Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4547 State: PUBLISHED Published: 2007-08-27T23:00:00 Last Updated: 2024-08-07T15:01:09.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unreal Commander 0.92 build 565 and 573 writes portions of heap memory into local files when extracting from an archive with malformed size information in a file header, which might allow user-assisted attackers to obtain sensitive information (memory contents) by reading the extracted files. NOTE: this issue is only a vulnerability if Unreal is run with privileges, or if the extracted files are made accessible to other users. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityal
le to other users. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3060 - http://www.securityfocus.com/archive/1/477432/100/0/threaded - http://www.securityfocus.com/bid/25419 - http://osvdb.org/45832
CVE ID: CVE-2007-4548 State: PUBLISHED Published: 2007-08-27T23:00:00Z Last Updated: 2024-09-17T01:50:41.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw FailedLoginException for failed logins, which allows remote attackers to bypass authentication requirements, deploy arbitrary modules, and gain administrative access by sending a blank username and password with the command line deployer in the deployment module. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/GERONIMO-3404 - http://geronimo.apache.org/2007/08/13/apache-geronimo-v20-rele
: - https://issues.apache.org/jira/browse/GERONIMO-3404 - http://geronimo.apache.org/2007/08/13/apache-geronimo-v20-release-delayed-due-to-security-issue.html - http://geronimo.apache.org/2007/08/21/apache-geronimo-201-released.html - http://www.nabble.com/Geronimo-2.0-Release-suspended-due-to-security-issue-found-before-release-t4263667s134.html - https://issues.apache.org/jira/browse/GERONIMO-1201
CVE ID: CVE-2007-4549 State: PUBLISHED Published: 2007-08-28T00:00:00 Last Updated: 2024-08-07T15:01:09.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in ALPass 2.7 English and 3.02 Korean allow user-assisted remote attackers to execute arbitrary code via an ALPass DB (APW) file containing (1) a long file-key or (2) a "Site Information and Folder entry" with a ciphertext_length value much larger than the plaintext_length value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36257 - http://vuln.sg/alpass27-en.html - http
nerabilities/36235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36257 - http://vuln.sg/alpass27-en.html - http://secunia.com/advisories/26616 - http://www.securityfocus.com/bid/25435
CVE ID: CVE-2007-4550 State: PUBLISHED Published: 2007-08-28T00:00:00 Last Updated: 2024-08-07T15:01:09.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB (APW) file. Additional Analyst Notes: - CVE Program Container: References: - http://vuln.sg/alpass27-en.html - http://secunia.com/advisories/26616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36256 - http://www.securityfocus.com/bid/25435
CVE ID: CVE-2007-4551 State: PUBLISHED Published: 2007-08-28T00:00:00 Last Updated: 2024-08-07T15:01:09.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://forums.agaresmedia.com/viewtopic.php?f=13&t=19 - http://osvdb.org/36856 - http://www.securityfocus.com/bid/25432 - http://14house.blogspot.com/2007/08/arcadem-rfi-sql-injection-flaws.html - http://secunia.com/advisories/26574
CVE ID: CVE-2007-4552 State: PUBLISHED Published: 2007-08-28T00:00:00 Last Updated: 2024-08-07T15:01:09.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary SQL commands via the blockpage parameter. NOTE: as of 20070827, the vendor has made conflicting statements regarding whether this issue exists or not. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36857 - http://www.securityfocus.com/bid/25418 - http://forums.agaresmedia.com/viewtopic.php?f=13&t=19 - http://14house.blogspot.com/2007/08/arcadem-rfi-sql-injection-flaws.html - http
garesmedia.com/viewtopic.php?f=13&t=19 - http://14house.blogspot.com/2007/08/arcadem-rfi-sql-injection-flaws.html - http://secunia.com/advisories/26574
