-07T12:50:35.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26231 - http://www.securitytracker.com/id?1018259 - http://secunia.com/advisories/25894 - http://rhn.redhat.com/errata/RHSA-2008-0630.html - http://rhn.redhat.com/errata/RHSA-2007-039
nia.com/advisories/25894 - http://rhn.redhat.com/errata/RHSA-2008-0630.html - http://rhn.redhat.com/errata/RHSA-2007-0395.html - http://www.redhat.com/support/errata/RHSA-2007-0486.html - http://secunia.com/advisories/31493 - http://www.gossamer-threads.com/lists/modperl/modperl/92739 - http://www.redhat.com/support/errata/RHSA-2008-0627.html - http://svn.apache.org/repos/asf/perl/modperl/branches/1.x/Changes - http://secunia.com/advisories/24839 - http://secunia.com/advisories/33720 - http://www.ubuntu.com/usn/usn-488-1 - http://secunia.com/advisories/31490 - http://www.novell.com/linux/security/advisories/2007_12_sr.html - http://secunia.com/advisories/26084 - http://www.vupen.com/english/
vell.com/linux/security/advisories/2007_12_sr.html - http://secunia.com/advisories/26084 - http://www.vupen.com/english/advisories/2007/1150 - http://secunia.com/advisories/25655 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021508.1-1 - http://support.avaya.com/elmodocs2/security/ASA-2007-293.htm - http://secunia.com/advisories/24678 - http://secunia.com/advisories/25110 - http://www.redhat.com/support/errata/RHSA-2007-0396.html - http://www.trustix.org/errata/2007/0023/ - http://www.mandriva.com/security/advisories?name=MDKSA-2007:083 - http://secunia.com/advisories/33723 - http://secunia.com/advisories/25730 - http://www.novell.com/linux/security/advisories/2007_8_sr.html -
visories/33723 - http://secunia.com/advisories/25730 - http://www.novell.com/linux/security/advisories/2007_8_sr.html - http://secunia.com/advisories/26290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33312 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://security.gentoo.org/glsa/glsa-200705-04.xml - http://www.securityfocus.com/bid/23192 - ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc - http://secunia.com/advisories/25072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10987 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8349 - http://secunia.com/advisor
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8349 - http://secunia.com/advisories/25432 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-248386-1
CVE ID: CVE-2007-1350 State: PUBLISHED Published: 2007-03-08T00:00:00 Last Updated: 2024-08-07T12:50:34.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code via a long username during HTTP Basic authentication. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24445 - http://www.vupen.com/english/advisories/2007/0870 - http://www.securityfocus.com/archive/1/462154/100/0/threaded - http://www.securitytracker.com/id?1017734 - http://www.kb.cert.org/vuls/id/919369 - http://www.securityfocus.com/bid/22857 - http://download.n
cker.com/id?1017734 - http://www.kb.cert.org/vuls/id/919369 - http://www.securityfocus.com/bid/22857 - http://download.novell.com/Download?buildid=sMYRODW09pw - http://securityreason.com/securityalert/2395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32861 - http://www.zerodayinitiative.com/advisories/ZDI-07-009.html
CVE ID: CVE-2007-1351 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T12:50:35.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0150.html - http://secunia.com/advisories/24745 - http://secunia.com/advisories/24921 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%
- http://secunia.com/advisories/24921 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810 - http://secunia.com/advisories/33937 - http://www.trustix.org/errata/2007/0013/ - http://secunia.com/advisories/24771 - http://security.gentoo.org/glsa/glsa-200705-02.xml - http://secunia.com/advisories/24889 - http://secunia.com/advisories/24770 - http://secunia.com/advisories/25006 - http://secunia.com/advisories/24756 - http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=498954 - http://secunia.com/advisories/25495 - http://secunia.com/advisories/24996 - http://www.securityfocus.com/bid/23283 - http://www.redhat.com/support/errata/RHSA-200
://secunia.com/advisories/24996 - http://www.securityfocus.com/bid/23283 - http://www.redhat.com/support/errata/RHSA-2007-0126.html - http://www.securityfocus.com/bid/23300 - http://support.apple.com/kb/HT3438 - http://security.gentoo.org/glsa/glsa-200705-10.xml - http://www.ubuntu.com/usn/usn-448-1 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:080 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.626733 - http://www.novell.com/linux/security/advisories/2007_6_sr.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:081 - http://www.debian.org/secu
advisories/2007_6_sr.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:081 - http://www.debian.org/security/2008/dsa-1454 - http://secunia.com/advisories/24758 - http://www.vupen.com/english/advisories/2007/1264 - http://www.securitytracker.com/id?1017857 - http://secunia.com/advisories/24885 - http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm - http://secunia.com/advisories/25096 - http://secunia.com/advisories/25195 - http://rhn.redhat.com/errata/RHSA-2007-0125.html - http://secunia.com/advisories/24741 - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html - http://secunia.com/advisories/24776 - http://secunia.com/advisories/28333 - http://s
