Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s-charset.txt - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00098.html - http://www.securitytracker.com/id?1019071 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058999.html - http://secunia.com/advisories/28005 - http://www.securityfocus.com/bid/26795 - http://www.securityfocus.com/archive/1/484828/100/0/threaded - http://www.vupen.com/english/advisories/2007/4172 - http://secunia.com/advisories/28310 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00079.html - http://securityreason.com/securityalert/3433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38959
CVE ID: CVE-2007-6319 State: PUBLISHED Published: 2008-02-19T22:00:00 Last Updated: 2024-08-07T16:02:36.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists via unknown vectors related to modification of client-side information; and (3) allow remote authenticated administrators to modify other account data by creating "new accounts that collide with existing accounts." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityal
xisting accounts." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3671 - http://securitytracker.com/id?1019436 - http://secunia.com/advisories/29019 - http://www.securityfocus.com/archive/1/488343/100/0/threaded - http://www.vupen.com/english/advisories/2008/0618 - http://www.securityfocus.com/bid/26792
CVE ID: CVE-2007-6320 State: PUBLISHED Published: 2007-12-12T01:00:00 Last Updated: 2024-08-07T16:02:36.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Feature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43671 - http://drupal.org/node/198164
CVE ID: CVE-2007-6321 State: PUBLISHED Published: 2007-12-12T01:00:00 Last Updated: 2024-08-07T16:02:36.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via style sheets containing expression commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484802/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38981 - http://trac.roundcube.net/ticket/1484701 - http://securityreason.com/securityalert/3435 - http://
ulnerabilities/38981 - http://trac.roundcube.net/ticket/1484701 - http://securityreason.com/securityalert/3435 - http://www.securityfocus.com/bid/26800 - http://openmya.hacker.jp/hasegawa/security/expression.txt - http://secunia.com/advisories/30734
CVE ID: CVE-2007-6322 State: PUBLISHED Published: 2007-12-13T19:00:00 Last Updated: 2024-08-07T16:02:36.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in filedownload.php in xml2owl 0.1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39010 - http://www.securityfocus.com/bid/26849 - http://osvdb.org/40090 - http://secunia.com/advisories/28071 - https://www.exploit-db.com/exploits/4729
CVE ID: CVE-2007-6323 State: PUBLISHED Published: 2007-12-13T19:00:00 Last Updated: 2024-08-07T16:02:36.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) get_image.php or (2) get_file.php in mms_template/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39148 - http://www.securityfocus.com/bid/26852 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39014 - http://secunia.com/advisories/28075 - http://osvdb.org/39149 - https://www.exploit-db.com/exploits/4728
CVE ID: CVE-2007-6324 State: PUBLISHED Published: 2007-12-13T19:00:00 Last Updated: 2024-08-07T16:02:36.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in head.php in CityWriter 0.9.7 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39012 - http://secunia.com/advisories/28058 - http://www.securityfocus.com/bid/26848
CVE ID: CVE-2007-6325 State: PUBLISHED Published: 2007-12-13T19:00:00 Last Updated: 2024-08-07T16:02:36.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attackers to execute arbitrary PHP code via a URL in the config[fsBase] parameter, a different vector than CVE-2006-2726. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39013 - http://www.securityfocus.com/bid/26845 - https://www.exploit-db.com/exploits/4725 - http://www.vupen.com/english/advisories/2007/4206 - http://www.osvdb.org/39153 - http:/
w.exploit-db.com/exploits/4725 - http://www.vupen.com/english/advisories/2007/4206 - http://www.osvdb.org/39153 - http://secunia.com/advisories/28054
CVE ID: CVE-2007-6326 State: PUBLISHED Published: 2007-12-13T19:00:00 Last Updated: 2024-08-07T16:02:36.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38980 - http://shinnai.altervista.org/exploits/txt/TXT_8kXDua0a0Tl5Vm5LU3ms.html - https://www.exploit-db.com/exploits/4717 - http://www.securityfocus.com/bid/26813
CVE ID: CVE-2007-6327 State: PUBLISHED Published: 2007-12-13T19:00:00 Last Updated: 2024-08-07T16:02:36.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attackers to execute arbitrary code via a long first argument to the CreateStill method. Additional Analyst Notes: - CVE Program Container: References: - http://shinnai.altervista.org/exploits/txt/TXT_UXI8vq3qF5Tl9zwyxCBb.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38984 - http://www.securityfocus.com/bid/26814 - https://www.exploit-db.com/exploits/4716
CVE ID: CVE-2007-6328 State: PUBLISHED Published: 2007-12-13T19:00:00 Last Updated: 2024-08-07T16:02:36.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484835/100/0/threaded - http://www.vupen.com/english/advisories/2007/4170 - http://aluigi.org/poc/dosboxxx.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/38970 - http://www.securityfocus.com/bid/
gi.org/poc/dosboxxx.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/38970 - http://www.securityfocus.com/bid/26802 - http://securityreason.com/securityalert/3442 - http://osvdb.org/44766
