Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2488 State: PUBLISHED Published: 2007-05-07T19:00:00 Last Updated: 2024-08-07T13:42:33.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information (memory contents) or cause a denial of service (application crash), by sending a frame that lacks a 0 byte. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1661 - http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - http://osvdb.org/35769
h/advisories/2007/1661 - http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - http://osvdb.org/35769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34085 - http://secunia.com/advisories/25582 - http://secunia.com/advisories/25134 - http://ftp.digium.com/pub/asa/ASA-2007-013.pdf - http://www.securityfocus.com/bid/23824 - http://www.debian.org/security/2007/dsa-1358
CVE ID: CVE-2007-2489 State: PUBLISHED Published: 2007-05-03T23:00:00 Last Updated: 2024-08-07T13:42:32.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in LiveData Protocol Server 5.00.045, and other versions before update 500062 (5.00.062), allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted request for a WSDL file that causes a negative length to be used in a strncpy call. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35529 - http://www.securityfocus.com/bid/23773 - http://www.vupen.com/english/advisories/2007/1633 - http://labs.idefense.com/intelligence
.securityfocus.com/bid/23773 - http://www.vupen.com/english/advisories/2007/1633 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=523 - http://www.kb.cert.org/vuls/id/213516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34031 - http://www.securitytracker.com/id?1017998 - http://secunia.com/advisories/25076
CVE ID: CVE-2007-2490 State: PUBLISHED Published: 2007-05-03T23:00:00 Last Updated: 2024-08-07T13:42:33.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in LiveData Server before 5.00.62 allows remote attackers to cause a denial of service (exit) via crafted Connection-Oriented Transport Protocol (COTP) packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1633 - http://osvdb.org/35530 - http://www.securityfocus.com/bid/23775 - http://www.kb.cert.org/vuls/id/711420 - http://www.kb.cert.org/vuls/id/MIMG-6Q3NFD - https://exchange.xforce.ibmcloud.com/vulnerabilities/34029 - http://secunia.c
tp://www.kb.cert.org/vuls/id/MIMG-6Q3NFD - https://exchange.xforce.ibmcloud.com/vulnerabilities/34029 - http://secunia.com/advisories/25113
CVE ID: CVE-2007-2491 State: PUBLISHED Published: 2007-05-04T00:00:00 Last Updated: 2024-08-07T13:42:33.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PIIX4 power management subsystem in EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996 allows local users to write to arbitrary memory locations via a crafted poke to I/O port 0x1004, triggering a denial of service (virtual machine crash) or other unspecified impact, a related issue to CVE-2007-1337. Additional Analyst Notes: - CVE Program Container: References: - http://taviso.decsystem.org/virtsec.pdf - http://www.vupen.com/english/advisories/2007/1592 - http://osvdb.org/40088
CVE ID: CVE-2007-2492 State: PUBLISHED Published: 2007-05-04T00:00:00 Last Updated: 2024-08-07T13:42:33.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the v4bJournal module for PostNuke allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a journal_comment action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2674 - http://www.securityfocus.com/bid/23777 - https://www.exploit-db.com/exploits/3835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34024 - http://www.securityfocus.com/archive/1/467387/100/0/threaded - http://osvdb.or
orce.ibmcloud.com/vulnerabilities/34024 - http://www.securityfocus.com/archive/1/467387/100/0/threaded - http://osvdb.org/35703 - http://www.vupen.com/english/advisories/2007/1632
CVE ID: CVE-2007-2493 State: PUBLISHED Published: 2007-05-04T00:00:00 Last Updated: 2024-08-07T13:42:33.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in faq.php in the FAQ & RULES 2.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34008 - http://osvdb.org/37613 - https://www.exploit-db.com/exploits/3833 - http://www.securityfocus.com/bid/23758 - http://www.vupen.com/english/advisories/2007/1631