CVE ID: CVE-2007-4553 State: PUBLISHED Published: 2007-08-28T00:00:00 Last Updated: 2024-08-07T15:01:09.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via an INVITE message with a Via header that contains a '/' (slash) instead of the required space following the SIP version number. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26587 - http://www.securityfocus.com/bid/25446 - http://www.vupen.com/english/advisories/2007/2988 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065433.html - https://e
om/english/advisories/2007/2988 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065433.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36217 - http://securityreason.com/securityalert/3075 - http://www.securitytracker.com/id?1018603
CVE ID: CVE-2007-4554 State: PUBLISHED Published: 2007-08-28T00:00:00 Last Updated: 2024-08-07T15:01:09.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tiki-remind_password.php in Tikiwiki (aka Tiki CMS/Groupware) 1.9.7 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: this issue might be related to CVE-2006-2635.7. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477653/100/0/threaded - http://www.securityfocus.com/bid/25433 - http://securityreason.com/securityalert/3064 - http://www.vupen.com/english/advisories/2007/2984 - http://
m/bid/25433 - http://securityreason.com/securityalert/3064 - http://www.vupen.com/english/advisories/2007/2984 - http://secunia.com/advisories/26618
CVE ID: CVE-2007-4555 State: PUBLISHED Published: 2007-08-28T00:00:00 Last Updated: 2024-08-07T15:01:09.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to create a new admin account. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37961 - http://securityreason.com/securityalert/3068 - http://secunia.com/advisories/26529 - http://lists.grok.org.uk/pipermail
http://securityreason.com/securityalert/3068 - http://secunia.com/advisories/26529 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065441.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36237
CVE ID: CVE-2007-4556 State: PUBLISHED Published: 2007-08-28T01:00:00 Last Updated: 2024-08-07T15:01:09.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as used in WebWork and Apache Struts, recursively evaluates all input as an Object-Graph Navigation Language (OGNL) expression when altSyntax is enabled, which allows remote attackers to cause a denial of service (infinite loop) or execute arbitrary code via form input beginning with a "%{" sequence and ending with a "}" character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25524 - http://jira.opensym
ional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25524 - http://jira.opensymphony.com/browse/XW-544 - http://issues.apache.org/struts/browse/WW-2030 - http://www.vupen.com/english/advisories/2007/3041 - http://forums.opensymphony.com/ann.jspa?annID=54 - http://www.vupen.com/english/advisories/2007/3042 - http://secunia.com/advisories/26693 - http://secunia.com/advisories/26681 - http://wiki.opensymphony.com/display/WW/1.2.3+Press+Release - http://jira.opensymphony.com/secure/ReleaseNote.jspa?projectId=10050&styleName=Html&version=21706 - http://osvdb.org/37072 - http://struts.apache.org/2.x/docs/s2-001.html - http://jira.opensymphony.com/secure/Rel
21706 - http://osvdb.org/37072 - http://struts.apache.org/2.x/docs/s2-001.html - http://jira.opensymphony.com/secure/ReleaseNote.jspa?projectId=10050&styleName=Html&version=21701 - http://secunia.com/advisories/26694
CVE ID: CVE-2007-4557 State: PUBLISHED Published: 2007-08-28T01:00:00Z Last Updated: 2024-09-16T19:04:16.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the webacc servlet in Novell GroupWise 6.5 WebAccess allows remote attackers to inject arbitrary web script or HTML via the User.Id parameter, as demonstrated by a URL within a url field in a STYLE element, possibly due to an incomplete fix for CVE-2004-2103.2. Additional Analyst Notes: - CVE Program Container: References: - http://0x000000.com/index.php?i=409
CVE ID: CVE-2007-4558 State: REJECTED Published: 2007-08-28T01:00:00Z Last Updated: 2024-09-16T22:14:39.496Z Description: No description available.
