Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
//security.gentoo.org/glsa/glsa-200705-09.xml - http://www.securityfocus.com/bid/23394 - http://www.vupen.com/english/advisories/2007/1310 - http://secunia.com/advisories/25322 - http://www.ubuntu.com/usn/usn-450-1 - http://secunia.com/advisories/24826 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33541 - http://sourceforge.net/project/shownotes.php?release_id=499192&group_id=74601 - http://secunia.com/advisories/24815 - http://www.securitytracker.com/id?1018086 - http://sourceforge.net/mailarchive/message.php?msg_name=20070406123739.GA1546%40zen.inc - http://secunia.com/advisories/25560 - http://www.novell.com/linux/
essage.php?msg_name=20070406123739.GA1546%40zen.inc - http://secunia.com/advisories/25560 - http://www.novell.com/linux/security/advisories/2007_8_sr.html - http://secunia.com/advisories/24833 - http://www.debian.org/security/2007/dsa-1299 - https://rhn.redhat.com/errata/RHSA-2007-0342.html - http://secunia.com/advisories/25072 - http://secunia.com/advisories/25142
CVE ID: CVE-2007-1842 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:40.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019. Additional Analyst Notes: - CVE Program Container: References: - http://kldp.net/plugins/scmcvs/cvsweb.php/jsboard-2/login.php.diff?r1=1.8%3Br2=1.9%3Bcvsroot=jsboard - https://www.exploit-db.com/exploits/3614 - http://osvdb.org/37365
-2/login.php.diff?r1=1.8%3Br2=1.9%3Bcvsroot=jsboard - https://www.exploit-db.com/exploits/3614 - http://osvdb.org/37365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33338 - http://www.securityfocus.com/bid/23223 - http://www.vupen.com/english/advisories/2007/1182
CVE ID: CVE-2007-1843 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:41.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gszAppPath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1203 - http://www.securityfocus.com/archive/1/464462/100/0/threaded - http://www.securityfocus.com/archive/1/464490/100/0/threaded - https://www.exploit-db.com/exploits/3638 - http://osvdb.org/34620 - http://www.
us.com/archive/1/464490/100/0/threaded - https://www.exploit-db.com/exploits/3638 - http://osvdb.org/34620 - http://www.securityfocus.com/bid/23249 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33360 - http://www.securityfocus.com/archive/1/464503/100/0/threaded - http://secunia.com/advisories/24715
CVE ID: CVE-2007-1844 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:41.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Aardvark Topsites PHP 5 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) button/settings_sql.php, (2) settings_sql.php, and (3) sources/misc/new_day.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33342 - http://osvdb.org/35223 - http://osvdb.org/35225 - http://securityreason.com/securityalert/2515 - http://www.securityfocus.com/arch
db.org/35223 - http://osvdb.org/35225 - http://securityreason.com/securityalert/2515 - http://www.securityfocus.com/archive/1/464351/100/0/threaded
CVE ID: CVE-2007-1845 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:40.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show_event.php in the Expanded Calendar (calendar_panel) 2.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the m_month parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2514 - http://www.securityfocus.com/archive/1/464348/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33336 - http://osvdb.org/36310 - http://secunia.com/advisories/24718 - http://www.securityfocus.com/bid/
vulnerabilities/33336 - http://osvdb.org/36310 - http://secunia.com/advisories/24718 - http://www.securityfocus.com/bid/23225 - http://www.vupen.com/english/advisories/2007/1191
CVE ID: CVE-2007-1846 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:41.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, different vectors than CVE-2006-3341. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23212 - https://www.exploit-db.com/exploits/3603 - http://osvdb.org/37372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33334
CVE ID: CVE-2007-1847 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:41.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33344 - http://osvdb.org/37373 - https://www.exploit-db.com/exploits/3612 - http://www.securityfocus.com/bid/23221
CVE ID: CVE-2007-1848 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:41.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/classes/ui.dta.php in Drake CMS allows remote attackers to inject arbitrary web script or HTML via the desc[][title] field. NOTE: Drake CMS has only a beta version available, and the vendor has previously stated "We do not consider security reports valid until the first official release of Drake CMS." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33332 - http://www.securityfocus.com/bid/23216 - http://www.s
es: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33332 - http://www.securityfocus.com/bid/23216 - http://www.securityfocus.com/archive/1/464272/100/0/threaded - http://securityreason.com/securityalert/2522
CVE ID: CVE-2007-1849 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:41.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in 404.php in Drake CMS allows remote attackers to include and execute arbitrary local arbitrary files via a .. (dot dot) in the d_private parameter. NOTE: some of these details are obtained from third party information. NOTE: Drake CMS has only a beta version available, and the vendor has previously stated "We do not consider security reports valid until the first official release of Drake CMS." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/
elease of Drake CMS." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33331 - http://www.securityfocus.com/archive/1/464272