CVE ID: CVE-2007-6329 State: PUBLISHED Published: 2007-12-13T19:00:00 Last Updated: 2024-08-07T16:02:36.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and (2) creator fields in docProps/core.xml in the OOXML ZIP container. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3443 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39021 - http://www.securityfocus.com/bid/26833 -
curityalert/3443 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39021 - http://www.securityfocus.com/bid/26833 - http://www.securityfocus.com/archive/1/484919/100/0/threaded - http://osvdb.org/44938
CVE ID: CVE-2007-6330 State: PUBLISHED Published: 2007-12-13T19:00:00 Last Updated: 2024-08-07T16:02:36.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Meridian Prolog Manager 2007, and 7.5 and earlier, sends all usernames and passwords to the client in a (1) cleartext or (2) weakly encrypted format to support client-side login authentication, which makes it easier for remote attackers to obtain database access by capturing credentials via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42634 - http://www.securityfocus.com/archive/1/484886/100/0/threaded - http://www.securityfocus.com/bid/26826 - http://www.kb.cert
tp://www.securityfocus.com/archive/1/484886/100/0/threaded - http://www.securityfocus.com/bid/26826 - http://www.kb.cert.org/vuls/id/120593 - http://www.kb.cert.org/vuls/id/MIMG-77FL3T - https://exchange.xforce.ibmcloud.com/vulnerabilities/38996 - http://secunia.com/advisories/28065
CVE ID: CVE-2007-6331 State: PUBLISHED Published: 2007-12-13T19:00:00 Last Updated: 2024-08-07T16:02:36.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method. NOTE: only a user-assisted attack is possible on Windows Vista. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26823 - http://h20000.www2.hp.com/bizsuppor
tes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26823 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486 - https://www.exploit-db.com/exploits/4720 - http://www.vupen.com/english/advisories/2007/4192 - http://securitytracker.com/id?1019086 - http://secunia.com/advisories/28055 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38991 - http://www.securityfocus.com/archive/1/484880/100/100/threaded - http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt
CVE ID: CVE-2007-6332 State: PUBLISHED Published: 2007-12-13T19:00:00 Last Updated: 2024-08-07T16:02:36.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26823 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486 - https://w
curityfocus.com/bid/26823 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486 - https://www.exploit-db.com/exploits/4720 - http://www.vupen.com/english/advisories/2007/4192 - http://securitytracker.com/id?1019086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38994 - http://secunia.com/advisories/28055 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486 - http://www.securityfocus.com/archive/1/484880/100/100/threaded - http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt
CVE ID: CVE-2007-6333 State: PUBLISHED Published: 2007-12-13T19:00:00 Last Updated: 2024-08-07T16:02:36.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26823 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486 - https://www.exploit-db.com/exploits/4720 - http://www.v
.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486 - https://www.exploit-db.com/exploits/4720 - http://www.vupen.com/english/advisories/2007/4192 - http://securitytracker.com/id?1019086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38994 - http://secunia.com/advisories/28055 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486 - http://www.securityfocus.com/archive/1/484880/100/100/threaded - http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt
CVE ID: CVE-2007-6334 State: PUBLISHED Published: 2007-12-20T23:00:00 Last Updated: 2024-08-07T16:02:36.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to be the same as the first user, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4303 - http://www.securitytracker.com/id?1019134 - http://www.osvdb.org/39358 - http://www.ingres.com/support/security-alertDec17.php - http://secunia.com/advisories/28187 - http://www.securityfocus.co
ttp://www.ingres.com/support/security-alertDec17.php - http://secunia.com/advisories/28187 - http://www.securityfocus.com/bid/26959 - http://secunia.com/advisories/28183 - http://supportconnectw.ca.com/public/ingres/infodocs/ingresmswin-secnot.asp - http://www.vupen.com/english/advisories/2007/4304 - http://www.securityfocus.com/archive/1/485448/100/0/threaded
CVE ID: CVE-2007-6335 State: PUBLISHED Published: 2007-12-20T01:00:00 Last Updated: 2024-08-07T16:02:36.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=634 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:003 - http://www.securityfocus.com/bid/26927 - http://www.debian.org/security/2007/dsa-1435 - http://secunia.com/advisories/28412 - http://www.vupen.co
com/bid/26927 - http://www.debian.org/security/2007/dsa-1435 - http://secunia.com/advisories/28412 - http://www.vupen.com/english/advisories/2008/0924/references - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00644.html - http://www.securitytracker.com/id?1019112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39119 - http://secunia.com/advisories/28421 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00740.html - http://secunia.com/advisories/28176 - http://secunia.com/advisories/28587 - http://secunia.com/advisories/2815
40.html - http://secunia.com/advisories/28176 - http://secunia.com/advisories/28587 - http://secunia.com/advisories/28153 - http://docs.info.apple.com/article.html?artnum=307562 - http://security.gentoo.org/glsa/glsa-200712-20.xml - https://www.exploit-db.com/exploits/4862 - http://secunia.com/advisories/28117 - http://www.vupen.com/english/advisories/2007/4253 - http://secunia.com/advisories/28278 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
