Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ries/24754 - http://lists.apple.com/archives/security-announce/2007/May/msg00004.html - http://secunia.com/advisories/25402 - http://www.redhat.com/support/errata/RHSA-2007-0124.html - https://bugs.gentoo.org/show_bug.cgi?id=171452 - http://secunia.com/advisories/25989 - http://secunia.com/advisories/24604 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10658 - http://www.novell.com/linux/security/advisories/2007_40_file.html - http://secunia.com/advisories/25931 - http://www.debian.org/security/2007/dsa-1274 - http://secunia.com/advisories/24617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36283 - http://www.vupen.com/english/advisories/200
isories/24617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36283 - http://www.vupen.com/english/advisories/2007/1040 - http://support.avaya.com/elmodocs2/security/ASA-2007-179.htm - http://secunia.com/advisories/25133 - http://security.freebsd.org/advisories/FreeBSD-SA-07:04.file.asc - http://www.ubuntu.com/usn/usn-439-1 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-001.txt.asc - http://www.kb.cert.org/vuls/id/606700 - http://secunia.com/advisories/24608 - http://www.securityfocus.com/archive/1/477861/100/0/threaded - http://security.gentoo.org/glsa/glsa-200703-26.xml - http://security.gentoo.org/glsa/glsa-200710-19.xml - http://secunia.com/advisories/24548 -
rg/glsa/glsa-200703-26.xml - http://security.gentoo.org/glsa/glsa-200710-19.xml - http://secunia.com/advisories/24548 - http://secunia.com/advisories/24592 - https://issues.rpath.com/browse/RPL-1148 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.512926
CVE ID: CVE-2007-1537 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: \Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the device and cause a denial of service, as demonstrated by using an IRQL to acquire a spinlock on paged memory via the NdisTapiDispatch function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24598 - http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=47 - http://securityreason.com/securityalert/2471 - http://www.
ndex.php?option=com_remository&Itemid=2&func=fileinfo&id=47 - http://securityreason.com/securityalert/2471 - http://www.securityfocus.com/bid/23025 - http://www.osvdb.org/33628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33086 - http://www.vupen.com/english/advisories/2007/1031 - http://www.securityfocus.com/archive/1/463208/100/0/threaded
CVE ID: CVE-2007-1538 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in (1) HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection or (2) HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Entreprise\CurrentVersion. NOTE: this issue has been disputed by third-party researchers, stating that the default permissions for HKEY_LOCAL_MACHINE\SOFTWARE does not allow for write access and the product does not modify the i
efault permissions for HKEY_LOCAL_MACHINE\SOFTWARE does not allow for write access and the product does not modify the inherited permissions. There might be an interaction error with another product Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/33800 - http://www.securityfocus.com/archive/1/463187/100/0/threaded - http://homepage.mac.com/adonismac/Advisory/crack_mcafee_password_protection.html - http://homepage.mac.com/adonismac/Advisory/bypass_mcafee_entreprise_password.html - http://www.securityfocus.com/archive/1/463074/100/0/threaded - http://www.securityfocus.com/archive/1/463091/100/0/threaded - http://www.securitytracker.com/id?1017791
CVE ID: CVE-2007-1539 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the module_name parameter, as demonstrated via a static PHP code injection attack in an Apache log file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34306 - http://www.vupen.com/english/advisories/2007/1030 - http://www.securityfocus.com/bid/23044 - https://www.exploit-db.com/exploits/3521 - https://exchange.xforce.ibmclou
30 - http://www.securityfocus.com/bid/23044 - https://www.exploit-db.com/exploits/3521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33084 - http://secunia.com/advisories/24589
CVE ID: CVE-2007-1540 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows remote attackers to run arbitrary executables and bypass authentication via a .. (dot dot) sequence and trailing NULL (%00) in the login parameter. NOTE: this issue was reportedly addressed in SQL-Ledger 2.6.27, however third-party researchers claim that the file is still executed even though an error is generated. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/
