Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3831 State: PUBLISHED Published: 2007-07-17T21:00:00 Last Updated: 2024-08-07T14:28:52.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25979 - http://www.vupen.com/english/advisories/2007/2545 - http://osvdb.org/36474 - http://www.sybsecurity.com/hack-proventia-1.pdf
CVE ID: CVE-2007-3832 State: PUBLISHED Published: 2007-07-17T22:00:00 Last Updated: 2024-08-07T14:28:52.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the AOL Instant Messenger (AIM) protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execute arbitrary code via a malformed aim: URI, as demonstrated by a long URI beginning with the aim:///#1111111/ substring. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35447 - http://www.vupen.com/english/advisories/2007/2546 - http://secunia.com/advisories/26086 - http://archives.neohapsis.com/archives/fulldisclosure/2
ish/advisories/2007/2546 - http://secunia.com/advisories/26086 - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0356.html - http://www.kb.cert.org/vuls/id/786920 - http://www.xs-sniper.com/nmcfeters/Cross-App-Scripting-2.html - http://www.securityfocus.com/bid/24927
CVE ID: CVE-2007-3833 State: PUBLISHED Published: 2007-07-17T22:00:00 Last Updated: 2024-08-07T14:28:52.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AOL Instant Messenger (AIM) protocol handler in Cerulean Studios Trillian allows remote attackers to create files with arbitrary contents via certain aim: URIs, as demonstrated by a URI that begins with the "aim: &c:\" substring and contains a full pathname in the ini field. NOTE: this can be leveraged for code execution by writing to a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2546 - http://secunia.com/advisories/26086 - http://www.xs-snip
ferences: - http://www.vupen.com/english/advisories/2007/2546 - http://secunia.com/advisories/26086 - http://www.xs-sniper.com/nmcfeters/Cross-App-Scripting-2.html - http://www.securityfocus.com/bid/24927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35449
CVE ID: CVE-2007-3834 State: PUBLISHED Published: 2007-07-17T22:00:00 Last Updated: 2024-08-07T14:28:52.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ex Libris ALEPH allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a URL that can be discovered through a keyword search. NOTE: this may be related to the MetaLib XSS issue, CVE-2007-3835. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2889 - http://www.securityfocus.com/bid/24978 - http://secunia.com/advisories/26041 - http://www.securityfocus.com/archive/1/473785/100/0
.securityfocus.com/bid/24978 - http://secunia.com/advisories/26041 - http://www.securityfocus.com/archive/1/473785/100/0/threaded - http://escarpment.net/exlibris.txt
CVE ID: CVE-2007-3835 State: PUBLISHED Published: 2007-07-17T22:00:00 Last Updated: 2024-08-07T14:28:52.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ex Libris MetaLib 3.13 and 4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a resource id that can be discovered through a search. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36877 - http://securityreason.com/securityalert/2889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35431 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064666.html - http://secunia.com/advisories/261
ies/35431 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064666.html - http://secunia.com/advisories/26162 - http://www.securityfocus.com/bid/24978 - http://www.securityfocus.com/archive/1/473785/100/0/threaded - http://escarpment.net/exlibris.txt
CVE ID: CVE-2007-3836 State: PUBLISHED Published: 2007-07-17T22:00:00 Last Updated: 2024-08-07T14:28:52.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in HydraIRC 0.3.151 allows remote attackers to cause a denial of service via format string specifiers in certain data related to failed DCC file transfer negotiation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35409 - http://www.portcullis-security.com/uplds/advisories/HydraIRC_fmt-07_008.txt - http://osvdb.org/38623
CVE ID: CVE-2007-3837 State: PUBLISHED Published: 2007-07-17T22:00:00 Last Updated: 2024-08-07T14:28:52.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service (application crash) via a long CTCP request message containing '%' (percent) characters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35408 - http://www.portcullis-security.com/uplds/advisories/HydraIRC_bof-07_007.txt
