Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6742 State: PUBLISHED Published: 2011-04-21T10:00:00Z Last Updated: 2024-09-17T01:36:19.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_filter_list function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter parsing, which allows remote authenticated users to cause a denial of service (infinite loop) via a malformed search filter. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1IO07450 - http://www.ibm.com/support/docview.wss?uid=swg24029663
CVE ID: CVE-2007-6743 State: PUBLISHED Published: 2011-04-21T10:00:00Z Last Updated: 2024-09-17T02:41:38.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0005 allows remote authenticated users to cause a denial of service (ABEND) via search operations that trigger recursive filter_free calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1IO07174 - http://www.ibm.com/support/docview.wss?uid=swg24029663
CVE ID: CVE-2007-6744 State: PUBLISHED Published: 2012-01-19T19:00:00Z Last Updated: 2024-09-16T18:34:12.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interaction between InstallShield and Signcode.exe. Additional Analyst Notes: - CVE Program Container: References: - http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Installation-InstallShield-
/kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Installation-InstallShield-InstallShield2008Premier-Public-ProductInfo-IS2008PremProReleaseNotes2pdf&sliceId=pdfPage_42
CVE ID: CVE-2007-6745 State: PUBLISHED Published: 2019-11-07T22:15:40 Last Updated: 2024-08-07T16:18:20.507Z Vendors: clamav Products: clamav Problem Types: Other Description: clamav 0.91.2 suffers from a floating point exception when using ScanOLE2. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2007-6745 - https://access.redhat.com/security/cve/cve-2007-6745 - http://www.openwall.com/lists/oss-security/2012/03/29/2
CVE ID: CVE-2007-6746 State: PUBLISHED Published: 2013-05-21T18:00:00 Last Updated: 2024-08-07T16:18:20.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain name in the subject's Common Name (CN), or (3) the expiration date of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-06/msg00052.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104397.html -
ensuse-updates/2013-06/msg00052.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104397.html - http://www.securityfocus.com/bid/59474 - http://www.ubuntu.com/usn/USN-1821-1 - http://secunia.com/advisories/53361 - http://www.openwall.com/lists/oss-security/2013/04/24/5 - https://bugs.freedesktop.org/show_bug.cgi?id=63810
CVE ID: CVE-2007-6747 State: REJECTED Published: 2020-11-05T19:56:35 Last Updated: 2020-11-05T19:56:35 Description: No description available.
CVE ID: CVE-2007-6748 State: REJECTED Published: 2020-11-05T19:56:55 Last Updated: 2020-11-05T19:56:55 Description: No description available.
CVE ID: CVE-2007-6749 State: REJECTED Published: 2020-11-05T19:57:18 Last Updated: 2020-11-05T19:57:18 Description: No description available.
CVE ID: CVE-2007-6750 State: PUBLISHED Published: 2011-12-27T18:00:00 Last Updated: 2024-08-07T16:18:20.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://www.securitytracker.com/id/1038144 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 - https://h20566.www2.hpe.com/portal/site/hps
.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - http://ha.ckers.org/slowloris/ - http://archives.neohapsis.com/archives/bugtraq/2007-01/0229.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72345 - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html - http://www.securityfocus.com/bid/21865 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.html
CVE ID: CVE-2007-6751 State: PUBLISHED Published: 2012-01-04T19:00:00 Last Updated: 2024-08-07T16:18:20.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN60887968/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72344 - http://www.h-fj.com/blog/archives/2007/01/23-111038.php - http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000108.html
CVE ID: CVE-2007-6752 State: PUBLISHED Published: 2012-03-28T10:00:00Z Last Updated: 2024-09-17T00:41:33.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the "security benefit against platform complexity and performance impact" and concluding that a change to the logout behavior is not planned because "for most sites it is not worth the trade-off. Additional Analyst Notes: - CVE Program Container: Referen
lanned because "for most sites it is not worth the trade-off. Additional Analyst Notes: - CVE Program Container: References: - http://ivanobinetti.blogspot.it/2012/03/drupal-cms-712-latest-stable-release.html - http://groups.drupal.org/node/216314 - http://drupal.org/node/144538 - http://www.exploit-db.com/exploits/18564/ - http://packetstormsecurity.org/files/110404/drupal712-xsrf.txt
CVE ID: CVE-2007-6753 State: PUBLISHED Published: 2012-03-28T19:00:00 Last Updated: 2024-08-07T16:18:20.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server 2008, and Windows 7, when using an environment configured with a string such as %APPDATA% or %PROGRAMFILES% in a certain way, allows local users to gain privileges via a Trojan horse DLL under the current working directory, as demonstrated by iTunes and Safari. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44484 - http://support.microsoft.com/kb/329308 - htt
E Program Container: References: - http://www.securityfocus.com/bid/44484 - http://support.microsoft.com/kb/329308 - http://blog.acrossecurity.com/2010/10/breaking-setdlldirectory-protection.html - http://secunia.com/advisories/41984
