Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
isories/26804 - http://secunia.com/advisories/26782 - http://dist.trolltech.com/developer/download/175791_3.diff - http://fedoranews.org/updates/FEDORA-2007-703.shtml - http://fedoranews.org/updates/FEDORA-2007-221.shtml - http://security.gentoo.org/glsa/glsa-200712-08.xml - http://secunia.com/advisories/28021 - http://www.redhat.com/support/errata/RHSA-2007-0883.html - http://securitytracker.com/id?1018688 - http://www.securityfocus.com/archive/1/481498/100/0/threaded - http://www.ubuntu.com/usn/usn-513-1 - http://www.securityfocus.com/bid/25657 - http://www.debian.org/security/2007/dsa-1426
CVE ID: CVE-2007-4138 State: PUBLISHED Published: 2007-09-14T01:00:00 Last Updated: 2024-08-07T14:46:39.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SFU) primary group attribute is not defined. Additional Analyst Notes: - CVE Program Container: References: - http://www.samba.org/samba/security/CVE-2007-4138.html - http://www.redhat.com/support/errata/RHSA-2007-1016.html - http://www.securityfocus.com/bid/25636 - http://ww
138.html - http://www.redhat.com/support/errata/RHSA-2007-1016.html - http://www.securityfocus.com/bid/25636 - http://www.securityfocus.com/archive/1/479078/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.419439 - http://securityreason.com/securityalert/3135 - http://www.vupen.com/english/advisories/2007/3120 - http://secunia.com/advisories/26764 - http://secunia.com/advisories/26834 - http://secunia.com/advisories/26795 - http://www.securitytracker.com/id?1018681 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00201.html - http://docs.info.apple.com/a
81 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00201.html - http://docs.info.apple.com/article.html?artnum=307179 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36560 - https://issues.rpath.com/browse/RPL-1705 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10375 - http://secunia.com/advisories/26776 - http://www.redhat.com/support/errata/RHSA-2007-1017.html
CVE ID: CVE-2007-4139 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T14:46:38.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Temporary Uploads editing functionality (wp-admin/includes/upload.php) in WordPress 2.2.1, allows remote attackers to inject arbitrary web script or HTML via the style parameter to wp-admin/upload.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25158 - http://trac.wordpress.org/attachment/ticket/4689/4689.diff - https://exchange.xforce.ibmcloud.com/vulnerabilities/35718 - http://mybeni.rootzilla.de/mybeNi/2007/wordpress_zerod
ff - https://exchange.xforce.ibmcloud.com/vulnerabilities/35718 - http://mybeni.rootzilla.de/mybeNi/2007/wordpress_zeroday_vulnerability_roundhouse_kick_and_why_i_nearly_wrote_the_first_blog_worm/ - http://www.vupen.com/english/advisories/2007/2744 - http://secunia.com/advisories/26296 - http://osvdb.org/36621 - http://trac.wordpress.org/ticket/4689
CVE ID: CVE-2007-4140 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T14:46:39.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Live for Speed (LFS) S2 ALPHA PATCH 0.5x allows user-assisted remote attackers to execute arbitrary code via a .mpr file (replay file) that contains a long car name. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35729 - http://www.securityfocus.com/bid/25168 - http://www.securityfocus.com/bid/25208
CVE ID: CVE-2007-4141 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T14:46:39.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenRat CMS 0.8-beta1 and earlier allows remote attackers to obtain sensitive information via a request containing an XSS sequence in the action parameter to index.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39047 - http://pridels-team.blogspot.com/2007/08/openrat-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35750
CVE ID: CVE-2007-4142 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T14:46:39.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Lotus Sametime Server 7.5.1 before 20070731 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a crafted Sametime meeting. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26302 - http://www-1.ibm.com/support/docview.wss?uid=swg21266789 - http://www.securitytracker.com/id?1018502 - http://osvdb.org/36462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35731 - http://www.securityfocu
?1018502 - http://osvdb.org/36462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35731 - http://www.securityfocus.com/bid/25167 - http://www.vupen.com/english/advisories/2007/2734
