Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
://www.exploit-db.com/exploits/3332 - http://www.securityfocus.com/bid/22609 - http://www.vupen.com/english/advisories/2007/0645
CVE ID: CVE-2007-1041 State: PUBLISHED Published: 2007-02-21T17:00:00 Last Updated: 2024-08-07T12:43:22.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file with a long (1) group or (2) subject string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32576 - http://www.securityfocus.com/bid/22618 - http://secunia.com/advisories/24216 - https://www.exploit-db.com/exploits/3342 - http://www.vupen.com/english/advisories/2007/0663 - http://osvdb.org/33253
CVE ID: CVE-2007-1042 State: PUBLISHED Published: 2007-02-21T17:00:00 Last Updated: 2024-08-07T12:43:22.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in news.php in Xpression News (X-News) 1.0.1, when magic_quotes_gpc is disabled, allows remote attackers to include arbitrary files or obtain sensitive information via a .. (dot dot) in the xnews-template parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32560 - http://secunia.com/advisories/24177 - htt
er: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32560 - http://secunia.com/advisories/24177 - http://osvdb.org/33226
CVE ID: CVE-2007-1043 State: PUBLISHED Published: 2007-02-21T17:00:00 Last Updated: 2024-08-07T12:43:22.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ezboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access via a direct request to (1) update.php and (2) config.php. Additional Analyst Notes: - CVE Program Container: References: - http://forums.avenir-geopolitique.net/viewtopic.php?t=2674 - http://www.securityfocus.com/archive/1/460325/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32563 - http://osvdb.org/34181 - http://securityreason.com/securityalert/2275 - http://www.securityfocus.com/bid/22590
CVE ID: CVE-2007-1044 State: PUBLISHED Published: 2007-02-21T17:00:00 Last Updated: 2024-08-07T12:43:22.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed of the admin/ directory name and an arbitrary filename ending in ".js." NOTE: it was later reported that this issue had been addressed by 5.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33741 - http://securityreason.com/securityalert/2276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32569 - http://www.securityfocus.com/archive/1/484569/100/200/threaded - http
change.xforce.ibmcloud.com/vulnerabilities/32569 - http://www.securityfocus.com/archive/1/484569/100/200/threaded - http://www.securityfocus.com/bid/22611 - http://www.securityfocus.com/archive/1/460533/100/0/threaded
CVE ID: CVE-2007-1045 State: PUBLISHED Published: 2007-02-21T17:00:00 Last Updated: 2024-08-07T12:43:22.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: mAlbum 0.3 has default accounts (1) "login"/"pass" for its administrative account and (2) "dqsfg"/"sdfg", which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2272 - http://forums.avenir-geopolitique.net/viewtopic.php?t=2677 - http://www.securityfocus.com/archive/1/460402/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32562 - http://osvdb.org/33740
CVE ID: CVE-2007-1046 State: PUBLISHED Published: 2007-02-21T17:00:00 Last Updated: 2024-08-07T12:43:22.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dem_trac allows remote attackers to read log file contents via a direct request for /anc_sit.txt. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33735 - http://securityreason.com/securityalert/2271 - http://www.securityfocus.com/archive/1/460306/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32566 - http://forums.avenir-geopolitique.net/viewtopic.php?t=2673
CVE ID: CVE-2007-1047 State: PUBLISHED Published: 2007-02-21T17:00:00 Last Updated: 2024-08-07T12:43:22.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Distributed Checksum Clearinghouse (DCC) before 1.3.51 allows remote attackers to delete or add hosts in /var/dcc/maps. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24176 - http://www.securityfocus.com/bid/22622 - http://osvdb.org/33251 - http://www.vupen.com/english/advisories/2007/0654 - http://www.rhyolite.com/anti-spam/dcc/CHANGES
CVE ID: CVE-2007-1048 State: PUBLISHED Published: 2007-02-21T17:00:00 Last Updated: 2024-08-07T12:43:22.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin_rebuild_search.php in phpbb_wordsearch allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34243 - http://securityreason.com/securityalert/2280 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32551 - http://www.securityfocus.com/archive/1/460338/100/0/threaded