CVE ID: CVE-2007-4559 State: PUBLISHED Published: 2007-08-28T00:00:00 Last Updated: 2025-01-17T14:48:23.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/26623 - http://www.vupen.com/english/advisories/2007/3022 - https://bugzilla.redhat.com/show_bug.cgi?id=263261 - http://mail.python.org/pi
.vupen.com/english/advisories/2007/3022 - https://bugzilla.redhat.com/show_bug.cgi?id=263261 - http://mail.python.org/pipermail/python-dev/2007-August/074290.html - http://mail.python.org/pipermail/python-dev/2007-August/074292.html - https://security.gentoo.org/glsa/202309-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/
CVE ID: CVE-2007-4560 State: PUBLISHED Published: 2007-08-28T01:00:00 Last Updated: 2024-08-07T15:01:09.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail." Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200709-14.xml - http://securityreason.com/securityalert/3063 - http://secunia.com/advisories/26822 - http://secunia.com/advisories/26916 - http://www.securityfocus.com/archive/1/477723/100/0/threaded
om/advisories/26822 - http://secunia.com/advisories/26916 - http://www.securityfocus.com/archive/1/477723/100/0/threaded - http://secunia.com/advisories/26683 - http://www.nruns.com/security_advisory_clamav_remote_code_exection.php - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00104.html - http://www.debian.org/security/2007/dsa-1366 - http://www.vupen.com/english/advisories/2008/0924/references - http://www.trustix.org/errata/2007/0026/ - http://secunia.com/advisories/29420 - http://www.novell.com/linux/security/advisories/2007_18_sr.html - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://secunia.com/advisories/26751 - http://ww
tp://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://secunia.com/advisories/26751 - http://www.securitytracker.com/id?1018610 - http://secunia.com/advisories/26654 - http://docs.info.apple.com/article.html?artnum=307562 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:172 - http://secunia.com/advisories/26674 - http://www.securityfocus.com/bid/25439
CVE ID: CVE-2007-4561 State: PUBLISHED Published: 2007-08-28T01:00:00 Last Updated: 2024-08-07T15:01:09.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25440 - http://marc.info/?l=full-disclosure&m=118800391412961&w=2 - http://www.vupen.com/english/advisories/2007/2986 - http://labs.musecurity.com/wp-content/uploads/2007/08/mu-200708-01.txt - http://secunia.com/advisories/26609 - http://www.secu
/labs.musecurity.com/wp-content/uploads/2007/08/mu-200708-01.txt - http://secunia.com/advisories/26609 - http://www.securitytracker.com/id?1018605 - http://securityreason.com/securityalert/3069
CVE ID: CVE-2007-4562 State: PUBLISHED Published: 2007-08-28T01:00:00 Last Updated: 2024-08-07T15:01:09.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02-04-/C and 03-05-/E allows remote attackers to cause a denial of service (connection prevention) by sending "data unexpectedly through a port." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26592 - http://www.hitachi-support.com/security_e/vuls_e/HS07-026_e/index-e.html - http://www.securityfocus.com/bid/25431 - http://osvdb.org/37856 - http://www.vupen.com/english/advisories/2007/2989
ml - http://www.securityfocus.com/bid/25431 - http://osvdb.org/37856 - http://www.vupen.com/english/advisories/2007/2989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36246
CVE ID: CVE-2007-4563 State: PUBLISHED Published: 2007-08-28T01:00:00 Last Updated: 2024-08-07T15:01:09.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37854 - http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html - http://www.securityfocus.com/bid/25434 - http://secunia.com/advisories/26589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36245
CVE ID: CVE-2007-4564 State: PUBLISHED Published: 2007-08-28T01:00:00 Last Updated: 2024-08-07T15:01:09.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html - http://www.securityfocus.com/bid/25434 - http://osvdb.org/37855 - http://secunia.com/advisories/26589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36245
CVE ID: CVE-2007-4565 State: PUBLISHED Published: 2007-08-28T01:00:00 Last Updated: 2024-08-07T15:01:09.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service (NULL dereference and application crash) by refusing certain warning messages that are sent over SMTP. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33937 - http://securityreason.com/securityalert/3074 - http://fetchmail.berlios.de/fetchmail-SA-2007-02.txt - http://mknod.org/svn/fetchmail/branches/BRANCH_6-3/fetchmail-SA-2007-02.txt - http://support.apple.com/kb/HT3438 - http://www.s
mknod.org/svn/fetchmail/branches/BRANCH_6-3/fetchmail-SA-2007-02.txt - http://support.apple.com/kb/HT3438 - http://www.securitytracker.com/id?1018627 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.securityfocus.com/archive/1/493388/100/0/threaded - http://www.trustix.org/errata/2007/0028/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10528 - http://www.securityfocus.com/bid/25495 - http://www.vupen.com/english/advisories/2007/3032 - http://www.vupen.com/english/advisories/2009/0422 - http://www.securityfocus.com/archive/1/478798/100/0/threaded - http://secunia.com/advisories/27399 - https://exchange.xforce.ib