CVE ID: CVE-2007-4143 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T14:46:39.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPal transactions. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35664 - http://www.securityfocus.com/archive/1/474936/
alert/2958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35664 - http://www.securityfocus.com/archive/1/474936/100/0/threaded - http://www.securityfocus.com/bid/25116
CVE ID: CVE-2007-4144 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T14:46:39.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sample-forms/simple-contact-form-with-preview/simple-contact-form-with-preview.html in MitriDAT eMail Form Processor Pro allows remote attackers to inject arbitrary web script or HTML via the base_path parameter, possibly related to (1) formprocessorpro.php in the PHP version of the product, and (2) formprocessorpro.pl in the Perl version of the product. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2961 - http://www.vupen.co
Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2961 - http://www.vupen.com/english/advisories/2007/2700 - http://www.securityfocus.com/archive/1/474615/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35695 - http://secunia.com/advisories/26225
CVE ID: CVE-2007-4145 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T14:46:39.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the BlueSkychat (BlueSkyCat) ActiveX control (V2.V2Ctrl.1) in v2.ocx 8.1.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the second argument to the ConnecttoServer method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/475150/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35699 - http://www.securityfocus.com/bid/25149 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/
abilities/35699 - http://www.securityfocus.com/bid/25149 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064995.html - http://codeaudit.blogspot.com/ - http://www.vulnhunt.com/advisories/CAL-20070730-1_BlueSkyCat_v2.ocx_ActiveX_remote_heap_overflow_vulnerability_en.txt - http://securityreason.com/securityalert/2959
CVE ID: CVE-2007-4146 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T14:46:39.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28389 - http://downloads.securityfocus.com/vulnerabilities/exploits/25148.html - http://osvdb.org/40156 - http://www.securityfocus.com/bid/25148
CVE ID: CVE-2007-4147 State: PUBLISHED Published: 2007-08-03T20:00:00Z Last Updated: 2024-09-16T22:44:54.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Interspire ArticleLive NX before 1.7.1.2 have unknown impact and attack vectors, possibly related to (1) AL_SANITIZE and (2) "Calling the constructor to make sure things are checked, safe mode, etc." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25150 - http://www.interspire.com/content/blogs/272/ - http://www.interspire.com/forum/showthread.php?p=35997
CVE ID: CVE-2007-4148 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T14:46:39.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to cause a denial of service (persistent daemon crashes) or execute arbitrary code via a long filename in a "LOG." command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25153 - http://www.portcullis.co.uk/uplds/advisories/vaheapoverflow%20-%2006_040.txt - http://osvdb.org/46977
CVE ID: CVE-2007-4149 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T14:46:39.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 does not require authentication for (1) the "LOG." command, which allows remote attackers to create or overwrite arbitrary files; (2) the SETTINGSFILE command, which allows remote attackers to overwrite the ini file, and reconfigure VSAOD or cause a denial of service; or (3) the UNINSTALL command, which allows remote attackers to cause a denial of service (daemon shutdown). NOTE: vector 1 can be leveraged for code execution by writing to a Startup fold
e a denial of service (daemon shutdown). NOTE: vector 1 can be leveraged for code execution by writing to a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25153 - http://www.portcullis.co.uk/uplds/advisories/vauninstall%2006_045.txt - http://www.portcullis.co.uk/uplds/advisories/vainifileoverwrite%20-%2006_041.txt - http://www.portcullis.co.uk/uplds/advisories/vafileover-06-039.txt - http://osvdb.org/42462
CVE ID: CVE-2007-4150 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-12-04T15:31:04.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/25153 - http://www.portcullis.co.uk/uplds/advisories
SA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/25153 - http://www.portcullis.co.uk/uplds/advisories/vapassword%20-%2006-042.txt - http://osvdb.org/46979