CVE ID: CVE-2007-1049 State: PUBLISHED Published: 2007-02-21T17:00:00 Last Updated: 2024-08-07T12:43:22.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/functions.php) for WordPress 2.0 before 2.0.9 and 2.1 before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the file parameter to wp-admin/templates.php, and possibly other vectors involving the action variable. Additional Analyst Notes: - CVE Program Container: References: - http://trac.wordpress.org/changeset/4876 - http://secunia.com/advisories/24306 - http://trac.wordpress.org/chan
ences: - http://trac.wordpress.org/changeset/4876 - http://secunia.com/advisories/24306 - http://trac.wordpress.org/changeset/4877 - http://www.vupen.com/english/advisories/2007/0741 - http://osvdb.org/33766 - http://www.securityfocus.com/bid/22534 - http://downloads.securityfocus.com/vulnerabilities/exploits/22534.html - http://secunia.com/advisories/24566 - http://www.gentoo.org/security/en/glsa/glsa-200703-23.xml - http://trac.wordpress.org/ticket/3781
CVE ID: CVE-2007-1050 State: PUBLISHED Published: 2007-02-21T23:00:00 Last Updated: 2024-08-07T12:43:22.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inject arbitrary web script or HTML via (1) the go parameter, (2) the keyword parameter in the search menu (go=search), or (3) the username or (4) the password in a go=Login action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2270 - http://secunia.com/advisories/24222 - http://osvdb.org/33318 - http://www.securityfocus.com/bid/22635 - http://forums.aven
tp://secunia.com/advisories/24222 - http://osvdb.org/33318 - http://www.securityfocus.com/bid/22635 - http://forums.avenir-geopolitique.net/viewtopic.php?t=2686 - http://www.vupen.com/english/advisories/2007/0679 - http://osvdb.org/33317 - http://osvdb.org/33319 - http://www.securityfocus.com/archive/1/460598/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32581
CVE ID: CVE-2007-1051 State: PUBLISHED Published: 2007-02-21T23:00:00 Last Updated: 2024-08-07T12:43:22.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier uses a weak cryptographic hashing function (CRC32) to identify trusted modules, which allows local users to bypass security protections by substituting modified modules that have the same CRC32 value. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2279 - http://www.securityfocus.com/archive/1/460209/100/100/threaded - http://osvdb.org/45243 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ocus.com/archive/1/460209/100/100/threaded - http://osvdb.org/45243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32530 - http://www.matousec.com/info/advisories/Comodo-DLL-injection-via-weak-hash-function-exploitation.php - http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052461.html
CVE ID: CVE-2007-1052 State: PUBLISHED Published: 2007-02-21T23:00:00 Last Updated: 2024-08-07T12:43:22.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in PBLang (PBL) 4.60 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbpath parameter, a different vector than CVE-2006-5062. NOTE: this issue has been disputed by a reliable third party for 4.65, stating that the dbpath variable is initialized in an included file that is created upon installation Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33737 - http://www.securityfocus.com/archive/1/460315/100/0/thr
- CVE Program Container: References: - http://osvdb.org/33737 - http://www.securityfocus.com/archive/1/460315/100/0/threaded - http://attrition.org/pipermail/vim/2007-February/001356.html - http://securityreason.com/securityalert/2269
CVE ID: CVE-2007-1053 State: PUBLISHED Published: 2007-02-21T23:00:00 Last Updated: 2024-08-07T12:43:22.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpXmms 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the tcmdp parameter to (1) phpxmmsb.php or (2) phpxmmst.php. NOTE: this issue has been disputed by a reliable third party, stating that the tcmdp variable is initialized by config.php Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2007-February/001365.html - http://securityreason.com/securityalert/2273 - http://www.securityfocus.com/archive/1/46
vim/2007-February/001365.html - http://securityreason.com/securityalert/2273 - http://www.securityfocus.com/archive/1/460618/100/0/threaded - http://osvdb.org/33749
CVE ID: CVE-2007-1054 State: PUBLISHED Published: 2007-02-21T23:00:00 Last Updated: 2024-08-07T12:43:22.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2, when $wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded value of the rs parameter, which is processed by Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugsec.com/articles.php?Security=24 - http://www.securityfocus.com/archive/1/460596/100/0/threaded - http://osvdb.org/32078 - http://www.vupen.com/english/advisories/20