y-announce/2007/Nov/msg00003.html - http://secunia.com/advisories/24776 - http://secunia.com/advisories/28333 - http://secunia.com/advisories/24768 - http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html - http://secunia.com/advisories/24791 - http://www.novell.com/linux/security/advisories/2007_27_x.html - http://secunia.com/advisories/30161 - http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml - http://sourceforge.net/project/shownotes.php?release_id=498954 - http://www.debian.org/security/2007/dsa-1294 - http://secunia.com/advisories/24765 - http://secunia.com/advisories/25216 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501 - http://ww
tp://secunia.com/advisories/25216 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501 - http://www.securityfocus.com/archive/1/464686/100/0/threaded - http://www.securityfocus.com/archive/1/464816/100/0/threaded - http://www.vupen.com/english/advisories/2007/1548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33417 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1 - http://www.vupen.com/english/advisories/2007/1217 - http://www.openbsd.org/errata40.html#011_xorg - https://issues.rpath.com/browse/RPL-1213 - http://www.securityfocus.com/bid/23402 - http://secunia.com/advisories/25004 - http://secunia.com/advisories/25305 - https://oval.cisecurit
focus.com/bid/23402 - http://secunia.com/advisories/25004 - http://secunia.com/advisories/25305 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11266 - http://www.redhat.com/support/errata/RHSA-2007-0132.html - http://secunia.com/advisories/24772 - http://support.avaya.com/elmodocs2/security/ASA-2007-193.htm - http://www.openbsd.org/errata39.html#021_xorg - http://issues.foresightlinux.org/browse/FL-223 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:079
CVE ID: CVE-2007-1352 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T12:50:35.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=502 - http://secunia.com/advisories/24745 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10523 - http://secunia.com/advisories/33937
al.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10523 - http://secunia.com/advisories/33937 - http://secunia.com/advisories/24771 - http://secunia.com/advisories/24770 - http://secunia.com/advisories/25006 - http://secunia.com/advisories/24756 - http://www.securityfocus.com/bid/23283 - http://www.redhat.com/support/errata/RHSA-2007-0126.html - http://www.securityfocus.com/bid/23300 - http://support.apple.com/kb/HT3438 - http://security.gentoo.org/glsa/glsa-200705-10.xml - http://www.ubuntu.com/usn/usn-448-1 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:080 - http://secunia.
rity-announce/2009/Feb/msg00000.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:080 - http://secunia.com/advisories/24758 - http://www.securitytracker.com/id?1017857 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13243 - http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm - http://secunia.com/advisories/25195 - http://rhn.redhat.com/errata/RHSA-2007-0125.html - http://secunia.com/advisories/24741 - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html - http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html - http://secunia.com/advisories/24791 - http://www.novell.com/linux/security/a
ives/xorg-announce/2007-April/000286.html - http://secunia.com/advisories/24791 - http://www.novell.com/linux/security/advisories/2007_27_x.html - http://www.debian.org/security/2007/dsa-1294 - http://secunia.com/advisories/24765 - http://secunia.com/advisories/25216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33419 - http://www.securityfocus.com/archive/1/464686/100/0/threaded - http://www.securityfocus.com/archive/1/464816/100/0/threaded - http://www.vupen.com/english/advisories/2007/1548 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1 - http://www.vupen.com/english/advisories/2007/1217 - http://www.openbsd.org/errata40.html#011_xorg - https://issues.rpath.co
p://www.vupen.com/english/advisories/2007/1217 - http://www.openbsd.org/errata40.html#011_xorg - https://issues.rpath.com/browse/RPL-1213 - http://secunia.com/advisories/25004 - http://secunia.com/advisories/25305 - http://www.redhat.com/support/errata/RHSA-2007-0132.html - http://secunia.com/advisories/24772 - http://www.openbsd.org/errata39.html#021_xorg - http://issues.foresightlinux.org/browse/FL-223 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:079
CVE ID: CVE-2007-1353 State: PUBLISHED Published: 2007-04-24T16:00:00 Last Updated: 2024-08-07T12:50:35.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10626 - http://www.vupen.com/english/advisories/2007/1495 - http://www.ubuntu.com/usn/us
n/oval%3Aorg.mitre.oval%3Adef%3A10626 - http://www.vupen.com/english/advisories/2007/1495 - http://www.ubuntu.com/usn/usn-470-1 - http://www.redhat.com/support/errata/RHSA-2007-0673.html - http://secunia.com/advisories/26289 - http://secunia.com/advisories/27528 - http://secunia.com/advisories/26379 - http://secunia.com/advisories/25838 - http://www.debian.org/security/2008/dsa-1504 - http://www.debian.org/security/2007/dsa-1356 - http://secunia.com/advisories/25683 - http://www.redhat.com/support/errata/RHSA-2007-0672.html - http://www.ubuntu.com/usn/usn-489-1 - http://secunia.com/advisories/26478 - http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/24976 - http://