CVE ID: CVE-2007-3838 State: PUBLISHED Published: 2007-07-17T22:00:00 Last Updated: 2024-08-07T14:28:52.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in takeprofedit.php in TBDev.NET DR 11-10-05-BETA-SF1:111005 and earlier allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of a SCRIPT element in the avatar parameter. NOTE: this may be related to the tracker program in the Janitor package. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26120
party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26120 - http://www.securityfocus.com/data/vulnerabilities/exploits/24923.txt - http://www.securityfocus.com/bid/24923
CVE ID: CVE-2007-3839 State: PUBLISHED Published: 2007-07-17T22:00:00 Last Updated: 2024-08-07T14:28:52.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in takeprofedit.php in TBDev.NET DR 010306 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the avatar parameter. NOTE: this may be related to the tracker program in the Janitor package. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26120 - http://www.securityfocus.com/data/v
Notes: - CVE Program Container: References: - http://secunia.com/advisories/26120 - http://www.securityfocus.com/data/vulnerabilities/exploits/24923.txt - http://www.securityfocus.com/bid/24923
CVE ID: CVE-2007-3840 State: PUBLISHED Published: 2007-07-17T22:00:00 Last Updated: 2024-08-07T14:28:52.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL commands via the offset parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4187 - http://www.osvdb.org/36258 - http://www.securityfocus.com/bid/24925
CVE ID: CVE-2007-3841 State: PUBLISHED Published: 2007-07-17T22:00:00Z Last Updated: 2024-09-17T03:48:22.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Pidgin (formerly Gaim) 2.0.2 for Linux allows remote authenticated users, who are listed in a users list, to execute certain commands via unspecified vectors, aka ZD-00000035. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine. Additional Analyst Notes: - CVE Program Cont
acking purposes, but duplicates with other CVEs are difficult to determine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24904 - http://www.wslabi.com/wabisabilabi/initPublishedBid.do?
CVE ID: CVE-2007-3842 State: PUBLISHED Published: 2007-07-17T22:00:00 Last Updated: 2024-08-07T14:28:52.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the 8e6 R3000 Enterprise Filter before 2.0.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this may be the same as CVE-2007-2970. Additional Analyst Notes: - CVE Program Container: References: - http://www.8e6.com/products/R3000/docs/readme_r3000_2.0.05.pdf - http://osvdb.org/36706
CVE ID: CVE-2007-3843 State: PUBLISHED Published: 2007-08-09T21:00:00 Last Updated: 2024-08-07T14:28:52.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9670 - http://secunia.com/advisories/27747 - http://secunia.com/advisories/28806 - ht
tion/oval%3Aorg.mitre.oval%3Adef%3A9670 - http://secunia.com/advisories/27747 - http://secunia.com/advisories/28806 - http://www.debian.org/security/2007/dsa-1363 - http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc1 - http://www.redhat.com/support/errata/RHSA-2007-0939.html - http://www.ubuntu.com/usn/usn-510-1 - http://www.securityfocus.com/bid/25244 - http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm - http://secunia.com/advisories/26647 - http://secunia.com/advisories/27912 - http://secunia.com/advisories/26760 - http://www.redhat.com/support/errata/RHSA-2007-0705.html - http://secunia.com/advisories/26366 - http://lists.opensuse.org/opensuse-security-announce
/errata/RHSA-2007-0705.html - http://secunia.com/advisories/26366 - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=246595 - http://secunia.com/advisories/27436
CVE ID: CVE-2007-3844 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:28:52.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.c
sed by a CVE-2007-3089 regression. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html - https://issues.rpath.com/browse/RPL-1600 - http://www.ubuntu.com/usn/usn-503-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:047 - http://www.vupen.com/english/advisories/2007/3587 - http://secunia.com/advisories/27414 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 - http://bugzilla.mozilla.org/show_bug.cgi?id=388121 - http://secunia.com/advisories/26393 - http://secunia.com/advisories/26303 - http://www.vupen.com/english/advisories/2007/4256 - http://secunia
isories/26393 - http://secunia.com/advisories/26303 - http://www.vupen.com/english/advisories/2007/4256 - http://secunia.com/advisories/26309 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27298 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:152 - http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml - http://securitytracker.com/id?1018481 - http://www.debian.org/security/2007/dsa-1345 - http://secunia.com/advisories/26288 - http://secunia.com/advisories/27327 - http://secunia.com/advisories/27276 - http://www.debian.org/security/2007/dsa-1391 - http://www.debian.org/security/2007/dsa-1346 - http://www.red
