Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
yfocus.com/bid/26276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38177 - http://secunia.com/advisories/27448 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK50245 - http://osvdb.org/41618 - http://www.vupen.com/english/advisories/2007/3672 - http://www.securitytracker.com/id?1018884
CVE ID: CVE-2007-5799 State: PUBLISHED Published: 2007-11-03T00:00:00 Last Updated: 2024-08-07T15:46:59.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to perform some actions as WAS UDDI users via the (1) keyField, (2) nameField, (3) valueField, and (4) frameReturn parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26276 - http://secunia.com/advisories/27448 - http://www-1.ibm.com/support/docview.wss?uid=swg1
ww.securityfocus.com/bid/26276 - http://secunia.com/advisories/27448 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK50245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38179 - http://osvdb.org/41619 - http://www.securitytracker.com/id?1018884
CVE ID: CVE-2007-5800 State: PUBLISHED Published: 2007-11-03T00:00:00 Last Updated: 2024-08-07T15:46:59.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to execute arbitrary PHP code via a URL in the bkpwp_plugin_path parameter to (1) plugins/BackUp/Archive.php; and (2) Predicate.php, (3) Writer.php, (4) Reader.php, and other unspecified scripts under plugins/BackUp/Archive/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38479 - http://wordpress.designpraxis.at/2007/11/01/security-vulnerability-in-backupwor
: References: - http://osvdb.org/38479 - http://wordpress.designpraxis.at/2007/11/01/security-vulnerability-in-backupwordpress/ - http://www.vupen.com/english/advisories/2007/3744 - http://osvdb.org/38476 - http://osvdb.org/38477 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38212 - https://www.exploit-db.com/exploits/4593 - http://www.securityfocus.com/bid/26290 - http://wordpress.designpraxis.at/2007/11/01/backupwordpress-security-release/ - http://osvdb.org/38478
CVE ID: CVE-2007-5801 State: PUBLISHED Published: 2007-11-03T00:00:00 Last Updated: 2024-08-07T15:47:00.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages." Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=549763 - http://www.securityfocus.com/bid/26292 - http://osvdb.org/42035 - http://secunia.com/advisories/27426
CVE ID: CVE-2007-5802 State: PUBLISHED Published: 2007-11-03T00:00:00 Last Updated: 2024-08-07T15:47:00.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. NOTE: this can be leveraged to obtain the path by including a local PHP script with a duplicate function declaration. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3335 - http://secunia.com/advisories/27466 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
reason.com/securityalert/3335 - http://secunia.com/advisories/27466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38217 - http://www.inj3ct-it.org/exploit/syner.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/38218 - http://www.securityfocus.com/bid/26289 - http://www.vupen.com/english/advisories/2007/3745 - http://www.securityfocus.com/archive/1/483099/100/0/threaded - http://osvdb.org/38371
CVE ID: CVE-2007-5803 State: PUBLISHED Published: 2008-05-13T23:00:00 Last Updated: 2024-08-07T15:47:00.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-5624 and CVE-2008-1360. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42522 - http://secunia.com/advisories/30202 - http://www.vupen.com/english/advisories/2008/1567/re
d.com/vulnerabilities/42522 - http://secunia.com/advisories/30202 - http://www.vupen.com/english/advisories/2008/1567/references - http://sourceforge.net/project/shownotes.php?release_id=600377&group_id=26589 - http://secunia.com/advisories/30283 - http://sourceforge.net/project/shownotes.php?release_id=600377 - http://www.securityfocus.com/bid/29140
CVE ID: CVE-2007-5804 State: PUBLISHED Published: 2007-11-05T17:00:00 Last Updated: 2024-08-07T15:47:00.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38154 - http://secunia.com/advisories/27437 - http://www.securityfocus.com/bid/26258 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ0305
.com/advisories/27437 - http://www.securityfocus.com/bid/26258 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055 - ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611 - http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405
CVE ID: CVE-2007-5805 State: PUBLISHED Published: 2007-11-05T17:00:00 Last Updated: 2024-08-07T15:47:00.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: this issue is due to an incomplete fix for CVE-2007-5804. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38154 - http://secunia.com/advisories/27437 - http://www.secur
s: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38154 - http://secunia.com/advisories/27437 - http://www.securityfocus.com/bid/26258 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055 - ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611 - http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405
CVE ID: CVE-2007-5806 State: PUBLISHED Published: 2007-11-05T17:00:00 Last Updated: 2024-08-07T15:47:00.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the (1) mailing or (2) forum component, as demonstrated using the style and onmouseover HTML attributes. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3340 - http://secunia.com/advisories/27457 - http://downloads.sourceforge.net/ilias/ilias.3.8.3.se
