Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5612 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-05T15:04:15.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in WordPress before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via a crafted excerpt. Additional Analyst Notes: - CVE Program Container: References: - https://codex.wordpress.org/Version_4.7.2 - http://www.securityfocus.com/bid/95816 - http://www.debian.org/security/2017/dsa-3779 - https://github.com/WordPress/WordPress/commit/4482f9207027de8f36630737ae085110896ea849 - http://www.openwal
7/dsa-3779 - https://github.com/WordPress/WordPress/commit/4482f9207027de8f36630737ae085110896ea849 - http://www.openwall.com/lists/oss-security/2017/01/28/5 - https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/ - https://wpvulndb.com/vulnerabilities/8731 - http://www.securitytracker.com/id/1037731
CVE ID: CVE-2017-5613 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T15:04:15.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95870 - https://news.cpanel.com/tsr-2017-0001-full-disclosure/ - http://www.openwall.com/lists/oss-security/2017/01/28/8
CVE ID: CVE-2017-5614 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T15:04:15.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95870 - https://news.cpanel.com/tsr-2017-0001-full-disclosure/ - http://www.openwall.com/lists/oss-security/2017/01/28/8
CVE ID: CVE-2017-5615 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T15:04:15.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95870 - https://news.cpanel.com/tsr-2017-0001-full-disclosure/ - http://www.openwall.com/lists/oss-security/2017/01/28/8
CVE ID: CVE-2017-5616 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-05T15:04:15.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script or HTML via the addendum parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95870 - https://news.cpanel.com/tsr-2017-0001-full-disclosure/ - http://www.openwall.com/lists/oss-security/2017/01/28/8
CVE ID: CVE-2017-5617 State: PUBLISHED Published: 2017-03-16T15:00:00 Last Updated: 2024-08-05T15:04:15.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/29/2 - http://www.securityfocus.com/bid/95871 - http://www.debian.org/security/2017/dsa-3781 - http://www.openwall.com/lists/oss-security/2017/01/27/3 - https://github.com/blackears/svgSalamander/issues/11 - https:
http://www.openwall.com/lists/oss-security/2017/01/27/3 - https://github.com/blackears/svgSalamander/issues/11 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPUOI6NCEB6H6YHKN7M4V3CAQD63NXAU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3V7RIIO3HO4RNDBN2PARLIDAL3RPV2OX/ - https://security.gentoo.org/glsa/202003-11
CVE ID: CVE-2017-5618 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:04:15.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/screen.git/tree/src/ChangeLog?h=v.4.5.1 - http://savannah.gnu.org/bugs/?50142 - http://www.openwall.com/lists/oss-security/2017/01/29/3 - http://git.savannah.gnu.org/cgit/screen.git/patch/?id=1c6d2817926d30c9a7a97d99af7ac5de4a5845b8 - http://www.securityfocus.com/bid/958
vannah.gnu.org/cgit/screen.git/patch/?id=1c6d2817926d30c9a7a97d99af7ac5de4a5845b8 - http://www.securityfocus.com/bid/95873 - https://lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html
CVE ID: CVE-2017-5619 State: PUBLISHED Published: 2017-03-13T06:14:00 Last Updated: 2024-08-05T15:04:15.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself (e.g., from the DB) instead of the valid password string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96937 - https://zammad.com/de/news/security-advisory-zaa-2017-01
CVE ID: CVE-2017-5620 State: PUBLISHED Published: 2017-03-13T06:14:00 Last Updated: 2024-08-05T15:04:15.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attachments are opened in a new tab instead of getting downloaded. This creates an attack vector of executing code in the domain of the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96937 - https://zammad.com/de/news/security-advisory-zaa-2017-01
CVE ID: CVE-2017-5621 State: PUBLISHED Published: 2017-03-13T06:14:00 Last Updated: 2024-08-05T15:04:15.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. XSS can be triggered via malicious HTML in a chat message or the content of a ticket article, when using either the REST API or the WebSocket API. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96937 - https://zammad.com/de/news/security-advisory-zaa-2017-01