ies/27276 - http://www.debian.org/security/2007/dsa-1391 - http://www.debian.org/security/2007/dsa-1346 - http://www.redhat.com/support/errata/RHSA-2007-0980.html - http://www.novell.com/linux/security/advisories/2007_57_mozilla.html - http://www.mandriva.com/security/advisories?name=MDVSA-2007:047 - http://secunia.com/advisories/28135 - http://secunia.com/advisories/27356 - http://www.redhat.com/support/errata/RHSA-2007-0981.html - http://www.securityfocus.com/bid/25142 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html - http://www.mozilla.org/security/announce/2007/mfsa200
com/archives/fedora-package-announce/2007-November/msg00498.html - http://www.mozilla.org/security/announce/2007/mfsa2007-26.html - http://www.vupen.com/english/advisories/2008/0082 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1 - http://www.ubuntu.com/usn/usn-493-1 - http://secunia.com/advisories/26234 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.debian.org/security/2007/dsa-1344 - http://securitytracker.com/id?1018480 - http://secunia.com/advisories/27325 - http://www.redhat.com/support/errata/RHSA-2007-0979.html - http://securitytracker.com/id?1018479 - http://secunia.com/advisories/26258 - http://secunia.com/advisori
07-0979.html - http://securitytracker.com/id?1018479 - http://secunia.com/advisories/26258 - http://secunia.com/advisories/27326 - http://secunia.com/advisories/28363 - http://secunia.com/advisories/26331 - http://secunia.com/advisories/26460 - http://secunia.com/advisories/27680 - http://www.securityfocus.com/archive/1/475265/100/200/threaded - http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9493 - http://www.securityfocus.com/archive/1/475450/30/5550/threaded - http://secunia.com/advisories/26335 - http:
ef%3A9493 - http://www.securityfocus.com/archive/1/475450/30/5550/threaded - http://secunia.com/advisories/26335 - http://secunia.com/advisories/26572 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.010101
CVE ID: CVE-2007-3845 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:28:52.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant of CVE-2007-4041. NOTE: the vendor states that "it is still possible to launch a filetype handler based on extension rather than the registered protocol handler." Additional Analyst Notes: - CVE Program Container: References: - http://
n rather than the registered protocol handler." Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2007/mfsa2007-27.html - https://issues.rpath.com/browse/RPL-1600 - http://www.ubuntu.com/usn/usn-503-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:047 - http://secunia.com/advisories/27414 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 - http://secunia.com/advisories/26393 - http://secunia.com/advisories/26303 - http://www.vupen.com/english/advisories/2007/4256 - http://www.securityfocus.com/bid/25053 - http://secunia.com/advisories/26309 - http://h20000.www2.hp.com/bizsupport/TechSuppor
/www.securityfocus.com/bid/25053 - http://secunia.com/advisories/26309 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:152 - http://www.debian.org/security/2007/dsa-1345 - http://www.debian.org/security/2007/dsa-1391 - http://bugzilla.mozilla.org/show_bug.cgi?id=389580 - http://www.debian.org/security/2007/dsa-1346 - https://bugzilla.mozilla.org/show_bug.cgi?id=389106 - http://www.mandriva.com/security/advisories?name=MDVSA-2007:047 - http://secunia.com/advisories/28135 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 - http://www.vupen.com/english/advisories/200
/h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 - http://www.vupen.com/english/advisories/2008/0082 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1 - http://www.ubuntu.com/usn/usn-493-1 - http://secunia.com/advisories/26234 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.debian.org/security/2007/dsa-1344 - http://secunia.com/advisories/26258 - http://secunia.com/advisories/27326 - http://secunia.com/advisories/26331 - http://www.securityfocus.com/archive/1/475265/100/200/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - http://www.securityfocus.com/archive/1/475450/30/5
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - http://www.securityfocus.com/archive/1/475450/30/5550/threaded - http://secunia.com/advisories/26335 - http://secunia.com/advisories/26572 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.010101