son.com/securityalert/3340 - http://secunia.com/advisories/27457 - http://downloads.sourceforge.net/ilias/ilias.3.8.3.security.patch.zip - http://www.securityfocus.com/archive/1/483011/100/0/threaded - http://www.ilias.de/docu/goto.php?target=st_229_35&client_id=docu - http://www.securityfocus.com/bid/26264 - http://osvdb.org/38328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38171
CVE ID: CVE-2007-5807 State: PUBLISHED Published: 2007-11-05T17:00:00 Last Updated: 2024-08-07T15:47:00.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40230 - http://www.securityfocus.com/bid/26247
CVE ID: CVE-2007-5808 State: PUBLISHED Published: 2007-11-05T17:00:00 Last Updated: 2024-08-07T15:47:00.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Groupmax Collaboration - Schedule component in Hitachi Groupmax Collaboration Portal 07-30 through 07-30-/F and 07-32 through 07-32-/C, uCosminexus Collaboration Portal 06-30 through 06-30-/F and 06-32 through 06-32-/C, and Groupmax Collaboration Web Client - Mail/Schedule 07-30 through 07-30-/F and 07-32 through 07-32-/B might allow remote attackers to obtain sensitive information via unspecified vectors related to schedule portlets. Additional Analyst Notes: - CVE Program Container: Reference
ation via unspecified vectors related to schedule portlets. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38188 - http://www.hitachi-support.com/security_e/vuls_e/HS07-036_e/index-e.html - http://www.vupen.com/english/advisories/2007/3667 - http://secunia.com/advisories/27451 - http://www.securityfocus.com/bid/26272 - http://osvdb.org/42025
CVE ID: CVE-2007-5809 State: PUBLISHED Published: 2007-11-05T17:00:00 Last Updated: 2024-08-07T15:47:00.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27421 - http://www.vupen.com/english/advisories/2007/3666 - http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html - http://www.securityfocus.com/bid/26271
3666 - http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html - http://www.securityfocus.com/bid/26271 - http://osvdb.org/42027
CVE ID: CVE-2007-5810 State: PUBLISHED Published: 2007-11-05T17:00:00 Last Updated: 2024-08-07T15:47:00.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42026 - http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html - http://secunia.com/advisories/27421 - http://www.vupen.com/english/advisories/2007/3666 - http://www.securityfocus.com/bid/
p://secunia.com/advisories/27421 - http://www.vupen.com/english/advisories/2007/3666 - http://www.securityfocus.com/bid/26271
CVE ID: CVE-2007-5811 State: PUBLISHED Published: 2007-11-05T17:00:00 Last Updated: 2024-08-07T15:47:00.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in PageTraiteDownload.php in phpMyConferences 8.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter. NOTE: this issue is disputed for 8.0.2 by a reliable third party, who notes that the PHP code is syntactically incorrect and cannot be executed Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-October/001844.html - http://www.attrition.org/pipermail/vim/2007-October/001845.html - http
tion.org/pipermail/vim/2007-October/001844.html - http://www.attrition.org/pipermail/vim/2007-October/001845.html - https://www.exploit-db.com/exploits/4590 - http://osvdb.org/39018 - http://www.securityfocus.com/bid/26278 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38183
CVE ID: CVE-2007-5812 State: PUBLISHED Published: 2007-11-05T17:00:00 Last Updated: 2024-08-07T15:47:00.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules/Builder/DownloadModule.php in ModuleBuilder 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38186
CVE ID: CVE-2007-5813 State: PUBLISHED Published: 2007-11-05T17:00:00 Last Updated: 2024-08-07T15:47:00.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) ticketid and (2) filename parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38187 - https://www.exploit-db.com/exploits/4592 - http://www.securityfocus.com/bid/26277 - http://secunia.com/advisories/27470
CVE ID: CVE-2007-5814 State: PUBLISHED Published: 2007-11-05T18:00:00 Last Updated: 2024-08-07T15:47:00.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allow remote attackers to execute arbitrary code via a long (1) serverAddress, (2) sessionId, (3) clientIPLower, (4) clientIPHigher, (5) userName, (6) domainName, or (7) dnsSuffix Unicode property value. NOTE: the AddRouteEntry vector is covered by CVE-2007-5603. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3696 - http://www.sec-
nalyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3696 - http://www.sec-consult.com/fileadmin/Advisories/20071101-0_sonicwall_multiple.txt - http://securityreason.com/securityalert/3342 - http://www.securityfocus.com/bid/26288 - http://secunia.com/advisories/27469 - http://www.securityfocus.com/archive/1/483097/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38220 - http://www.sec-consult.com/303.html
CVE ID: CVE-2007-5815 State: PUBLISHED Published: 2007-11-05T18:00:00 Last Updated: 2024-08-07T15:47:00.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3696 - http://www.sec-consult.com/fileadmin/Advisories/20071101-0_sonicwall_multiple.txt - http://securityreason.com/securityalert/3342 - http://www.secur
fileadmin/Advisories/20071101-0_sonicwall_multiple.txt - http://securityreason.com/securityalert/3342 - http://www.securityfocus.com/bid/26288 - http://secunia.com/advisories/27469 - http://www.securityfocus.com/archive/1/483097/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38221 - http://www.sec-consult.com/303.html