CVE ID: CVE-2017-5622 State: PUBLISHED Published: 2017-03-26T20:00:00 Last Updated: 2024-08-05T15:04:15.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts with adbd enabled. Therefore, a malicious charger or a physical attacker can open up, without authorization, an ADB session with the device, in order to further exploit other vulnerabilities and/or exfiltrate sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://alephsecurity.com/vulns/aleph-2017004 - http://www.securityfocus.com/bid/97092
CVE ID: CVE-2017-5623 State: PUBLISHED Published: 2017-03-19T20:00:00 Last Updated: 2024-08-05T15:04:15.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of the device by issuing the 'fastboot oem boot_mode {rf/wlan/ftm/normal} command' in contradiction to the threat model of Android where the bootloader MUST NOT allow any security-sensitive operation to be run unless the bootloader is unlocked. Additional Analyst Notes: - CVE Program Container: References: - https://alephsecurity.com/vulns/aleph-2017005 - http://www.securityfocus.com/bid/97048
CVE ID: CVE-2017-5624 State: PUBLISHED Published: 2017-03-12T04:57:00 Last Updated: 2024-08-05T15:04:15.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T. The attacker can persistently make the (locked) bootloader start the platform with dm-verity disabled, by issuing the 'fastboot oem disable_dm_verity' command. Having dm-verity disabled, the kernel will not verify the system partition (and any other dm-verity protected partition), which may allow for persistent code execution and privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://securityresear.ch/2017/02/08/onepl
escalation. Additional Analyst Notes: - CVE Program Container: References: - https://securityresear.ch/2017/02/08/oneplus3-bootloader-vulns/
CVE ID: CVE-2017-5625 State: PUBLISHED Published: 2017-04-25T16:00:00 Last Updated: 2024-08-05T15:04:15.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertext content of an arbitrary partition (except 'keystore') by issuing the 'fastboot oem dump <partition>' fastboot command. Additional Analyst Notes: - CVE Program Container: References: - https://alephsecurity.com/vulns/aleph-2017006
CVE ID: CVE-2017-5626 State: PUBLISHED Published: 2017-03-12T04:57:00 Last Updated: 2024-08-05T15:04:15.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to lock/unlock the bootloader, disregarding the 'OEM Unlocking' checkbox, without user confirmation and without a factory reset. This allows for persistent code execution with high privileges (kernel/root) with complete access to user data. Additional Analyst Notes: - CVE Program Container: References: - https://securityresear.ch/2017/02/08/oneplus3-bootloader-vulns/
CVE ID: CVE-2017-5627 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-05T15:04:15.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setproperty function in jsrun.c lacks a check for a negative array length. This leads to an integer overflow in the js_pushstring function in jsrun.c when parsing a specially crafted JS file. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=mujs.git%3Bh=4006739a28367c708dea19aeb19b8a1a9326ce08 - http://www.securityfocus.com/bid/95856 - https://bugs.ghostscript.com/show_bu
4006739a28367c708dea19aeb19b8a1a9326ce08 - http://www.securityfocus.com/bid/95856 - https://bugs.ghostscript.com/show_bug.cgi?id=697497
CVE ID: CVE-2017-5628 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-05T15:04:15.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=mujs.git%3Bh=8f62ea10a0af68e56d5c00720523ebcba13c2e6a - https://bugs.ghostscript.com/show_bug.cgi?id=697496 - http://www.securityfocus.com/bid/95855
CVE ID: CVE-2017-5630 State: PUBLISHED Published: 2017-02-01T23:00:00 Last Updated: 2024-08-05T15:04:15.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41185/ - http://www.securityfocus.com/bid/95882 - http://pear.php.net/bugs/bug.php?id=21171
CVE ID: CVE-2017-5631 State: PUBLISHED Published: 2017-05-01T14:00:00 Last Updated: 2024-08-05T15:04:15.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr") that is transmitted in the login.php query string. Additional Analyst Notes: - CVE Program Container: References: - https://www.openbugbounty.org/incidents/228262/ - https://www.exploit-db.com/exploits/42042/
