Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6365 State: PUBLISHED Published: 2007-12-15T01:00:00Z Last Updated: 2024-09-17T01:25:48.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 allows remote attackers to inject arbitrary web script or HTML via the month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: the day and year vectors are covered by CVE-2007-6274. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26945
CVE ID: CVE-2007-6366 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to mods/Calendar/index.php, accessed through a Calendar info action to mods.php; the id parameter to admin/mods_adm.php in a (2) Guestbook modifica or (3) Calendar modify action; or the (4) mese or (5) anno parameter to admin/mods_adm.php in a Calendar action. NOTE: the component for vectors 2 through 5 might be limited to administrators. Additional Analyst Notes: - CVE Program C
OTE: the component for vectors 2 through 5 might be limited to administrators. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3444 - http://secunia.com/advisories/27949 - https://www.exploit-db.com/exploits/4693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38895 - http://www.securityfocus.com/archive/1/484648/100/0/threaded - http://www.securityfocus.com/archive/1/485267/100/200/threaded
CVE ID: CVE-2007-6367 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username (user) or (2) comment (commento) field, different vectors than CVE-2007-2357. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3444 - http://secunia.com/advisories/27949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38893 - https://www.exploit-db.com/exploits/4693 - http://www.security
ps://exchange.xforce.ibmcloud.com/vulnerabilities/38893 - https://www.exploit-db.com/exploits/4693 - http://www.securityfocus.com/archive/1/484648/100/0/threaded - http://www.securityfocus.com/archive/1/485267/100/200/threaded
CVE ID: CVE-2007-6368 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in ezContents 1.4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the link parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39505 - http://www.securityfocus.com/archive/1/484647/100/0/threaded - http://securityreason.com/securityalert/3447 - https://www.exploit-db.com/exploits/4694
CVE ID: CVE-2007-6369 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) size or (2) path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4695
CVE ID: CVE-2007-6370 State: REJECTED Published: 2007-12-15T01:00:00 Last Updated: 2007-12-19T10:00:00 Description: No description available.
CVE ID: CVE-2007-6371 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nokia N95 cell phone with RM-159 12.0.013 firmware allows remote attackers to cause a denial of service (device inoperability) via a SIP INVITE message accompanied by an immediately subsequent SIP CANCEL message, followed by a second SIP INVITE message in a different session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26726 - http://www.vupen.com/english/advisories/2007/4113 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058839.html
CVE ID: CVE-2007-6372 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service (crash) via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/39157 - http://www.securitytracker.com/id?1019100 - http://secunia.com/advisories/28100 - http://www.securityfocus.com/bid/26869 - http://www.securityfocus.com/bid/28999 - http://www.vupen.com/english/advisories/2007/4223 - http://www.kb.ce
id/26869 - http://www.securityfocus.com/bid/28999 - http://www.vupen.com/english/advisories/2007/4223 - http://www.kb.cert.org/vuls/id/929656
CVE ID: CVE-2007-6373 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in GestDown 1.00 Beta allow remote attackers to execute arbitrary SQL commands via the (1) categorie parameter to catdownload.php, or the id parameter to (2) download.php or (3) hitcounter.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38945 - http://marc.info/?l=bugtraq&m=119730791316604&w=2 - http://www.securityfocus.com/bid/26799
CVE ID: CVE-2007-6374 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) users/register.php or (2) search/index.php, or an editcomments action in (3) wiki/index.php or (4) forums/index.php. NOTE: the error parameter to users/login.php is covered by CVE-2006-3103. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39130 - http://www.vupen.com/english/advisories/2007/4168 - https://exchange.xforce.ibmcl
References: - http://osvdb.org/39130 - http://www.vupen.com/english/advisories/2007/4168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38942 - http://osvdb.org/39129 - http://www.hackerscenter.com/archive/view.asp?id=28129 - http://www.securityfocus.com/archive/1/484805/100/0/threaded - http://secunia.com/advisories/28024 - http://securityreason.com/securityalert/3428 - http://www.securityfocus.com/bid/26801
CVE ID: CVE-2007-6375 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sort_mode parameter to wiki/list_pages.php and the (2) highlight parameter to search/index.php. NOTE: the researcher also reported injection via JavaScript code in the Search box, but this is probably a forced SQL error or other separate primary issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.hackerscenter.com/archive/view.asp?id=28129 - http://www.securit
otes: - CVE Program Container: References: - http://www.hackerscenter.com/archive/view.asp?id=28129 - http://www.securityfocus.com/archive/1/484805/100/0/threaded - http://securityreason.com/securityalert/3428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38943 - http://www.securityfocus.com/bid/26801
CVE ID: CVE-2007-6376 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the filename parameter, a different vector than CVE-2006-4190. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39507 - http://www.securityfocus.com/bid/26807