CVE ID: CVE-2007-1850 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:41.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in classes/captcha/captcha.jpg.php in Drake CMS allows remote attackers to read arbitrary files or list arbitrary directories, and obtain the installation path, via a .. (dot dot) in the d_private parameter. NOTE: Drake CMS has only a beta version available, and the vendor has previously stated "We do not consider security reports valid until the first official release of Drake CMS." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabi
ke CMS." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33333 - http://www.securityfocus.com/archive/1/464272/100/0/threaded - http://securityreason.com/securityalert/2522
CVE ID: CVE-2007-1851 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:41.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the __class parameter to (1) Controller_v4.php or (2) Controller_v5.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33357 - http://www.vupen.com/english/advisories/2007/1190 - http://www.bugtraq.ir/articles/advisory/RSPA_File_Inclusion/
33357 - http://www.vupen.com/english/advisories/2007/1190 - http://www.bugtraq.ir/articles/advisory/RSPA_File_Inclusion/6 - https://www.exploit-db.com/exploits/3641
CVE ID: CVE-2007-1852 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:40.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in 2BGal 3.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the lang_filename parameter to (1) index.php or (2) backupdb.inc.php in admin/, or other unspecified files, different vectors than CVE-2006-5505. NOTE: this issue has been disputed by CVE, since the lang_filename variable is defined before it is used Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2517 - https://exchange.xforce.ibmcloud.com/
VE Program Container: References: - http://securityreason.com/securityalert/2517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33375 - http://attrition.org/pipermail/vim/2007-April/001565.html - http://www.securityfocus.com/archive/1/464458/100/0/threaded
CVE ID: CVE-2007-1853 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:41.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi JP1/HiCommand DeviceManager, Global Link Availability Manager, Replication Monitor, Tiered Storage Manager, and Tuning Manager allows local users to obtain authentication information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi-support.com/security_e/vuls_e/HS07-007_e/index-e.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33328 - http://osvdb.org/34590 - http://www.vupen.com/english/advisories/2007/1169 - http://ww
cloud.com/vulnerabilities/33328 - http://osvdb.org/34590 - http://www.vupen.com/english/advisories/2007/1169 - http://www.securityfocus.com/bid/23210 - http://secunia.com/advisories/24684
CVE ID: CVE-2007-1854 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:41.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03, as used in uCosminexus Application Server Enterprise and Standard; uCosminexus Service Platform; uCosminexus Developer Standard and Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set, and Developer Client Set; and uCosminexus ERP Integrator, does not properly manage session information, which has an unspecified impact related to "unintended other reque
grator, does not properly manage session information, which has an unspecified impact related to "unintended other requests." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1170 - http://www.securityfocus.com/bid/23213 - http://osvdb.org/34768 - http://secunia.com/advisories/24683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33318 - http://www.hitachi-support.com/security_e/vuls_e/HS07-006_e/index-e.html
CVE ID: CVE-2007-1855 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T13:13:41.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in smarty/smarty_class.php in Shop-Script FREE allow remote attackers to execute arbitrary PHP code via a URL in the (1) _smarty_compile_path, (2) smarty_compile_path, (3) get_plugin_filepath, (4) smarty_dir, and (5) filename parameters. NOTE: this issue might be related to CVE-2006-7105. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2520 - http://osvdb.org/35222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3
/securityreason.com/securityalert/2520 - http://osvdb.org/35222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33339 - http://www.securityfocus.com/archive/1/464350/100/0/threaded
CVE ID: CVE-2007-1856 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:13:41.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service (cron failure) by creating hard links, which results in a failed st_nlink check in database.c. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://secunia.com/advisories/27886 - http://www.vupen.com/english/advisories/2007/3229 - http://www.novell.com/linux/security/advisories/2007_007_suse.html
- http://www.vupen.com/english/advisories/2007/3229 - http://www.novell.com/linux/security/advisories/2007_007_suse.html - http://www.securitytracker.com/id?1018081 - http://secunia.com/advisories/24995 - http://support.avaya.com/elmodocs2/security/ASA-2007-261.htm - http://security.gentoo.org/glsa/glsa-200704-11.xml - http://secunia.com/advisories/25321 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11463 - http://secunia.com/advisories/25723 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:234 - http://secunia.com/advisories/26909 - http://www.securityfocus.com/bid/23520 - http://secunia.com/advisories/27706 - http://rhn.redhat.com/err
isories/26909 - http://www.securityfocus.com/bid/23520 - http://secunia.com/advisories/27706 - http://rhn.redhat.com/errata/RHSA-2007-0345.html - http://secunia.com/advisories/24905
CVE ID: CVE-2007-1857 State: REJECTED Published: 2021-06-21T13:50:58 Last Updated: 2021-06-21T13:50:58 Description: No description available.