CVE ID: CVE-2017-5632 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-05T15:04:15.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374_979. When executing an "nmap -O" command that specifies an IP address of an affected device, one can crash the device's WAN connection, causing disconnection from the Internet, a Denial of Service (DoS). The attack is only possible from within the local area network. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/ - http://www.securityfocus.com/bid/95857
CVE ID: CVE-2017-5633 State: PUBLISHED Published: 2017-03-06T06:11:00 Last Updated: 2024-08-05T15:04:15.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (1) change the admin password, (2) reboot the device, or (3) possibly have unspecified other impact via crafted requests to CGI programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96475 - http://seclists.org/fulldisclosure/2017/Feb/70
CVE ID: CVE-2017-5634 State: PUBLISHED Published: 2017-02-09T16:00:00 Last Updated: 2024-08-05T15:04:15.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=2j9gP5Qu2WA - http://www.securityfocus.com/bid/96230 - https://www.youtube.com/watch?v=WSQW0ipnXQg - https://
om/watch?v=2j9gP5Qu2WA - http://www.securityfocus.com/bid/96230 - https://www.youtube.com/watch?v=WSQW0ipnXQg - https://bugemot.com/bug/190
CVE ID: CVE-2017-5635 State: PUBLISHED Published: 2017-10-19T20:00:00 Last Updated: 2024-08-05T15:04:15.431Z Vendors: Apache Software Foundation Products: Apache NiFi Problem Types: Unauthorized Access Description: In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the originating node identity is used rather than the "anonymous" user. Additional Analyst Notes: - CVE Program Container: References: - https://nifi.apache.org/security.html#CVE-2017-5635 - http://www.securityfocus.com/bid/96730
CVE ID: CVE-2017-5636 State: PUBLISHED Published: 2017-10-19T20:00:00 Last Updated: 2024-08-05T15:04:15.356Z Vendors: Apache Software Foundation Products: Apache NiFi Problem Types: Escalation of Privilege Description: In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully crafted username could impersonate another user and gain their permissions on a replicated request to another node. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96731 - https://nifi.apache.org/security.html#CVE-2017-5636
CVE ID: CVE-2017-5637 State: PUBLISHED Published: 2017-10-10T01:00:00Z Last Updated: 2024-09-17T00:16:26.240Z Vendors: Apache Software Foundation Products: Apache ZooKeeper Problem Types: DOS Description: Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from this issue, fixed in 3.4.10, 3.5.3, and later. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/58170aeb7a681d462b7fa31cae81110cbb749d2dc83c5736a0bb8370%40%3Cdev.zookeeper.apa
: - https://lists.apache.org/thread.html/58170aeb7a681d462b7fa31cae81110cbb749d2dc83c5736a0bb8370%40%3Cdev.zookeeper.apache.org%3E - http://www.securityfocus.com/bid/98814 - https://access.redhat.com/errata/RHSA-2017:3355 - https://access.redhat.com/errata/RHSA-2017:3354 - https://access.redhat.com/errata/RHSA-2017:2477 - http://www.debian.org/security/2017/dsa-3871 - https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E - https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b22441
51766e76391caa3%40%3Ccommits.nifi.apache.org%3E - https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E - https://www.oracle.com/security-alerts/cpujul2020.html - https://issues.apache.org/jira/browse/ZOOKEEPER-2693 - https://www.oracle.com//security-alerts/cpujul2021.html
CVE ID: CVE-2017-5638 State: PUBLISHED Published: 2017-03-11T02:11:00.000Z Last Updated: 2025-10-21T23:55:46.106Z Vendors: Apache Software Foundation Products: Apache Struts Problem Types: n/a Description: The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
tent-Type header containing a #cmd= string. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nmap.org/nsedoc/scripts/http-vuln-cve2017-5638.html - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-002.txt - https://arstechnica.com/security/2017/03/critical-vulnerability-under-massive-attack-imperils-high-impact-sites/ - https://exploit-db.com/exploits/41570 - https://security.netapp.com/advisory/ntap-20170310-0001/ - https://github.com/rapid7/metasploit-framework/issues/8064 - https://struts.apache.org/docs/s2-046.html - http://blog.talosintelligence.com/2017/03/apache-0-day-exploited.html - https://www.imperva.com/blog/2017/03/cve-2017