CVE ID: CVE-2007-6336 State: PUBLISHED Published: 2007-12-20T01:00:00 Last Updated: 2024-08-07T16:02:36.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:003 - http://www.debian.org/security/2007/dsa-1435 - http://secunia.com/advisories/28412 - http://www.vupen.com/english/advisories/2008/0924/references - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00644.html - http://secunia.com/advisories/28421 -
tps://www.redhat.com/archives/fedora-package-announce/2008-January/msg00644.html - http://secunia.com/advisories/28421 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00740.html - http://secunia.com/advisories/28176 - http://secunia.com/advisories/28587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39169 - http://secunia.com/advisories/28153 - http://docs.info.apple.com/article.html?artnum=307562 - http://security.gentoo.org/glsa/glsa-200712-20.xml - http://www.securityfocus.com/bid/26946 - http://securitytracker.com/id?1019150 - http://secunia.c
a/glsa-200712-20.xml - http://www.securityfocus.com/bid/26946 - http://securitytracker.com/id?1019150 - http://secunia.com/advisories/28278 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
CVE ID: CVE-2007-6337 State: PUBLISHED Published: 2007-12-31T19:00:00 Last Updated: 2024-08-07T16:02:36.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV before 0.92 has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:003 - http://secunia.com/advisories/28412 - http://www.vupen.com/english/advisories/2008/0924/references - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00644.html - http://www.securityfocus.com/bid/27063 - http://osvdb.org/42
chives/fedora-package-announce/2008-January/msg00644.html - http://www.securityfocus.com/bid/27063 - http://osvdb.org/42293 - http://secunia.com/advisories/28421 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00740.html - http://secunia.com/advisories/28587 - http://secunia.com/advisories/28153 - http://docs.info.apple.com/article.html?artnum=307562 - http://security.gentoo.org/glsa/glsa-200712-20.xml - http://securitytracker.com/id?1019149 - http://secunia.com/advisories/28278 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
CVE ID: CVE-2007-6338 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning Management System 4.1 SP4 allows remote attackers to execute arbitrary SQL commands via the user parameter (username field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485072/100/0/threaded - http://www.osvdb.org/39156 - http://packetstorm.linuxsecurity.com/0712-exploits/trivantis-sql.txt - http://securityreas
http://www.osvdb.org/39156 - http://packetstorm.linuxsecurity.com/0712-exploits/trivantis-sql.txt - http://securityreason.com/securityalert/3450 - http://www.securityfocus.com/bid/26865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39031 - http://secunia.com/advisories/28098
CVE ID: CVE-2007-6339 State: PUBLISHED Published: 2008-05-01T17:20:00 Last Updated: 2024-08-07T16:02:36.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Akamai Download Manager (aka DLM or dlmanager) ActiveX control (DownloadManagerV2.ocx) before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified "undocumented object parameters." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30037 - http://www.securitytracker.com/id?1019955 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=695 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061923.html -
igence/vulnerabilities/display.php?id=695 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061923.html - http://www.vupen.com/english/advisories/2008/1408/references - http://www.securityfocus.com/bid/28993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42117
CVE ID: CVE-2007-6340 State: PUBLISHED Published: 2008-02-05T02:00:00 Last Updated: 2024-08-07T16:02:36.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Geert Moernaut LSrunasE 1.0 and Supercrypt 1.0 use the RC4 stream cipher without constructing a unique initialization vector (IV), which makes it easier for local users to obtain cleartext passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487269/100/0/threaded - http://www.moernaut.com/default.aspx?item=supercrypt - http://www.moernaut.com/default.aspx?item=lsrunase - http://securityreason.com/securityalert/3611
CVE ID: CVE-2007-6341 State: PUBLISHED Published: 2007-12-20T23:00:00 Last Updated: 2024-08-07T16:02:36.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29354 - http://www.securitytracker.com/id?1019104 - http://search.cpan.org/src/OLAF/Net-DNS-0.63/Changes - http://secunia.com/advisories/29555 - http://www.debian.org/security/2008/dsa-1515 - https://rt.cpan.org/Public/Bug/Display.html?id=3031
om/advisories/29555 - http://www.debian.org/security/2008/dsa-1515 - https://rt.cpan.org/Public/Bug/Display.html?id=30316 - http://www.securiteam.com/unixfocus/6I00E0UKKQ.html - http://secunia.com/advisories/29343 - https://usn.ubuntu.com/594-1/ - http://secunia.com/advisories/29446 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:073 - http://www.securityfocus.com/bid/26902
CVE ID: CVE-2007-6342 State: PUBLISHED Published: 2007-12-13T21:00:00 Last Updated: 2024-08-07T16:02:36.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSION_COOKIE_NAME (session ID) in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489993/100/0/threaded - http://www.securityfocus.com/bid/26762 - http://search.cpan.org/src/DCASTRO/Apache-AuthCAS-0.5/Changes - http://secunia.com/advisories/29492 - http://www.securityfocus.com/archive/1/484
rc/DCASTRO/Apache-AuthCAS-0.5/Changes - http://secunia.com/advisories/29492 - http://www.securityfocus.com/archive/1/484711/100/0/threaded - http://securityreason.com/securityalert/3439