.securityfocus.com/archive/1/460596/100/0/threaded - http://osvdb.org/32078 - http://www.vupen.com/english/advisories/2007/0678 - http://securityreason.com/securityalert/2274 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32586 - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_9_3/phase3/RELEASE-NOTES - http://attrition.org/pipermail/vim/2007-February/001367.html - http://sourceforge.net/project/shownotes.php?release_id=487921&group_id=34373 - http://secunia.com/advisories/24211
CVE ID: CVE-2007-1055 State: PUBLISHED Published: 2007-02-21T23:00:00 Last Updated: 2024-08-07T12:43:22.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x before 1.9.0rc2, and 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rs parameter. NOTE: this issue might be a duplicate of CVE-2007-0177. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugsec.com/articles.php?Security=24 - http://www.securityfocus.com/archive/1/460596/100/0/threaded - http://securityreason.com/securityalert/2274 - http://svn.wikimedia.org/svnroot/m
.com/archive/1/460596/100/0/threaded - http://securityreason.com/securityalert/2274 - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_9_0/phase3/RELEASE-NOTES - https://exchange.xforce.ibmcloud.com/vulnerabilities/32586 - http://osvdb.org/37343
CVE ID: CVE-2007-1056 State: PUBLISHED Published: 2007-02-21T23:00:00 Last Updated: 2024-08-07T12:43:22.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is simplified via (1) weak file permissions (Users = Read & Execute) for %PROGRAMFILES%\VMware; and weak registry key permissions (access by Users) for (2) vmmouse, (3) vmscsi, (4) VMTools, (5) vmx_svga, and (6) vmxnet in HKLM\SYSTEM\Curr
permissions (access by Users) for (2) vmmouse, (3) vmscsi, (4) VMTools, (5) vmx_svga, and (6) vmxnet in HKLM\SYSTEM\CurrentControlSet\Services\; which allows local users to perform various privileged actions outside of the guest OS by executing certain files under %PROGRAMFILES%\VMware\VMware Tools, as demonstrated by (a) VMControlPanel.cpl and (b) vmwareservice.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/460664/100/0/threaded - http://securityreason.com/securityalert/2281 - http://osvdb.org/45244 - http://www.securityfocus.com/archive/1/461807/100/0/threaded
CVE ID: CVE-2007-1057 State: PUBLISHED Published: 2007-02-21T23:00:00 Last Updated: 2024-08-07T12:43:22.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause another user to execute arbitrary code when attempting to execute this client, as demonstrated by replacing /tmp/NetClient/client. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007
nt/client. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0671 - http://www116.nortelnetworks.com/pub/repository/CLARIFY/DOCUMENT/2007/08/021886-01.pdf - https://www.exploit-db.com/exploits/3356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32597 - http://osvdb.org/33304 - http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=540071 - http://spoofed.org/blog/archive/2007/02/nortel_vpn_unix_client_local_root_compromise.html - http://www.securityfocus.com/bid/22632 - http://secunia.com/advisories/24231 - http://www.securitytracker.com/id?1017678
CVE ID: CVE-2007-1058 State: PUBLISHED Published: 2007-02-21T23:00:00 Last Updated: 2024-08-07T12:43:22.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user_pages/page.asp in Online Web Building 2.0 allows remote attackers to execute arbitrary SQL commands via the art_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24208 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32583 - http://osvdb.org/32677 - http://www.vupen.com/english/advisories/2007/0674 - https://www.exploit-db.com/exploits/3339
CVE ID: CVE-2007-1059 State: PUBLISHED Published: 2007-02-22T00:00:00 Last Updated: 2024-08-07T12:43:22.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33305 - http://www.vupen.com/english/advisories/2007/0675 - http://secunia.com/advisories/24219 - https://www.exploit-db.com/exploits/3336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/325
m/advisories/24219 - https://www.exploit-db.com/exploits/3336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32584 - http://www.securityfocus.com/bid/22633
CVE ID: CVE-2007-1060 State: PUBLISHED Published: 2007-02-22T00:00:00 Last Updated: 2024-08-07T12:43:22.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when register_globals and allow_fopenurl are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the ROOTDIR parameter to (1) createemails.inc.php and (2) send_emails.inc.php in /admin/includes/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461019/100/0/threaded - http://www.securityfocus.com/bid/22642 - https://exchange.xforce.ibmcloud.com/vulnerabil