CVE ID: CVE-2007-6377 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long query string. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/poc/badbluebof.txt - http://securityreason.com/securityalert/3448 - http://secunia.com/advisories/28031 - http://osvdb.org/42416 - https://www.exploit-db.com/exploits/4784 - http://www.securityfocus.com/bid/26803 - http://www.securityfocus.com/archive/1/484834/100/
ploit-db.com/exploits/4784 - http://www.securityfocus.com/bid/26803 - http://www.securityfocus.com/archive/1/484834/100/0/threaded - http://aluigi.altervista.org/adv/badblue-adv.txt - http://www.vupen.com/english/advisories/2007/4160
CVE ID: CVE-2007-6378 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3448 - http://secunia.com/advisories/28031 - http://osvdb.org/42417 - http://www.securityfocus.com/bid/26803 - http://www.securityfocus.com/archive/1/484834/100/0/threaded - http://aluigi.altervista.org/adv/badblue-adv.txt - http://www.vupen
.securityfocus.com/archive/1/484834/100/0/threaded - http://aluigi.altervista.org/adv/badblue-adv.txt - http://www.vupen.com/english/advisories/2007/4160 - http://aluigi.org/testz/myhttpup.zip
CVE ID: CVE-2007-6379 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3448 - http://secunia.com/advisories/28031 - http://osvdb.org/42418 - http://www.securityfocus.com/bid/26803 - http://www.securityfocus.com/archive/1/484834/100/0/threaded - http://aluigi.altervista.org/adv/badblue-adv.txt - http://www.vupen.com/english/a
.com/archive/1/484834/100/0/threaded - http://aluigi.altervista.org/adv/badblue-adv.txt - http://www.vupen.com/english/advisories/2007/4160
CVE ID: CVE-2007-6380 State: PUBLISHED Published: 2007-12-15T01:00:00Z Last Updated: 2024-09-16T23:42:10.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in e-Xoops (exoops) 1.08, and 1.05 Rev 1 through 3, allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to (a) mylinks/ratelink.php, (b) adresses/ratefile.php, (c) mydownloads/ratefile.php, (d) mysections/ratefile.php, and (e) myalbum/ratephoto.php in modules/; the (2) bid parameter to (f) modules/banners/click.php; and the (3) gid parameter to (g) modules/arcade/index.php in a show_stats and play_game action, related issues to CVE-2007-5104 and CVE-2007-62
er to (g) modules/arcade/index.php in a show_stats and play_game action, related issues to CVE-2007-5104 and CVE-2007-6266. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26796 - http://lostmon.blogspot.com/2007/12/e-xoops-multiple-variablescripts-sql.html
CVE ID: CVE-2007-6381 State: PUBLISHED Published: 2007-12-15T02:00:00 Last Updated: 2024-08-07T16:02:36.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the indexed_search system extension in TYPO3 3.x, 4.0 through 4.0.7, and 4.1 through 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28243 - http://typo3.org/teams/security/security-bulletins/typo3-20071210-1/ - http://www.vupen.com/english/advisories/2007/4205 - http://osvdb.org/39506 - http://securitytracker.com/id?1019146 - http://www.securityfocus.c
glish/advisories/2007/4205 - http://osvdb.org/39506 - http://securitytracker.com/id?1019146 - http://www.securityfocus.com/bid/26871 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39017 - http://secunia.com/advisories/27969 - http://www.debian.org/security/2007/dsa-1439
CVE ID: CVE-2007-6382 State: PUBLISHED Published: 2007-12-15T02:00:00 Last Updated: 2024-08-07T16:02:36.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28080 - http://www.securityfocus.com/bid/26854 - http://sourceforge.net/project/shownotes.php?release_id=561214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39019 - http://osvdb.org/40473
CVE ID: CVE-2007-6383 State: PUBLISHED Published: 2007-12-15T02:00:00 Last Updated: 2024-08-07T16:02:36.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DAV component in Chandler Server (Cosmo) before 0.10.1 does not check resource creation permissions, which allows remote authenticated users to create arbitrary resources in another user's home collection. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4214 - http://osvdb.org/44152 - https://bugzilla.osafoundation.org/show_bug.cgi?id=11587 - http://lists.osafoundation.org/pipermail/cosmo-dev/2007-December/005442.html
CVE ID: CVE-2007-6384 State: PUBLISHED Published: 2007-12-15T02:00:00 Last Updated: 2024-08-07T16:02:36.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Image Converter functionality in BEA WebLogic Mobility Server 3.3, 3.5, and 3.6 through 3.6 SP1 allows remote attackers to obtain application file and resource access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/255 - http://www.vupen.com/english/advisories/2007/4204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39005 - http://osvdb.org/41880 - http://secunia.com/advisories/28078 - http://www.securitytrack
loud.com/vulnerabilities/39005 - http://osvdb.org/41880 - http://secunia.com/advisories/28078 - http://www.securitytracker.com/id?1019091
CVE ID: CVE-2007-6385 State: PUBLISHED Published: 2007-12-15T02:00:00 Last Updated: 2024-08-07T16:02:37.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42122 - http://www.securityfocus.com/bid/26851 - http://www.vupen.com/english/advisories/2007/4212 - http://www.kerio.com/kwf_history.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39020 - http://www.securi
- http://www.kerio.com/kwf_history.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39020 - http://www.securitytracker.com/id?1019095 - http://secunia.com/advisories/28072