CVE ID: CVE-2007-6754 State: PUBLISHED Published: 2012-07-25T19:00:00 Last Updated: 2024-08-07T16:18:20.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipalloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD does not properly allocate memory, which makes it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, related to "integer rounding and overflow" errors. Additional Analyst Notes: - CVE Program Container: References: - http://svnweb.freebsd.org/base?view=revision&revision=167872 - http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/
CVE ID: CVE-2007-6755 State: PUBLISHED Published: 2013-10-11T22:00:00 Last Updated: 2024-08-07T16:18:20.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT
ch may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE. Additional Analyst Notes: - CVE Program Container: References: - http://blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html - http://stream.wsj.com/story/latest-headlines/SS-2-63399/SS-2-332655/ - https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html - http://blog.cryptographyengineering.com/2013/09/the-many-flaws-of-dualecdrbg.html - http://threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspect - http://www.securityfocus.com/bid/63657 - http://arstechnica.com/security/2013/09/stop-using-nsa-influ
thing-is-suspect - http://www.securityfocus.com/bid/63657 - http://arstechnica.com/security/2013/09/stop-using-nsa-influence-code-in-our-product-rsa-tells-customers/ - http://rump2007.cr.yp.to/15-shumow.pdf
CVE ID: CVE-2007-6756 State: PUBLISHED Published: 2014-08-12T16:00:00 Last Updated: 2024-08-07T16:18:20.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System Configuration mode, which allows physically proximate attackers to modify device configuration and cause a denial of service (adverse human health effects). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95718 - http://www.zoll.com/WorkArea/DownloadAsset.aspx?id=2386 - http://www.zoll.com/WorkArea/DownloadAsset.aspx?id=10018 - http://www.zoll.com/WorkArea/Downlo
nloadAsset.aspx?id=2386 - http://www.zoll.com/WorkArea/DownloadAsset.aspx?id=10018 - http://www.zoll.com/WorkArea/DownloadAsset.aspx?id=18473
CVE ID: CVE-2007-6757 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-07T16:18:20.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/2019295-133G.pdf?REQ=RAA&DIRECTION=2019295-133&FILENAME=2019295-133G.pdf&FILEREV=G&DOCREV_ORG=G - http://www.forbes.com/sites/tho
33G.pdf?REQ=RAA&DIRECTION=2019295-133&FILENAME=2019295-133G.pdf&FILEREV=G&DOCREV_ORG=G - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - http://apps.gehealthcare.com/servlet/ClientServlet/2019295-133D.pdf?REQ=RAA&DIRECTION=2019295-133D&FILENAME=2019295-133D.pdf&FILEREV=D&DOCREV_ORG=D - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02 - http://apps.gehealthcare.com/servlet/ClientServlet/DMS+Sys+Mgmt+Manual.pdf?REQ=RAA&DIRECTION=DOC1258180&FILENAME=DMS%2BSys%2BMgmt%2BManual.pdf&FILEREV=3&DOCREV_ORG=3
CVE ID: CVE-2007-6758 State: PUBLISHED Published: 2020-01-23T15:22:52 Last Updated: 2024-08-07T16:18:20.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0. Additional Analyst Notes: - CVE Program Container: References: - http://cxsecurity.com/issue/WLB-2015050162 - http://attrition.org/pipermail/vim/2007-April/001545.html
CVE ID: CVE-2007-6759 State: PUBLISHED Published: 2017-04-07T21:00:00 Last Updated: 2024-08-07T16:18:20.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dataprobe iBootBar (with 2007-09-20 and possibly later released firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCRABBIT cookie. Additional Analyst Notes: - CVE Program Container: References: - http://blog.tmcnet.com/blog/tom-keating/computer-hardware/dataprobe-ibootbar-review.asp
CVE ID: CVE-2007-6760 State: PUBLISHED Published: 2017-04-07T21:00:00 Last Updated: 2024-08-07T16:18:20.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dataprobe iBootBar (with 2007-09-20 and possibly later beta firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCCOOKIE cookie. Additional Analyst Notes: - CVE Program Container: References: - http://blog.tmcnet.com/blog/tom-keating/computer-hardware/dataprobe-ibootbar-review.asp
CVE ID: CVE-2007-6761 State: PUBLISHED Published: 2017-04-24T06:12:00 Last Updated: 2024-08-07T16:18:20.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobuf_mapping data structures, which allows local users to trigger an incorrect count value and videobuf leak via unspecified vectors, a different vulnerability than CVE-2010-5321. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/0b29669c065f60501e7289e1950fa2a618962358 - http://www.linuxgrill.com/anonymous/kernel/v2.6/ChangeLog-2.6.24 - https://bugs.debian.org/cgi-bin/bugrepo
2a618962358 - http://www.linuxgrill.com/anonymous/kernel/v2.6/ChangeLog-2.6.24 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=827340 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0b29669c065f60501e7289e1950fa2a618962358 - http://www.securityfocus.com/bid/98001
CVE ID: CVE-2007-6762 State: PUBLISHED Published: 2019-07-27T21:39:37 Last Updated: 2024-08-07T16:18:20.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel_cipso_v4.c where it is possible to overflow the doi_def->tags[] array. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/2a2f11c227bdf292b3a2900ad04139d301b56ac4 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2a2f11c227bdf292b3a2900ad04139d301b56ac4 - https://mirrors.edge.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20 - https://support.f5.com/csp/article
d301b56ac4 - https://mirrors.edge.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20 - https://support.f5.com/csp/article/K05342145 - https://support.f5.com/csp/article/K05342145?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2007-6763 State: PUBLISHED Published: 2019-07-31T17:08:43 Last Updated: 2024-08-07T16:18:20.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAS Drug Development (SDD) before 32DRG02 mishandles logout actions, which allows a user (who was previously logged in) to access resources by pressing a back or forward button in a web browser. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.sas.com/techsup/download/hotfix/drugdev/32drg02/SDD_Release_Notes_32DRG02.pdf