h an error is generated. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24560 - http://sql-ledger.com/cgi-bin/nav.pl?page=news.html&title=What%27s%20New - http://sourceforge.net/project/shownotes.php?release_id=494462&group_id=175965 - http://www.osvdb.org/33624 - http://www.vupen.com/english/advisories/2007/1024 - http://www.vupen.com/english/advisories/2007/1025 - http://secunia.com/advisories/24585 - http://www.securityfocus.com/archive/1/463175/100/0/threaded - http://www.securityfocus.com/bid/23034
CVE ID: CVE-2007-1541 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in am.pl in SQL-Ledger 2.6.27 only checks for the presence of a NULL (%00) character to protect against directory traversal attacks, which allows remote attackers to run arbitrary executables and bypass authentication via a .. (dot dot) sequence in the login parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24560 - http://sql-ledger.com/cgi-bin/nav.pl?page=news.html&title=What%27s%20New - http://www.vupen.com/english/advisories/2007/1025
//sql-ledger.com/cgi-bin/nav.pl?page=news.html&title=What%27s%20New - http://www.vupen.com/english/advisories/2007/1025 - http://www.securityfocus.com/archive/1/463175/100/0/threaded - http://www.securityfocus.com/bid/23034
CVE ID: CVE-2007-1542 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers to cause a denial of service via the Remote-Party-ID sipURI field in a SIP INVITE request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017797 - http://www.cisco.com/en/US/products/products_security_response09186a00808075ad.html - https://exch
cker.com/id?1017797 - http://www.cisco.com/en/US/products/products_security_response09186a00808075ad.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33098 - http://www.vupen.com/english/advisories/2007/1023 - http://secunia.com/advisories/24600 - http://www.securityfocus.com/bid/23047
CVE ID: CVE-2007-1543 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2007:065 - http://www.securitytracker.com/id?1017822 - http://secunia.com/advisories/24980 - http://secunia.com/advisories/24527 - http://www.securityfocus.com/bid/23017
22 - http://secunia.com/advisories/24980 - http://secunia.com/advisories/24527 - http://www.securityfocus.com/bid/23017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33047 - http://secunia.com/advisories/24601 - http://www.ubuntu.com/usn/usn-446-1 - http://secunia.com/advisories/24628 - http://security.gentoo.org/glsa/glsa-200704-20.xml - http://www.vupen.com/english/advisories/2007/0997 - http://secunia.com/advisories/24783 - http://www.securityfocus.com/archive/1/464606/30/7230/threaded - http://secunia.com/advisories/24638 - http://aluigi.altervista.org/adv/nasbugs-adv.txt - https://issues.rpath.com/browse/RPL-1155 - http://www.debian.org/security/2007/dsa-1273 - http://www.radsc
ugs-adv.txt - https://issues.rpath.com/browse/RPL-1155 - http://www.debian.org/security/2007/dsa-1273 - http://www.radscan.com/nas/HISTORY
CVE ID: CVE-2007-1544 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large max_samples value. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2007:065 - http://www.securitytracker.com/id?1017822 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33051 - http://secunia.com/advisories/24980 - h
er.com/id?1017822 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33051 - http://secunia.com/advisories/24980 - http://secunia.com/advisories/24527 - http://www.securityfocus.com/bid/23017 - http://secunia.com/advisories/24601 - http://www.ubuntu.com/usn/usn-446-1 - http://secunia.com/advisories/24628 - http://security.gentoo.org/glsa/glsa-200704-20.xml - http://www.vupen.com/english/advisories/2007/0997 - http://www.securityfocus.com/archive/1/464606/30/7230/threaded - http://secunia.com/advisories/24638 - http://aluigi.altervista.org/adv/nasbugs-adv.txt - http://www.debian.org/security/2007/dsa-1273 - http://www.radscan.com/nas/HISTORY
CVE ID: CVE-2007-1545 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AddResource function in server/dia/resource.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (server crash) via a nonexistent client ID. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2007:065 - http://www.securitytracker.com/id?1017822 - http://secunia.com/advisories/24980 - http://secunia.com/advisories/24527 - http://www.securityfocus.com/bid/23017 - http://secunia.com/advisories/24601 - http:
tp://secunia.com/advisories/24527 - http://www.securityfocus.com/bid/23017 - http://secunia.com/advisories/24601 - http://www.ubuntu.com/usn/usn-446-1 - http://secunia.com/advisories/24628 - http://security.gentoo.org/glsa/glsa-200704-20.xml - http://www.vupen.com/english/advisories/2007/0997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33050 - http://www.securityfocus.com/archive/1/464606/30/7230/threaded - http://secunia.com/advisories/24638 - http://aluigi.altervista.org/adv/nasbugs-adv.txt - http://www.debian.org/security/2007/dsa-1273 - http://www.radscan.com/nas/HISTORY
CVE ID: CVE-2007-1546 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) via (1) large num_action values in the ProcAuSetElements function in server/dia/audispatch.c or (2) a large inputNum parameter to the compileInputs function in server/dia/auutil.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2007:065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33055 - http://www.securitytracker.com
sories?name=MDKSA-2007:065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33055 - http://www.securitytracker.com/id?1017822 - http://secunia.com/advisories/24980 - http://secunia.com/advisories/24527 - http://www.securityfocus.com/bid/23017 - http://secunia.com/advisories/24601 - http://www.ubuntu.com/usn/usn-446-1 - http://secunia.com/advisories/24628 - http://security.gentoo.org/glsa/glsa-200704-20.xml - http://www.vupen.com/english/advisories/2007/0997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33054 - http://www.securityfocus.com/archive/1/464606/30/7230/threaded - http://secunia.com/advisories/24638 - http://aluigi.altervista.org/adv/nasbugs-adv.txt - http://www.debi
7230/threaded - http://secunia.com/advisories/24638 - http://aluigi.altervista.org/adv/nasbugs-adv.txt - http://www.debian.org/security/2007/dsa-1273 - http://www.radscan.com/nas/HISTORY
CVE ID: CVE-2007-1547 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadRequestFromClient function in server/os/io.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) via multiple simultaneous connections, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2007:065 - http://www.securitytracker.com/id?1017822 - http://secunia.com/advisories/24980 - http://secunia.com/advisories/24527 - http://www.securityfocus.com/bid/23
017822 - http://secunia.com/advisories/24980 - http://secunia.com/advisories/24527 - http://www.securityfocus.com/bid/23017 - http://secunia.com/advisories/24601 - http://www.ubuntu.com/usn/usn-446-1 - http://secunia.com/advisories/24628 - http://security.gentoo.org/glsa/glsa-200704-20.xml - http://www.vupen.com/english/advisories/2007/0997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33059 - http://www.securityfocus.com/archive/1/464606/30/7230/threaded - http://secunia.com/advisories/24638 - http://aluigi.altervista.org/adv/nasbugs-adv.txt - http://www.debian.org/security/2007/dsa-1273 - http://www.radscan.com/nas/HISTORY
CVE ID: CVE-2007-1548 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via \"' (backslash double-quote quote) sequences, which are collapsed into \'', as demonstrated via the name parameter to forum/pop_up_member_search.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23051 - http://secunia.com/advisories/24561 -
s: - CVE Program Container: References: - http://www.securityfocus.com/bid/23051 - http://secunia.com/advisories/24561 - http://www.vupen.com/english/advisories/2007/1061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33095 - http://www.webwizguide.info/web_wiz_forums/Version%20History.txt - http://www.securityfocus.com/archive/1/463287/100/0/threaded - http://securityreason.com/securityalert/2456 - http://osvdb.org/34344 - http://ifsec.blogspot.com/2007/03/web-wiz-forums-805-mysql-version-sql.html
CVE ID: CVE-2007-1549 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in gallery.php in phpx 3.5.15 allows remote attackers to upload and execute arbitrary PHP scripts via an addImage action, which places scripts into the gallery/shelties/ directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463192/100/0/threaded - http://securityreason.com/securityalert/2457 - http://www.securityfocus.com/bid/23033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33151
CVE ID: CVE-2007-1550 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the (1) image_id or (2) cat_id parameter to (a) gallery.php; the (3) news_id parameter to (b) news.php or (c) print.php; (4) the news_cat_id parameter to news.php; the (5) cat_id, (6) topic_id, or (7) post_id parameter to (d) forums.php; or (8) the user_id parameter to (e) users.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463192/100/0/threaded - http
nalyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463192/100/0/threaded - http://osvdb.org/34418 - http://osvdb.org/34417 - http://securityreason.com/securityalert/2457 - http://osvdb.org/34414 - http://www.securityfocus.com/bid/23033 - http://www.vupen.com/english/advisories/2007/1087 - http://secunia.com/advisories/24565 - http://osvdb.org/34415 - http://osvdb.org/34416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33155
CVE ID: CVE-2007-1551 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpx 3.5.15 allow remote attackers to inject arbitrary web script or HTML via (1) the signature in "dans profile," or (2) search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463192/100/0/threaded - http://osvdb.org/34413 - http://osvdb.org/34412 - http://securityreason.com/securityalert/2457 - http://www.securityfocus.com/bid/23033 - http://www.vupen.com/english/advisories/2007/1087 - http://secunia.com/adviso
- http://www.securityfocus.com/bid/23033 - http://www.vupen.com/english/advisories/2007/1087 - http://secunia.com/advisories/24565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33153
CVE ID: CVE-2007-1552 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME type in the Content-type HTTP header, which allows remote attackers to upload and execute arbitrary scripts via an image MIME type with a filename containing an executable extension such as .php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463178/100/0/threaded - http://securityreason.com/securityalert/2454 - https://exchange.xforce.ibmcloud.com/vulnerab
e/1/463178/100/0/threaded - http://securityreason.com/securityalert/2454 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33097 - http://www.aeroxteam.fr/exploit-MetaForum-0.513b.txt - https://www.exploit-db.com/exploits/3516 - http://osvdb.org/34523 - http://www.securityfocus.com/bid/23032
CVE ID: CVE-2007-1553 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis parameter to "ok" and providing modified admin_mail, login, and pass parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34519 - https://www.exploit-db.com/exploits/3506
CVE ID: CVE-2007-1554 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in admin/configuration.php in Guestbara 1.2 and earlier allows remote authenticated users to inject arbitrary PHP code into config.php via the (1) admin_mail, (2) emotpatch, (3) login, (4) pass, and unspecified other parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/33783 - http://www.vupen.com/english/advisories/2007/1010
CVE ID: CVE-2007-1555 State: PUBLISHED Published: 2007-03-20T22:00:00 Last Updated: 2024-08-07T12:59:08.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the c parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23036 - https://www.exploit-db.com/exploits/3519 - http://www.osvdb.org/33748 - http://www.vupen.com/english/advisories/2007/1028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33082
CVE ID: CVE-2007-1556 State: PUBLISHED Published: 2007-03-21T01:00:00 Last Updated: 2024-08-07T12:59:08.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to execute arbitrary SQL commands via the dlid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3498 - http://www.securityfocus.com/bid/23000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33021 - http://osvdb.org/33747
CVE ID: CVE-2007-1557 State: PUBLISHED Published: 2007-03-21T01:00:00 Last Updated: 2024-08-07T12:59:08.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service and possibly gain privileges via format string specifiers in the Management Server name field on the Communication settings page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23023 - http://www.layereddefense.com/F-SecureMar18.html - http://www.vupen.com/english/advisories/2007/1055 - http://www.securityfocus.com/archive/1/463190/100/0/threaded - http://sec
//www.vupen.com/english/advisories/2007/1055 - http://www.securityfocus.com/archive/1/463190/100/0/threaded - http://securityreason.com/securityalert/2472 - http://osvdb.org/34764
CVE ID: CVE-2007-1558 State: PUBLISHED Published: 2007-04-16T22:00:00 Last Updated: 2024-08-07T12:59:08.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including (1) Thunderbird 1.x before 1.5.0.12 and 2.x before 2.0.0.4, (2) Evolution, (3) mutt, (4) fetchmail before 6.3.8, (5) SeaMonkey 1.0.x before 1.0.9 and 1.1.x before 1.1.2, (6) Balsa 2.3.16 and earlier, (7) Mailfilter before 0.8.2, and possibly other products. Additional A