CVE ID: CVE-2007-6386 State: PUBLISHED Published: 2007-12-15T02:00:00 Last Updated: 2024-08-07T16:02:36.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in PccScan.dll before build 1451 in Trend Micro AntiVirus plus AntiSpyware 2008, Internet Security 2008, and Internet Security Pro 2008 allows user-assisted remote attackers to cause a denial of service (SfCtlCom.exe crash), and allows local users to gain privileges, via a malformed .zip archive with a long name, as demonstrated by a .zip file created via format string specifiers in a crafted .uue file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28
n a crafted .uue file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28038 - http://www.vupen.com/english/advisories/2007/4191 - http://esupport.trendmicro.com/support/viewxml.do?ContentID=1036464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38982 - http://secway.org/advisory/AD20071211.txt - http://osvdb.org/39769 - http://www.securitytracker.com/id?1019079 - http://osvdb.org/39770
CVE ID: CVE-2007-6387 State: PUBLISHED Published: 2007-12-15T02:00:00 Last Updated: 2024-08-07T16:02:36.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics AnswerWorks, and Intuit Clearly Bookkeeping, ProSeries, QuickBooks, Quicken, QuickTax, and TurboTax, allow remote attackers to execute arbitrary code via long arguments to the (1) GetHistory, (2) GetSeedQuery, (3) SetSeedQuery, and possibly other methods. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - htt
details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vantagelinguistics.com/answerworks/release/ - http://www.vupen.com/english/advisories/2007/4194 - https://www.exploit-db.com/exploits/4825 - http://support.quickbooks.intuit.com/support/qbupdate2007/Default.aspx - http://secunia.com/advisories/26566 - http://www.intuit.com/support/security/ - http://secunia.com/advisories/26670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39004 - http://www.securityfocus.com/bid/26815 - http://www.vupen.com/english/advisories/2007/4195
CVE ID: CVE-2007-6388 State: PUBLISHED Published: 2008-01-08T18:00:00 Last Updated: 2024-08-07T16:02:36.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0005.html - http://www.vupen.com/english/advisories/2008/0554 - http://www.vupen.com/english/advisories/2008/0447/references - http://secunia
w.vupen.com/english/advisories/2008/0554 - http://www.vupen.com/english/advisories/2008/0447/references - http://secunia.com/advisories/28922 - http://www.vupen.com/english/advisories/2008/0986/references - http://securityreason.com/securityalert/3541 - http://secunia.com/advisories/28749 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.595748 - http://secunia.com/advisories/29988 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.vupen.com/english/advisories/2008/1623/references - http://secunia.com/advisories/29806 - http://www.securityfocus.com/archive/1/494428/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce
- http://www.securityfocus.com/archive/1/494428/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html - http://securitytracker.com/id?1019154 - http://secunia.com/advisories/28526 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html - http://www.redhat.com/support/errata/RHSA-2008-0006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10272 - http://secunia.com/advisories/31142 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200808e.html - http://www.vupen.com/english/advisories/2008/0924/references - http://sunsolve.sun.com/search/document.do?ass
08e.html - http://www.vupen.com/english/advisories/2008/0924/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-233623-1 - http://www.redhat.com/support/errata/RHSA-2008-0007.html - http://httpd.apache.org/security/vulnerabilities_20.html - http://www.vupen.com/english/advisories/2008/0047 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://www.redhat.com/support/errata/RHSA-2008-0008.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html - http://www.redhat.com/support/errata/RHSA-2008-0009.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:014 - http://secunia.com/advisories/29420 - http://secunia.com/adviso
w.mandriva.com/security/advisories?name=MDVSA-2008:014 - http://secunia.com/advisories/29420 - http://secunia.com/advisories/29504 - http://httpd.apache.org/security/vulnerabilities_22.html - http://www.securityfocus.com/archive/1/488082/100/0/threaded - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/39472 - http://www.vupen.com/english/advisories/2008/0809/references - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.securi
upen.com/english/advisories/2008/0809/references - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.securityfocus.com/archive/1/505990/100/0/threaded - http://secunia.com/advisories/28467 - http://www.securityfocus.com/archive/1/498523/100/0/threaded - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=689039 - http://www-1.ibm.com/support/docview.wss?uid=swg24019245 - http://www.securityfocus.com/archive/1/488082/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0004.html - http://lists.vmware.com/pipermail/security-announce/2009/000062.html - http://secunia.com/advisories/28607 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK62966 - http://lists.open
tml - http://secunia.com/advisories/28607 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK62966 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html - http://secunia.com/advisories/30356 - http://httpd.apache.org/security/vulnerabilities_13.html - http://www-1.ibm.com/support/docview.wss?uid=swg1PK63273 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:015 - http://docs.info.apple.com/article.html?artnum=307562 - http://secunia.com/advisories/33200 - http://secunia.com/advisories/28965 - http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2008/05/023342-01.pdf - http://secunia.com/advisories/28471 - http://www.securityfocus.com/bid/27237 - http:/