Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://us2.php.net/releases/4_4_7.php - http://us2.php.net/releases/5_2_2.php - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://www.novell.com/linux/security/advisories/2007_32_php.html - http://www.php-security.org/MOPB/MOPB-21-2007.html - http://secunia.com/advisories/26235 - http://www.securityfocus.com/bid/22954
CVE ID: CVE-2007-1462 State: PUBLISHED Published: 2007-03-15T20:00:00 Last Updated: 2024-08-07T12:59:08.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: The luci server component in conga preserves the password between page loads for the Add System/Cluster task flow by storing the password in the Value attribute of a password entry field, which allows attackers to steal the password by performing a "view source" or other operation to obtain the web page. NOTE: there are limited circumstances under which such an attack is feasible. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35086 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=22863
CVE Program Container: References: - http://osvdb.org/35086 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228637
CVE ID: CVE-2007-1463 State: PUBLISHED Published: 2007-03-21T19:00:00 Last Updated: 2024-08-07T12:59:08.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33163 - http://secunia.com/advisories/24859 - http://secunia.com/advisories/24615 - http://secunia.com/advisories/24597 - http://secunia.com/advisories/24584 - http://www.securityfocus.com/bid/23138 - http:/
p://secunia.com/advisories/24597 - http://secunia.com/advisories/24584 - http://www.securityfocus.com/bid/23138 - http://www.gentoo.org/security/en/glsa/glsa-200704-10.xml - http://secunia.com/advisories/24661 - https://issues.rpath.com/browse/RPL-1170 - http://www.vupen.com/english/advisories/2007/1059 - http://www.novell.com/linux/security/advisories/2007_8_sr.html - http://www.ubuntu.com/usn/usn-438-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:069 - http://www.securityfocus.com/archive/1/463710/100/0/threaded - http://secunia.com/advisories/25072 - http://sourceforge.net/project/shownotes.php?group_id=93438&release_id=495106 - http://www.securityfocus.com/bid/23070
CVE ID: CVE-2007-1464 State: PUBLISHED Published: 2007-03-21T19:00:00 Last Updated: 2024-08-07T12:59:08.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33164 - http://secunia.com/advisories/24859 - http://secunia.com/advisories/24615 - http://www.securityfocus.com/bid/23138 - http://www.gentoo.org/security/en/glsa/glsa-200704-10.xml - http://secunia.com/advisories/24661 - https://issues
23138 - http://www.gentoo.org/security/en/glsa/glsa-200704-10.xml - http://secunia.com/advisories/24661 - https://issues.rpath.com/browse/RPL-1170 - http://www.vupen.com/english/advisories/2007/1059 - http://www.novell.com/linux/security/advisories/2007_8_sr.html - http://www.securityfocus.com/archive/1/463710/100/0/threaded - http://secunia.com/advisories/25072 - http://sourceforge.net/project/shownotes.php?group_id=93438&release_id=495106
CVE ID: CVE-2007-1465 State: PUBLISHED Published: 2007-03-24T20:00:00 Last Updated: 2024-08-07T12:59:08.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via a long DNS query packet to UDP port 53. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24623 - http://seclists.org/fulldisclosure/2007/Mar/0409.html - https://www.cynops.de/advisories/CVE-2007-1465.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/33171 - http://www.securityfocus.com/bid/23112 - http://osvdb.org/34449 - http://www.vupen.com/english/adv
lnerabilities/33171 - http://www.securityfocus.com/bid/23112 - http://osvdb.org/34449 - http://www.vupen.com/english/advisories/2007/1091
CVE ID: CVE-2007-1466 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the WP6GeneralTextPacket::_readContents function in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file, a different vulnerability than CVE-2007-0002. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102863-1 - http://www.securityfocus.com/bid/23006 - https://oval.cisecurity.