CVE ID: CVE-2008-0001 State: PUBLISHED Published: 2008-01-15T19:00:00 Last Updated: 2024-08-07T07:32:24.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=974a9f0b47da74e28f68b9c8645c3786aa5ace1a - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.16 - http://www.vupen.com/english/
e28f68b9c8645c3786aa5ace1a - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.16 - http://www.vupen.com/english/advisories/2008/0151 - http://secunia.com/advisories/28806 - http://secunia.com/advisories/28643 - http://secunia.com/advisories/28628 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.14 - http://secunia.com/advisories/28485 - http://www.securityfocus.com/archive/1/486485/100/0/threaded - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0021 - http://secunia.com/advisories/28706 - http://secunia.com/advisories/28626 - http://www.debian.org/security/2008/dsa-1479 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 - http://secunia.com/advisories/28
urity/2008/dsa-1479 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 - http://secunia.com/advisories/28558 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html - https://issues.rpath.com/browse/RPL-2146 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9709 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:044 - http://secunia.com/advisories/29245 - http://secunia.com/advisories/28664 - http://securitytracker.com/id?1019289 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html - http://secunia.com/advisories/28748 - http://www.ubuntu.com/usn/usn-574-1 - https://exchange.xforce.i
02/msg00002.html - http://secunia.com/advisories/28748 - http://www.ubuntu.com/usn/usn-574-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39672 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00828.html - http://secunia.com/advisories/28971 - http://www.redhat.com/support/errata/RHSA-2008-0089.html - http://www.ubuntu.com/usn/usn-578-1 - http://www.securityfocus.com/bid/27280 - http://rhn.redhat.com/errata/RHSA-2008-0055.html
CVE ID: CVE-2008-0002 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:32:23.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3638 - http://www.securityfocus.com/bid/27703 - http://secunia.com/advisories/28915 - http://secunia.com/advisories/37460
38 - http://www.securityfocus.com/bid/27703 - http://secunia.com/advisories/28915 - http://secunia.com/advisories/37460 - http://www.securityfocus.com/archive/1/487812/100/0/threaded - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/28834 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.vupen.com/english/advisories/2008/0488 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://secunia.com/advisories/32222 - https://www.redhat.com/archives/fedora-package-announce/2008-
m/advisories/57126 - http://secunia.com/advisories/32222 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html - http://security.gentoo.org/glsa/glsa-200804-10.xml - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html - http://www.vupen.com/english/advisories/2008/2780 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://secunia.com/advisories/29711 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2008-0003 State: PUBLISHED Published: 2008-01-08T20:00:00 Last Updated: 2024-08-07T07:32:23.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39527 - http://osvdb.org/40082 - http://secunia.com/advisories/28462 - https://www.
.xforce.ibmcloud.com/vulnerabilities/39527 - http://osvdb.org/40082 - http://secunia.com/advisories/28462 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00424.html - http://secunia.com/advisories/29986 - http://secunia.com/advisories/29056 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409 - http://www.securityfocus.com/archive/1/490917/100/0/threaded - http://www.attrition.org/pipermail/vim/2008-January/001879.html - http://www.vupen.com/english/advisories/2008/0063 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4129 - http://www.securityfocus.com/bid/27188 - http://secunia.com/advisories/29785 - http:/
riptions/pqvcmjd?mode=18&ID=4129 - http://www.securityfocus.com/bid/27188 - http://secunia.com/advisories/29785 - http://www.vupen.com/english/advisories/2008/1234/references - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00480.html - http://www.vupen.com/english/advisories/2008/1391/references - http://www.redhat.com/support/errata/RHSA-2008-0002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10282 - http://www.vupen.com/english/advisories/2008/0638 - http://www.securityfocus.com/bid/27172 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409 - http://securitytracker.com/id?1019159 - http:
20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409 - http://securitytracker.com/id?1019159 - http://lists.vmware.com/pipermail/security-announce/2008/000014.html - https://bugzilla.redhat.com/show_bug.cgi?id=426578 - http://secunia.com/advisories/28338
CVE ID: CVE-2008-0004 State: REJECTED Published: 2009-03-26T10:00:00Z Last Updated: 2024-09-17T02:01:16.274Z Description: No description available.
CVE ID: CVE-2008-0005 State: PUBLISHED Published: 2008-01-12T00:00:00 Last Updated: 2024-08-07T07:32:23.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0005.html - http://security.gentoo.org/glsa/glsa-200803-19.xml - http://secunia.com/advisories/28749 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://securityreason.com/securityalert