CVE ID: CVE-2007-4151 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T14:46:39.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to obtain sensitive information via (1) a LOG.ON command, which reveals the logging pathname in the server response; (2) a VER command, which reveals the version number in the server response; and (3) a connection, which reveals the version number in the banner. Additional Analyst Notes: - CVE Program Container: References: - http://www.portcullis.co.uk/uplds/advisories/vaversiondisclosure%2006_046.txt - http://www.securityfocus
: References: - http://www.portcullis.co.uk/uplds/advisories/vaversiondisclosure%2006_046.txt - http://www.securityfocus.com/bid/25153 - http://osvdb.org/46982 - http://www.portcullis.co.uk/uplds/advisories/vapathdisclosure%2006-043.txt - http://osvdb.org/46981 - http://osvdb.org/46983
CVE ID: CVE-2007-4152 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T14:46:39.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing and resending data from the DETAILS and PROCESS sections of a session that schedules an audit. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25153 - http://www.portcullis.co.uk/uplds/advisories/vareplay%2006_044.txt - http://osvdb.org/46980
CVE ID: CVE-2007-4153 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T14:46:39.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the Options Database Table in the Admin Panel, accessed through options.php; or (2) the opml_url parameter to link-import.php. NOTE: this might not cross privilege boundaries in some configurations, since the Administrator role has the unfiltered_html capability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulner
capability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35722 - http://codex.wordpress.org/Roles_and_Capabilities - http://secunia.com/advisories/30013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35720 - http://osvdb.org/46995 - http://www.debian.org/security/2008/dsa-1564 - http://mybeni.rootzilla.de/mybeNi/2007/wordpress_zeroday_vulnerability_roundhouse_kick_and_why_i_nearly_wrote_the_first_blog_worm/ - http://osvdb.org/46994
CVE ID: CVE-2007-4154 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T14:46:39.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands via the page_options parameter to (1) options-general.php, (2) options-writing.php, (3) options-reading.php, (4) options-discussion.php, (5) options-privacy.php, (6) options-permalink.php, (7) options-misc.php, and possibly other unspecified components. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35719 - http://secuni
Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35719 - http://secunia.com/advisories/30013 - http://www.debian.org/security/2008/dsa-1564 - http://mybeni.rootzilla.de/mybeNi/2007/wordpress_zeroday_vulnerability_roundhouse_kick_and_why_i_nearly_wrote_the_first_blog_worm/
CVE ID: CVE-2007-4155 State: PUBLISHED Published: 2007-08-03T21:00:00 Last Updated: 2024-08-07T14:46:39.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first two arguments to the (1) CreateProcess or (2) CreateProcessEx method. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://www.vupen.com/english/advisories/2007/3229 - http://www.vmware.com/support/server/doc/releasenotes_server.html - htt
p://www.vupen.com/english/advisories/2007/3229 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - https://www.exploit-db.com/exploits/4245 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/26890 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35670 - http://www.securitytracker.com/id?1018511 - http://
.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35670 - http://www.securitytracker.com/id?1018511 - http://www.securityfocus.com/bid/25131
CVE ID: CVE-2007-4156 State: PUBLISHED Published: 2007-08-03T21:00:00 Last Updated: 2024-08-07T14:46:39.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in wolioCMS allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to member.php in a page action, related to a SELECT statement in common.php; and the (2) loginid parameter (uid variable), and possibly the (3) pwd parameter, to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2726 - http://www.securityfocus.com/archive/1/475068/100/0/threaded - https://exchange.xforce.ibmcloud.com/vul
ries/2007/2726 - http://www.securityfocus.com/archive/1/475068/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35678 - http://secunia.com/advisories/26270 - http://www.securityfocus.com/bid/25134 - https://www.exploit-db.com/exploits/4246 - http://securityreason.com/securityalert/2956