ve.sun.com/search/document.do?assetkey=1-26-102863-1 - http://www.securityfocus.com/bid/23006 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10862 - http://fedoranews.org/cms/node/2805 - http://secunia.com/advisories/24573 - http://secunia.com/advisories/24588 - http://secunia.com/advisories/24581 - http://security.gentoo.org/glsa/glsa-200704-07.xml - http://www.redhat.com/support/errata/RHSA-2007-0033.html - http://secunia.com/advisories/24794 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:064 - http://secunia.com/advisories/24550 - http://sourceforge.net/project/shownotes.php?release_id=494122 - http://www.debian.org/security/2007/ds
visories/24550 - http://sourceforge.net/project/shownotes.php?release_id=494122 - http://www.debian.org/security/2007/dsa-1268 - http://secunia.com/advisories/24507 - http://secunia.com/advisories/24557 - http://www.securityfocus.com/archive/1/463033/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2007:063 - http://secunia.com/advisories/24580 - http://www.ubuntu.com/usn/usn-437-1 - http://secunia.com/advisories/24572 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=490 - http://www.vupen.com/english/advisories/2007/0976 - http://www.securitytracker.com/id?1017789 - http://www.redhat.com/support/errata/RHSA-2007-0055.html - http://secunia.com/adv
//www.securitytracker.com/id?1017789 - http://www.redhat.com/support/errata/RHSA-2007-0055.html - http://secunia.com/advisories/24856
CVE ID: CVE-2007-1467 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks and related products, Wireless LAN Solution Engine (WLSE), 2006 Wirel
Manager, Network Analysis Module (NAM), CiscoWorks and related products, Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC), and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via the text field of the search form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462932/100/0/threaded - http://www.cisco.com/en/US/products/products_security_response09186a0080803fe4.html - http://securityreason.com/securityalert/2437 - http://secunia.com/advisories/24499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33024 - http://www.securitytracker.com/id?1017778 - http://www.sec
https://exchange.xforce.ibmcloud.com/vulnerabilities/33024 - http://www.securitytracker.com/id?1017778 - http://www.securityfocus.com/archive/1/462944/100/0/threaded - http://www.securityfocus.com/bid/22982 - http://www.vupen.com/english/advisories/2007/0973
CVE ID: CVE-2007-1468 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest (CQ) Web 7.0.0.0 allows remote attackers to inject arbitrary web script or HTML via an attachment to a defect log entry. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33001 - http://www.securityfocus.com/bid/22981 - http://securityreason.com/securityalert/2442 - http://www.securityfocus.com/archive/1/462919/100/0/threaded - http://secunia.com/advisories/24523 - http://www.securitytracker.c
w.securityfocus.com/archive/1/462919/100/0/threaded - http://secunia.com/advisories/24523 - http://www.securitytracker.com/id?1017786 - http://osvdb.org/34346 - http://www.vupen.com/english/advisories/2007/1036
CVE ID: CVE-2007-1469 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22988 - http://www.osvdb.org/34239 - http://www.vupen.com/english/advisories/2007/1002 - http://www.securityfocus.com/archive/1/462971/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33005 - http://secunia.com/advisories/24543 -
971/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33005 - http://secunia.com/advisories/24543 - http://securityreason.com/securityalert/2429
CVE ID: CVE-2007-1470 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in LIBFtp 5.0 allow user-assisted remote attackers to execute arbitrary code via certain long arguments to the (1) FtpArchie, (2) FtpDebugDebug, (3) FtpOpenDir, (4) FtpSize, or (5) FtpChmod function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35038 - http://www.securityfocus.com/archive/1/462954/100/0/threaded - http://www.securityfocus.com/bid/22987 - http://securityreason.com/securityalert/2441
CVE ID: CVE-2007-1471 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and gain privileges via a direct URL request for admin/AdminBlogNewsEdit.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462920/100/0/threaded - http://osvdb.org/35039 - http://securityreason.com/securityalert/2440
CVE ID: CVE-2007-1472 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Variable overwrite vulnerability in groupit/base/groupit.start.inc in Groupit 2.00b5 allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via arguments that are written to $_GLOBALS, as demonstrated using a URL in the c_basepath parameter to (1) content.php, (2) userprofile.php, (3) password.php, (4) dispatch.php, and (5) deliver.php in html/, and possibly (6) load.inc.php and related files. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.echo.or.id/
nc.php and related files. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.echo.or.id/adv/adv75-theday-2007.txt - http://www.vupen.com/english/advisories/2007/0995 - https://www.exploit-db.com/exploits/3486 - http://osvdb.org/34476 - http://www.attrition.org/pipermail/vim/2007-March/001435.html - http://securityreason.com/securityalert/2428 - http://www.securityfocus.com/archive/1/462918/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33000 - http://www.attrition.org/pipermail/vim/2007-March/001436.html
CVE ID: CVE-2007-1473 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the new_lang parameter to login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462915/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_007_suse.html - http://secunia.com/advisories/24528 - http://secunia.com/advisories/24995
linux/security/advisories/2007_007_suse.html - http://secunia.com/advisories/24528 - http://secunia.com/advisories/24995 - http://secunia.com/advisories/27565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33013 - http://securityreason.com/securityalert/2427 - http://securitytracker.com/id?1017775 - http://www.securityfocus.com/bid/22984 - http://www.osvdb.org/33084 - http://www.debian.org/security/2007/dsa-1406 - http://www.vupen.com/english/advisories/2007/0965 - http://lists.horde.org/archives/announce/2007/000315.html
CVE ID: CVE-2007-1474 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=489 - http://www.securitytracker.com/id?1017784 - http://secunia.com/advisories/27565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32997 - htt
.com/id?1017784 - http://secunia.com/advisories/27565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32997 - http://www.securityfocus.com/bid/22985 - http://www.securitytracker.com/id?1017785 - http://www.debian.org/security/2007/dsa-1406 - http://www.vupen.com/english/advisories/2007/0965 - http://lists.horde.org/archives/announce/2007/000315.html
CVE ID: CVE-2007-1475 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the (1) ibase_connect and (2) ibase_pconnect functions in the interbase extension in PHP 4.4.6 and earlier allow context-dependent attackers to execute arbitrary code via a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462931/100/0/threaded - https://www.exploit-db.com/exploits/3488 - http://www.securityfocus.com/bid/22976 - http://securityreason.com/securityalert/2439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/330
.com/bid/22976 - http://securityreason.com/securityalert/2439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33019 - http://secunia.com/advisories/24529 - http://retrogod.altervista.org/php_446_ibase_connect_bof.html
CVE ID: CVE-2007-1476 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/security/Content/2007.
Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/security/Content/2007.09.05.html - http://www.securityfocus.com/archive/1/462926/100/0/threaded - http://marc.info/?l=full-disclosure&m=117396596027148&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33003 - http://www.securityfocus.com/bid/22977 - http://osvdb.org/35088 - http://securityreason.com/securityalert/2438 - http://securitytracker.com/id?1018656 - http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymTDI-driver-input-buffer.php
CVE ID: CVE-2007-1477 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cfg_language parameter. NOTE: this issue has been disputed by CVE, since the cfg_language variable is configured upon proper product installation Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462970/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33006 - http://security
focus.com/archive/1/462970/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33006 - http://securityreason.com/securityalert/2426 - http://attrition.org/pipermail/vim/2007-April/001564.html
CVE ID: CVE-2007-1478 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: download.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain script source code via the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1003 - https://www.exploit-db.com/exploits/3494 - http://www.securityfocus.com/bid/22989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33004
CVE ID: CVE-2007-1479 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33015 - https://www.exploit-db.com/exploits/3489 - http://osvdb.org/34233
CVE ID: CVE-2007-1480 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php with Name, Email, and PASSWORD parameters set. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24536 - http://osvdb.org/34234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33014 - https://www.exploit-db.com/exploits/3489
CVE ID: CVE-2007-1481 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in WBBlog allows remote attackers to execute arbitrary SQL commands via the e_id parameter in a viewentry cmd. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3490 - http://www.vupen.com/english/advisories/2007/1001 - http://secunia.com/advisories/24532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33010 - http://www.securityfocus.com/bid/22998
CVE ID: CVE-2007-1482 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in WBBlog allows remote attackers to inject arbitrary web script or HTML via the e_id parameter in a viewentry cmd. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3490 - http://www.vupen.com/english/advisories/2007/1001 - http://secunia.com/advisories/24532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33011 - http://www.securityfocus.com/bid/22998
CVE ID: CVE-2007-1483 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP code via a URL in the includedir parameter to (1) login.php, (2) get_reminders.php, or (3) get_events.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33008 - http://www.securityfocus.com/archive/1/462957/100/0/threaded - https://www.exploit-db.com/exploits/3492 - http://www.securityfocus
.securityfocus.com/archive/1/462957/100/0/threaded - https://www.exploit-db.com/exploits/3492 - http://www.securityfocus.com/bid/23054 - http://sourceforge.net/mailarchive/forum.php?thread_name=45EAF486.9080902%40k5n.us&forum_name=webcalendar-announce - http://securityreason.com/securityalert/2425
CVE ID: CVE-2007-1484 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, which triggers memory corruption and allows local users to bypass safe_mode and execute arbitrary code via a certain unset operation after array_user_key_compare has been called. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22990 - http://www.vupen.com/english/advisories/2007/2732 - http://secunia.com/advisories/25056 - http://secunia.com/advisories/24542 -
ww.vupen.com/english/advisories/2007/2732 - http://secunia.com/advisories/25056 - http://secunia.com/advisories/24542 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://www.php-security.org/MOPB/MOPB-24-2007.html - http://us2.php.net/releases/4_4_7.php - http://www.ubuntu.com/usn/usn-455-1 - http://us2.php.net/releases/5_2_2.php - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/25445 - http://secunia.com/advisories/25057 - http://www.novell.com/linux/security/advisories/2007_32_php.html - http://secunia.com/advisories/26235
CVE ID: CVE-2007-1485 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the set_umask function in QFTP in LIBFtp 3.1-1 allows local users to execute arbitrary code via a long -m argument. NOTE: CVE disputes this issue because QFTP is not setuid, and it is unlikely that there are web interfaces to QFTP that would accept untrusted command line arguments Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462952/100/0/threaded - http://www.securityfocus.com/bid/22986 - http://securityreason.com/securityalert/2443 - http://osvdb.or
100/0/threaded - http://www.securityfocus.com/bid/22986 - http://securityreason.com/securityalert/2443 - http://osvdb.org/35089