CVE ID: CVE-2007-1858 State: PUBLISHED Published: 2007-05-09T22:00:00 Last Updated: 2024-08-07T13:13:41.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://secunia.com/advisories/33668 - http://www.securityfocus.com/bid/28482
focus.com/archive/1/500412/100/0/threaded - http://secunia.com/advisories/33668 - http://www.securityfocus.com/bid/28482 - http://secunia.com/advisories/29392 - http://www.securityfocus.com/archive/1/500396/100/0/threaded - http://marc.info/?l=bugtraq&m=133114899904925&w=2 - http://www.vupen.com/english/advisories/2007/1729 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html - http://secunia.com/advisories/44183 - http://www.vupen.com/english/advisories/2009/0233 - http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm - http://marc.info/?l=bugtraq&m=133114899904925&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34212 - http://osvdb.org/34882 - http
gtraq&m=133114899904925&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34212 - http://osvdb.org/34882 - http://tomcat.apache.org/security-5.html - http://www.securityfocus.com/bid/64758 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apa
g/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2007-1859 State: PUBLISHED Published: 2007-05-02T20:00:00 Last Updated: 2024-08-07T13:13:41.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25610 - http://secunia.com/advisories/25119 - http://secunia.com/advisories/25105 - http://secunia.com/advisories/25065 - http://secunia
ecunia.com/advisories/25119 - http://secunia.com/advisories/25105 - http://secunia.com/advisories/25065 - http://secunia.com/advisories/25116 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11459 - http://secunia.com/advisories/25225 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:097 - http://www.novell.com/linux/security/advisories/2007_9_sr.html - https://issues.rpath.com/browse/RPL-1293 - http://osvdb.org/35531 - http://www.securityfocus.com/bid/23783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34054 - http://www.redhat.com/support/errata/RHSA-2007-0322.html - http://secunia.com/advisories/25118 - http://www.securitytracke
tp://www.redhat.com/support/errata/RHSA-2007-0322.html - http://secunia.com/advisories/25118 - http://www.securitytracker.com/id?1017996 - http://www.ubuntu.com/usn/usn-474-1 - http://security.gentoo.org/glsa/glsa-200705-14.xml
CVE ID: CVE-2007-1860 State: PUBLISHED Published: 2007-05-25T18:00:00 Last Updated: 2024-08-07T13:13:41.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly involving double-encoded .. (dot dot) sequences and directory traversal, a related issue to CVE-2007-0450. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2007/dsa-1312 - http://www.vupen.com/english/advisories/2007/2732 - https://oval.
nces: - http://www.debian.org/security/2007/dsa-1312 - http://www.vupen.com/english/advisories/2007/2732 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6002 - http://secunia.com/advisories/25701 - http://secunia.com/advisories/29242 - http://www.securityfocus.com/bid/24147 - http://secunia.com/advisories/25383 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://www.osvdb.org/34877 - http://www.vupen.com/english/advisories/2007/1941 - http://security.gentoo.org/glsa/glsa-200708-15.xml - http://www.redhat.com/support/errata/RHSA-2007-0379.html
07/1941 - http://security.gentoo.org/glsa/glsa-200708-15.xml - http://www.redhat.com/support/errata/RHSA-2007-0379.html - http://www.vupen.com/english/advisories/2007/3386 - http://www.securitytracker.com/id?1018138 - http://secunia.com/advisories/27037 - http://docs.info.apple.com/article.html?artnum=306172 - http://secunia.com/advisories/26512 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://tomcat.apache.org/connectors-doc/news/20070301.html#20070518.1 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://tomcat.apache.org/security-jk.html - http://www.securityfocus.com/bid/25159 - http://www.redhat.com/suppo
78795 - http://tomcat.apache.org/security-jk.html - http://www.securityfocus.com/bid/25159 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34496 - http://secunia.com/advisories/26235 - https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6d
da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E - https://lists.apach
hread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2007-1861 State: PUBLISHED Published: 2007-05-07T19:00:00 Last Updated: 2024-08-07T13:13:40.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial of service (kernel panic) via NETLINK_FIB_LOOKUP replies, which trigger infinite recursion and a stack overflow. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-1309 - http://www.redhat.com/support/errata/RHSA-2007-0347.html - http://www.securityfocus.com/archive/1/467939/30/6690/threaded - http://www.novell.com/linux/security/advisories/2007_43_kernel.htm
securityfocus.com/archive/1/467939/30/6690/threaded - http://www.novell.com/linux/security/advisories/2007_43_kernel.html - http://secunia.com/advisories/25030 - http://www.securityfocus.com/bid/23677 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:171 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34014 - http://www.debian.org/security/2007/dsa-1289 - http://secunia.com/advisories/25288 - http://secunia.com/advisories/25083 - http://secunia.com/advisories/26620 - http://www.vupen.com/english/advisories/2007/1595 - http://www.ubuntu.com/usn/usn-489-1 - http://secunia.com/advisories/25228 - http://www.securityf