CVE ID: CVE-2007-5816 State: PUBLISHED Published: 2007-11-05T18:00:00 Last Updated: 2024-08-07T15:47:00.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obtain sensitive author credentials by making a request with an editauthor action, then reading the value of the newlocalpassword password input field in the HTML source of the resulting page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26291 - http://secunia.com/advisories/27440 - http://packetstorm.linuxsecurity.com/0710-exploits/contentcustom-disclose.txt - http://osvdb.org/39150
CVE ID: CVE-2007-5817 State: PUBLISHED Published: 2007-11-05T18:00:00.000Z Last Updated: 2025-04-03T14:17:15.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1) del, (2) delbackup, (3) res, or (4) ren action. NOTE: this issue can be leveraged to conduct cross-site scripting (XSS) and possibly other attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstorm.linuxsecurity.com/0710-exploits/contentcustom-disclose.txt - http://www.securityfocus.com/bid/26437
CVE ID: CVE-2007-5818 State: PUBLISHED Published: 2007-11-05T18:00:00 Last Updated: 2024-08-07T15:47:00.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in blocks_edit_do.php in sBlog 0.7.3 Beta allows remote attackers to change arbitrary blocks as administrators. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3341 - http://0x90.com.ar/Advisory/20071031.txt - http://secunia.com/advisories/27485 - http://www.securityfocus.com/archive/1/483108/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38216
CVE ID: CVE-2007-5819 State: PUBLISHED Published: 2007-11-05T18:00:00 Last Updated: 2024-08-07T15:47:00.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Continuous Data Protection for Files (CDP) 3.1.0 uses weak permissions (unrestricted write) for the Central Admin Global download directory, which allows local users to place arbitrary files into a location used for updating CDP clients. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38215 - http://secunia.com/advisories/27473 - http://www.securityfocus.com/bid/26293 - http://www-1.ibm.com/suppo
lities/38215 - http://secunia.com/advisories/27473 - http://www.securityfocus.com/bid/26293 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC54264
CVE ID: CVE-2007-5820 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4599 - http://osvdb.org/39021 - http://www.vupen.com/english/advisories/2007/3749 - http://www.securityfocus.com/bid/26306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38224
CVE ID: CVE-2007-5821 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the lng parameter to (a) guestbook.php, (b) admin/admin.guestbook.php, or (c) auto/glob_new.php; or (2) the lngdefault parameter to auto/ch_lng.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39066 - http://www.securityfocus.com/bid/26300 - http://osvdb.org/39067 - http://osvdb.org/39065 - https://www.exploit-db.com/ex
http://www.securityfocus.com/bid/26300 - http://osvdb.org/39067 - http://osvdb.org/39065 - https://www.exploit-db.com/exploits/4597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38219 - http://osvdb.org/39064 - http://www.vupen.com/english/advisories/2007/3747
CVE ID: CVE-2007-5822 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4596 - http://www.securityfocus.com/archive/1/483183/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38227 - http://osvdb.
tyfocus.com/archive/1/483183/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38227 - http://osvdb.org/45287 - http://www.vupen.com/english/advisories/2007/3746 - http://www.inj3ct-it.org/exploit/scribe.txt - http://www.securityfocus.com/bid/26302 - http://securityreason.com/securityalert/3339
CVE ID: CVE-2007-5823 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the username parameter in a Register action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4596 - http://www.securityfocus.com/archive/1/483183/100/0/threaded - http://www.inj3ct-it.org/exploit/scribe.txt - http://securityreason.com/securityalert/3339 - http://osvdb.org/39063
CVE ID: CVE-2007-5824 State: PUBLISHED Published: 2007-11-05T19:00:00 Last Updated: 2024-08-07T15:47:00.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a stats method action to /xml-rpc with (1) an empty Authorization header line, which triggers a crash in the ws_decodepassword function; or (2) a header line without a ':' character, which triggers a crash in the ws_getheaders function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38242 - http://www
st Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38242 - http://www.debian.org/security/2008/dsa-1597 - http://www.securityfocus.com/archive/1/483211/100/0/threaded - http://www.securityfocus.com/bid/26309 - http://www.securityfocus.com/archive/1/483215/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38241 - http://secunia.com/advisories/28269 - https://www.exploit-db.com/exploits/4600 - http://www.securityfocus.com/archive/1/483210/100/0/threaded - http://sourceforge.net/project/shownotes.php?group_id=98211&release_id=548679 - http://bugs.gentoo.org/show_bug.cgi?id=200110 - http://secunia.com/advisories/30661 - http:
id=98211&release_id=548679 - http://bugs.gentoo.org/show_bug.cgi?id=200110 - http://secunia.com/advisories/30661 - http://www.gentoo.org/security/en/glsa/glsa-200712-18.xml