www.securityfocus.com/archive/1/478798/100/0/threaded - http://secunia.com/advisories/27399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36385 - http://www.debian.org/security/2007/dsa-1377 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:179 - https://issues.rpath.com/browse/RPL-1690 - http://www.ubuntu.com/usn/usn-520-1 - http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html - http://osvdb.org/45833
CVE ID: CVE-2007-4566 State: PUBLISHED Published: 2007-08-28T01:00:00 Last Updated: 2024-08-07T15:01:09.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018612 - http://secunia.com/advisories/26613 - http://securityreason.com/securityalert/3061 - http://www.securityfocus.com/bid/25460 - http://www.securityfocus.com/archive/1/477821/100
ason.com/securityalert/3061 - http://www.securityfocus.com/bid/25460 - http://www.securityfocus.com/archive/1/477821/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36272 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html - http://www.vupen.com/english/advisories/2007/2976
CVE ID: CVE-2007-4567 State: PUBLISHED Published: 2007-12-21T00:00:00 Last Updated: 2024-08-07T15:01:09.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39171 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7474 - http://bugzilla.kernel.org/show_bu
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7474 - http://bugzilla.kernel.org/show_bug.cgi?id=8450 - http://secunia.com/advisories/28706 - https://bugzilla.redhat.com/show_bug.cgi?id=548641 - http://www.redhat.com/support/errata/RHSA-2010-0053.html - http://www.redhat.com/support/errata/RHSA-2010-0019.html - http://www.securityfocus.com/bid/26943 - https://usn.ubuntu.com/558-1/ - http://secunia.com/advisories/25505 - http://www.ubuntu.com/usn/usn-574-1 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11083 - http://secunia.com/advisories/28170 - http://secunia.com/ad
tory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11083 - http://secunia.com/advisories/28170 - http://secunia.com/advisories/38015 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e76b2b2567b83448c2ee85a896433b96150c92e6
CVE ID: CVE-2007-4568 State: PUBLISHED Published: 2007-10-05T21:00:00 Last Updated: 2024-08-07T15:01:09.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2007_54_xorg.html - http://www.securitytracker.com/id?1018763 - http://secunia.com/advisories/28542 - http://docs.info.apple.com/article.h
- http://www.securitytracker.com/id?1018763 - http://secunia.com/advisories/28542 - http://docs.info.apple.com/article.html?artnum=307430 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200642-1 - http://secunia.com/advisories/28891 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00352.html - http://www.securityfocus.com/archive/1/481432/100/0/threaded - http://secunia.com/advisories/27052 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602 - http://www.vupen.com/english/advisories/2008/0495/references - http://secunia.com/advisories/27060 - http://www.vupen.com/english/advisories/2008/0924/references - http://lists.freedesktop.org
cunia.com/advisories/27060 - http://www.vupen.com/english/advisories/2008/0924/references - http://lists.freedesktop.org/archives/xorg-announce/2007-October/000416.html - http://www.redhat.com/support/errata/RHSA-2008-0029.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36919 - http://secunia.com/advisories/28004 - http://secunia.com/advisories/27240 - http://secunia.com/advisories/27168 - https://issues.rpath.com/browse/RPL-1756 - http://secunia.com/advisories/29420 - http://secunia.com/advisories/27040 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://secunia.com/advisories/27176 - http://www.debian.org/security/2007/dsa-1385 - http://security.
ar/msg00001.html - http://secunia.com/advisories/27176 - http://www.debian.org/security/2007/dsa-1385 - http://security.gentoo.org/glsa/glsa-200710-11.xml - http://secunia.com/advisories/27228 - http://www.vupen.com/english/advisories/2007/3467 - http://www.redhat.com/support/errata/RHSA-2008-0030.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:210 - http://www.securityfocus.com/bid/25898 - http://bugs.gentoo.org/show_bug.cgi?id=194606 - http://www.us-cert.gov/cas/techalerts/TA08-043B.html - http://www.vupen.com/english/advisories/2007/3338 - http://secunia.com/advisories/27560 - http://docs.info.apple.com
l - http://www.vupen.com/english/advisories/2007/3338 - http://secunia.com/advisories/27560 - http://docs.info.apple.com/article.html?artnum=307562 - http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10882 - http://www.vupen.com/english/advisories/2007/3337 - http://secunia.com/advisories/28536 - http://bugs.freedesktop.org/show_bug.cgi?id=12298