unia.com/advisories/26478 - http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/24976 - http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm - http://www.redhat.com/support/errata/RHSA-2007-0671.html - http://secunia.com/advisories/29058 - http://secunia.com/advisories/25596 - http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.3 - https://rhn.redhat.com/errata/RHSA-2007-0376.html - http://www.ubuntu.com/usn/usn-486-1 - http://secunia.com/advisories/26450 - http://www.novell.com/linux/security/advisories/2007_35_kernel.html - http://secunia.com/advisories/25700 - http://secunia.com/advisories/26139 - http://www.securityfocus.com/bid/23594 - http://rh
/secunia.com/advisories/25700 - http://secunia.com/advisories/26139 - http://www.securityfocus.com/bid/23594 - http://rhn.redhat.com/errata/RHSA-2007-0488.html - http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm - http://secunia.com/advisories/26133
CVE ID: CVE-2007-1354 State: PUBLISHED Published: 2007-07-27T21:00:00 Last Updated: 2024-08-07T12:50:35.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5 before 20070416 uses a member variable to store the roles of the current user, which allows remote authenticated administrators to trigger a race condition and gain privileges by logging in during a session by a more privileged administrator, as demonstrated by privilege escalation from Read Mode to Write Mode. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-
Mode to Write Mode. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2007-0151.html - http://jira.jboss.com/jira/browse/ASPATCH-172 - http://www.redhat.com/archives/jboss-watch-list/2007-April/msg00000.html - http://jira.jboss.com/jira/browse/ASPATCH-175 - http://osvdb.org/46765
CVE ID: CVE-2007-1355 State: PUBLISHED Published: 2007-05-21T20:00:00 Last Updated: 2024-08-07T12:50:35.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attackers to inject arbitrary web script or HTML via the test parameter and unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://secunia.com/advisories/30908 - http://support.apple.com/kb/HT2163 - http://rhn
omcat.apache.org/security-4.html - http://secunia.com/advisories/30908 - http://support.apple.com/kb/HT2163 - http://rhn.redhat.com/errata/RHSA-2008-0630.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6111 - http://www.vupen.com/english/advisories/2008/1981/references - http://secunia.com/advisories/30899 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html - http://secunia.com/advisories/31493 - http://www.vupen.com/english/advisories/2008/1979/references - http://osvdb.org/34875 - http://www.securityfocus.com/archive/1/500412/100/0/threaded - h
isories/2008/1979/references - http://osvdb.org/34875 - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://secunia.com/advisories/33668 - http://www.securityfocus.com/archive/1/500396/100/0/threaded - http://securityreason.com/securityalert/2722 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.securityfocus.com/bid/24058 - http://www.vupen.com/english/advisories/2009/0233 - http://tomcat.apache.org/security-6.html - http://www.vupen.com/english/advisories/2007/3386 - http://secunia.com/advisories/30802 - http://secunia.com/advisories/27037 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://sec
nia.com/advisories/27037 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://secunia.com/advisories/27727 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://tomcat.apache.org/security-5.html - http://www.securityfocus.com/archive/1/469067/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0261.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34377 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327a
hpsupcontent?contentID=197540 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2007-1356 State: REJECTED Published: 2007-08-23T22:00:00Z Last Updated: 2024-09-16T20:57:50.816Z Description: No description available.
CVE ID: CVE-2007-1357 State: PUBLISHED Published: 2007-04-11T00:00:00 Last Updated: 2024-08-07T12:50:35.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service (crash) via an AppleTalk frame that is shorter than the specified length, which triggers a BUG_ON call when an attempt is made to perform a checksum. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2007/dsa-1286 - http://www.vupen.com/english/advisories/2007/1340 - http://www.ubuntu.com/usn/usn-464-1 - http://www.novell.com/linux/s
http://www.vupen.com/english/advisories/2007/1340 - http://www.ubuntu.com/usn/usn-464-1 - http://www.novell.com/linux/security/advisories/2007_43_kernel.html - http://secunia.com/advisories/24901 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235857 - http://www.securityfocus.com/bid/23376 - https://issues.rpath.com/browse/RPL-1244 - http://secunia.com/advisories/25226 - http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.5 - http://secunia.com/advisories/25683 - http://secunia.com/advisories/24793 - http://secunia.com/advisories/25099 - http://www.securityfocus.com/archive/1/471457 - http://secunia.c
dvisories/24793 - http://secunia.com/advisories/25099 - http://www.securityfocus.com/archive/1/471457 - http://secunia.com/advisories/25961 - http://secunia.com/advisories/25078 - http://secunia.com/advisories/25392 - http://www.novell.com/linux/security/advisories/2007_30_kernel.html - http://www.debian.org/security/2007/dsa-1304 - http://secunia.com/advisories/25714 - http://www.novell.com/linux/security/advisories/2007_35_kernel.html - http://secunia.com/advisories/25691
CVE ID: CVE-2007-1358 State: PUBLISHED Published: 2007-05-09T22:00:00 Last Updated: 2024-08-07T12:50:35.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616". Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://secunia.com/advisories/30908 - http://secunia.com/advisories/25721 - http://www.vupen.com/english/advisories/2007/2732 - http://rhn.redhat.com/errata/RHS