CVE ID: CVE-2007-4157 State: PUBLISHED Published: 2007-08-03T21:00:00 Last Updated: 2024-08-07T14:46:39.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing the authentication cookie only requires the password hash, not the cleartext version. Additional Analyst Notes: - CVE Program Container: References: - http://forcehacker.com/forum/viewtopic.php?t=2352 - http://secunia.com/advisories/2
CVE Program Container: References: - http://forcehacker.com/forum/viewtopic.php?t=2352 - http://secunia.com/advisories/26262 - http://osvdb.org/38707 - http://securityreason.com/securityalert/2957 - http://osvdb.org/38706 - http://www.securityfocus.com/archive/1/474938/100/0/threaded
CVE ID: CVE-2007-4158 State: PUBLISHED Published: 2007-08-03T21:00:00 Last Updated: 2024-08-07T14:46:39.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in TIBCO Rendezvous (RV) daemon (rvd) 7.5.2, 7.5.3 and 7.5.4 allows remote attackers to cause a denial of service (memory consumption) via a packet with a length field of zero, a different vulnerability than CVE-2006-2830. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37680 - http://www.attrition.org/pipermail/vim/2007-December/001855.html - http://www.irmplc.com/index.php/111-Vendor-Alerts - http://www.securitytracker.com/id?1018512 - http://archives.neohapsis.com/archives/fulld
m/index.php/111-Vendor-Alerts - http://www.securitytracker.com/id?1018512 - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0620.html - http://www.securityfocus.com/bid/25132 - http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf - http://www.irmplc.com/index.php/160-Advisory-025 - http://secunia.com/advisories/26337 - http://www.vupen.com/english/advisories/2007/2814
CVE ID: CVE-2007-4159 State: PUBLISHED Published: 2007-08-03T21:00:00 Last Updated: 2024-08-07T14:46:39.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.html in the HTTP administration interface in certain daemons in TIBCO Rendezvous (RV) 7.5.2 allows remote attackers to obtain sensitive information, such as a user name and IP addresses, via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018512 - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0620.html - http://osvdb.org/46993 - http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf - http://www.vupen.com/e
rg/46993 - http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf - http://www.vupen.com/english/advisories/2007/2814
CVE ID: CVE-2007-4160 State: PUBLISHED Published: 2007-08-03T21:00:00 Last Updated: 2024-08-07T14:46:39.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of TIBCO Rendezvous (RV) 7.5.2 clients, when -no-multicast is omitted, uses a multicast group as the destination for a network message, which might make it easier for remote attackers to capture message contents by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018512 - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0620.html - http://osvdb.org/46992 - http://www.irmplc.com/content/pdfs/Security_Testing_Enterpris
ulldisclosure/2007-07/0620.html - http://osvdb.org/46992 - http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf - http://www.vupen.com/english/advisories/2007/2814
CVE ID: CVE-2007-4161 State: PUBLISHED Published: 2007-08-03T21:00:00 Last Updated: 2024-08-07T14:46:39.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: rvd in TIBCO Rendezvous (RV) 7.5.2, when -no-lead-wc is omitted, might allow remote attackers to cause a denial of service (network instability) via a subject name with a leading (1) '*' (asterisk) or (2) '>' (greater than) wildcard character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018512 - http://osvdb.org/37681 - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0620.html - http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems
ives/fulldisclosure/2007-07/0620.html - http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf - http://secunia.com/advisories/26337 - http://www.vupen.com/english/advisories/2007/2814
CVE ID: CVE-2007-4162 State: PUBLISHED Published: 2007-08-03T21:00:00 Last Updated: 2024-08-07T14:46:39.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: TIBCO Rendezvous (RV) 7.5.2 does not protect confidentiality or integrity of inter-daemon communication, which allows remote attackers to capture and spoof traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018512 - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0620.html - http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf - http://osvdb.org/46991 - http://www.vupen.com/english/advisories/2007/2814