chive/1/461019/100/0/threaded - http://www.securityfocus.com/bid/22642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32602 - http://advisories.echo.or.id/adv/adv66-K-159-2007.txt - http://www.securityfocus.com/archive/1/460964/100/0/threaded - http://osvdb.org/33265 - http://secunia.com/advisories/24212 - https://www.exploit-db.com/exploits/3348 - http://www.vupen.com/english/advisories/2007/0672 - http://osvdb.org/33264
CVE ID: CVE-2007-1061 State: PUBLISHED Published: 2007-02-22T00:00:00 Last Updated: 2024-08-07T12:43:22.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header (HTTP_REFERER variable). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22638 - https://www.exploit-db.com/exploits/3346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32607 - http://osvdb.org/33316 - http://www.securityfocus.com/archive/1/461148/100/0
xforce.ibmcloud.com/vulnerabilities/32607 - http://osvdb.org/33316 - http://www.securityfocus.com/archive/1/461148/100/0/threaded - http://www.vupen.com/english/advisories/2007/0673 - http://secunia.com/advisories/24224 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052570.html
CVE ID: CVE-2007-1062 State: PUBLISHED Published: 2007-02-22T01:00:00 Last Updated: 2024-08-07T12:43:22.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml - http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml - http://secunia.com/advisor
r-20070221-phone.shtml - http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml - http://secunia.com/advisories/24262 - http://securitytracker.com/id?1017680 - http://www.securityfocus.com/bid/22647 - http://osvdb.org/45245 - http://www.vupen.com/english/advisories/2007/0688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32623
CVE ID: CVE-2007-1063 State: PUBLISHED Published: 2007-02-22T01:00:00 Last Updated: 2024-08-07T12:43:22.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32627 - http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml - http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml - http://osvdb.org/45246 - http://secunia.com/adviso
http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml - http://osvdb.org/45246 - http://secunia.com/advisories/24262 - http://www.vupen.com/english/advisories/2007/0689 - http://www.securityfocus.com/bid/22647 - http://www.securitytracker.com/id?1017681
CVE ID: CVE-2007-1064 State: PUBLISHED Published: 2007-02-22T01:00:00 Last Updated: 2024-08-07T12:43:22.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24258 - http://www.vupen.com/english/advisories/2007/0690 - http://www.securityfocus.com/bid
tp://secunia.com/advisories/24258 - http://www.vupen.com/english/advisories/2007/0690 - http://www.securityfocus.com/bid/22648 - http://osvdb.org/33049 - http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml - http://www.securitytracker.com/id?1017683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32621 - http://www.securitytracker.com/id?1017684
CVE ID: CVE-2007-1065 State: PUBLISHED Published: 2007-02-22T01:00:00 Last Updated: 2024-08-07T12:43:22.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspecified vectors in the supplicant, aka CSCsf15836. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32622 - http://www.vupen.com/english/advisories/2007/0690 - http://o
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/32622 - http://www.vupen.com/english/advisories/2007/0690 - http://osvdb.org/33048 - http://www.securityfocus.com/bid/22648 - http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml - http://www.securitytracker.com/id?1017683 - http://www.securitytracker.com/id?1017684
CVE ID: CVE-2007-1066 State: PUBLISHED Published: 2007-02-22T01:00:00 Last Updated: 2024-08-07T12:43:22.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lists (DACL) for the connection client GUI, which allows local users to gain privileges by injecting "a thread under ConnectionClient.exe," aka CSCsg20558. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24258 - http://www.vupen
Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24258 - http://www.vupen.com/english/advisories/2007/0690 - http://www.securityfocus.com/bid/22648 - http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml - http://www.securitytracker.com/id?1017683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32625 - http://osvdb.org/33047 - http://www.securitytracker.com/id?1017684