- http://blog.talosintelligence.com/2017/03/apache-0-day-exploited.html - https://www.imperva.com/blog/2017/03/cve-2017-5638-new-remote-code-execution-rce-vulnerability-in-apache-struts-2/ - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03733en_us - https://www.kb.cert.org/vuls/id/834067 - https://isc.sans.edu/diary/22169 - https://struts.apache.org/docs/s2-045.html - http://www.securitytracker.com/id/1037973 - http://www.eweek.com/security/apache-struts-vulnerability-under-attack.html - http://www.securityfocus.com/bid/96729 - https://twitter.com/theog150/status/841146956135124993 - https://github.com/mazen160/struts-pwn - https://packetstormsecuri
ps://twitter.com/theog150/status/841146956135124993 - https://github.com/mazen160/struts-pwn - https://packetstormsecurity.com/files/141494/S2-45-poc.py.txt - https://www.symantec.com/security-center/network-protection-security-advisories/SA145 - https://support.lenovo.com/us/en/product_security/len-14200 - https://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=352306493971e7d5a756d61780d57a76eb1f519a - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03723en_us - https://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=6b8272ce47160036ed120a48345d9aa884477228 - https://cwiki.apache.org/confluence/display/WW/S2-045 - https://
a=commit%3Bh=6b8272ce47160036ed120a48345d9aa884477228 - https://cwiki.apache.org/confluence/display/WW/S2-045 - https://www.exploit-db.com/exploits/41614/ - https://cwiki.apache.org/confluence/display/WW/S2-046 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03749en_us - http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2017-5638-apache-struts-vulnerability-remote-code-execution/ - https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r90890afea72a9571d66
b51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E
CVE ID: CVE-2017-5639 State: REJECTED Published: 2018-09-24T13:00:00 Last Updated: 2018-09-24T12:57:01 Description: No description available.
CVE ID: CVE-2017-5640 State: PUBLISHED Published: 2017-07-10T20:00:00Z Last Updated: 2024-09-16T22:50:44.601Z Vendors: Apache Software Foundation Products: Apache Impala Problem Types: Information Disclosure Description: It was noticed that a malicious process impersonating an Impala daemon in Apache Impala (incubating) 2.7.0 to 2.8.0 could cause Impala daemons to skip authentication checks when Kerberos is enabled (but TLS is not). If the malicious server responds with 'COMPLETE' before the SASL handshake has completed, the client will consider the handshake as completed even though no exchange of credentials has happened. Additional Analyst Notes: - CVE Program Container: References: - htt
ven though no exchange of credentials has happened. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/c02e83aa46c90b7cbc87dd649cf8f9b73e11053eddea9144a397da53%40%3Cdev.impala.apache.org%3E - http://www.securityfocus.com/bid/99508
CVE ID: CVE-2017-5641 State: PUBLISHED Published: 2017-12-28T15:00:00Z Last Updated: 2024-09-16T21:08:12.604Z Vendors: Apache Software Foundation Products: Apache Flex Blaze DS Problem Types: Information Disclosure Description: Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by default. During the deserialization process code is executed that for several known types has undesired side-effects. Other, unknown types may also exhibit such behaviors. One vector in the Java standard library exists that allows an attacker to trigger possibly further exploitable Java deserialization of untrusted data. Other kno
exists that allows an attacker to trigger possibly further exploitable Java deserialization of untrusted data. Other known vectors in third party libraries can be used to trigger remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/307983 - http://www.securityfocus.com/bid/97383 - http://www.securitytracker.com/id/1038273 - http://mail-archives.apache.org/mod_mbox/flex-dev/201703.mbox/%3C6B86C8D0-6E36-48F5-AC81-4AB3978F6746%40c-ware.de%3E - https://issues.apache.org/jira/browse/FLEX-35290 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03823en_us - https://www.zerodayinitiative.com/adviso