CVE ID: CVE-2007-3846 State: PUBLISHED Published: 2007-08-28T18:00:00 Last Updated: 2024-08-07T14:28:52.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5 and possibly other products, when run on Windows-based systems, allows remote authenticated users to overwrite and create arbitrary files via a ..\ (dot dot backslash) sequence in the filename, as stored in the file repository. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3004 - http://subversion.tigris.org/servlets/ReadMsg?list=users&msgNo=69413 - http://tortoisesvn
english/advisories/2007/3004 - http://subversion.tigris.org/servlets/ReadMsg?list=users&msgNo=69413 - http://tortoisesvn.net/node/291 - http://secunia.com/advisories/26632 - http://www.securityfocus.com/bid/25468 - http://crisp.cs.du.edu/?q=node/36 - http://osvdb.org/40119 - http://subversion.tigris.org/servlets/NewsItemView?newsItemID=1941 - http://securitytracker.com/id?1018617 - http://secunia.com/advisories/26625 - http://www.vupen.com/english/advisories/2007/3003 - http://osvdb.org/40118 - http://subversion.tigris.org/servlets/ReadMsg?list=users&msgNo=69413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36312
CVE ID: CVE-2007-3847 State: PUBLISHED Published: 2007-08-23T22:00:00 Last Updated: 2024-08-07T14:28:52.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28606 - http://www.redhat.com/support/errata/RHSA-2008-0005.html - http://www.vupen.com/english/advisories/2007/3955 - http://secunia.com/advisories/28922 - https://oval.cise
-0005.html - http://www.vupen.com/english/advisories/2007/3955 - http://secunia.com/advisories/28922 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10525 - http://secunia.com/advisories/28749 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK52702 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01182588 - http://secunia.com/advisories/26952 - http://secunia.com/advisories/26993 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.595748 - http://secunia.com/advisories/26636 - http://secunia.com/advisories/27563 - http://www.securitytracker.com/id?1018633 - http://secunia.com/advisori
es/26636 - http://secunia.com/advisories/27563 - http://www.securitytracker.com/id?1018633 - http://secunia.com/advisories/27732 - http://secunia.com/advisories/27209 - http://www.redhat.com/support/errata/RHSA-2007-0911.html - http://marc.info/?l=apache-httpd-dev&m=118595953217856&w=2 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html - http://secunia.com/advisories/26790 - http://marc.info/?l=apache-httpd-dev&m=118595556504202&w=2 - http://www.vupen.com/english/advisories/2008/0924/references - http://httpd.apache.org/security/vulnerabilities_20.html - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://www.novell.com/linux/security/advisories/2007_61_ap
html - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://www.novell.com/linux/security/advisories/2007_61_apache2.html - http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.html - http://www.redhat.com/support/errata/RHSA-2007-0747.html - http://www.vupen.com/english/advisories/2007/3494 - http://secunia.com/advisories/29420 - http://httpd.apache.org/security/vulnerabilities_22.html - https://issues.rpath.com/browse/RPL-1710 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://secunia.com/advisories/30430 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:235 - http://lists.apple.com/archives/security-announce/2
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:235 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://support.avaya.com/elmodocs2/security/ASA-2007-500.htm - http://www.securityfocus.com/archive/1/505990/100/0/threaded - http://secunia.com/advisories/28467 - http://www.vupen.com/english/advisories/2008/0233 - http://secunia.com/advisories/26722 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html - http://secunia.com/advisories/27971 - http://lists.vmware.com/pipermail/security-announce/2009/000062.html - http://secunia.com/advisories/27882 - http://security.gentoo.org/glsa/glsa-200711-06.xml - http://w
e/2009/000062.html - http://secunia.com/advisories/27882 - http://security.gentoo.org/glsa/glsa-200711-06.xml - http://www.vupen.com/english/advisories/2007/3095 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 - http://docs.info.apple.com/article.html?artnum=307562 - http://www.redhat.com/support/errata/RHSA-2007-0746.html - http://www-1.ibm.com/support/docview.wss?uid=swg1PK50469 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00353.html - http://secunia.com/advisories/27593 - http://www.vupen.com/english/advisories/2008/1697 - http://www.ubuntu.com/usn/usn-575-1 - http://secunia.com/advisories/26842 - http://www.vupen.com/english/advisories/200