CVE ID: CVE-2007-2494 State: PUBLISHED Published: 2007-05-04T00:00:00 Last Updated: 2024-08-07T13:42:33.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://moaxb.blogspot.com/
rom third party information. Additional Analyst Notes: - CVE Program Container: References: - http://moaxb.blogspot.com/2007/05/moaxb-01-powerpointviewerocx-31.html - https://www.exploit-db.com/exploits/3826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34013 - http://osvdb.org/34332 - http://www.securityfocus.com/bid/23733 - http://secunia.com/advisories/25092 - http://www.vupen.com/english/advisories/2007/1612
CVE ID: CVE-2007-2495 State: PUBLISHED Published: 2007-05-04T00:00:00 Last Updated: 2024-08-07T13:42:33.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the ExcelOCX ActiveX control in ExcelViewer.ocx 3.1.0.6 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com
party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34011 - https://www.exploit-db.com/exploits/3830 - http://osvdb.org/34333 - http://www.securityfocus.com/bid/23755 - http://www.vupen.com/english/advisories/2007/1613 - http://secunia.com/advisories/25077 - http://moaxb.blogspot.com/2007/05/moaxb-02-excelviewerocx-v-31-multiple.html
CVE ID: CVE-2007-2496 State: PUBLISHED Published: 2007-05-04T00:00:00 Last Updated: 2024-08-07T13:42:33.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) GotoPage, (6) Save, (7) SaveWebFile, (8) HttpDownloadFile, (9) Open, (10) OpenWebFile, (11) SaveAs, or (12) ShowWordStandardDialog property value. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1634 - http://osvdb.org/34334 - http://www.secu
am Container: References: - http://www.vupen.com/english/advisories/2007/1634 - http://osvdb.org/34334 - http://www.securityfocus.com/bid/23784 - http://secunia.com/advisories/25100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34027 - http://moaxb.blogspot.com/2007/05/moaxb-03-wordviewerocx-32-multiple_03.html
CVE ID: CVE-2007-2497 State: PUBLISHED Published: 2007-05-04T00:00:00 Last Updated: 2024-08-07T13:42:33.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer 10 Gold allows remote attackers to cause a denial of service (memory consumption) via a certain .ra file. NOTE: this issue was referred to as a "memory leak," but it is not clear if this is correct. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3819 - http://www.securityfocus.com/bid/23712 - http://osvdb.org/41730
CVE ID: CVE-2007-2498 State: PUBLISHED Published: 2007-05-04T00:00:00 Last Updated: 2024-08-07T13:42:33.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34030 - http://secunia.com/advisories/25089 - http://www.securityfocus.com/bid/23723 - http://www.vupen.com/english/advisories/2007/1594 - https://www.exploit-db.com/exploit
www.securityfocus.com/bid/23723 - http://www.vupen.com/english/advisories/2007/1594 - https://www.exploit-db.com/exploits/3823
CVE ID: CVE-2007-2499 State: PUBLISHED Published: 2007-05-04T00:00:00 Last Updated: 2024-08-07T13:42:33.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DVDdb 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the movieid parameter to loan.php or (2) the s parameter to listmovies.php. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2007/05/dvddb-xss-vuln.html - http://www.securityfocus.com/bid/23764 - http://www.vupen.com/english/advisories/2007/1648 - http://osvdb.org/35544 - http://secunia.com/advisories/25127 - https://exchange.xforce.ibmcl
lish/advisories/2007/1648 - http://osvdb.org/35544 - http://secunia.com/advisories/25127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34017 - http://osvdb.org/35545
CVE ID: CVE-2007-2500 State: PUBLISHED Published: 2007-05-04T00:00:00 Last Updated: 2024-08-07T13:42:33.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: server/parser/sprite_definition.cpp in GNU Gnash (aka GNU Flash Player) 0.7.2 allows remote attackers to execute arbitrary code via a large number of SHOWFRAME elements within a DEFINESPRITE element, which triggers memory corruption and enables the attacker to call free with an arbitrary address, probably resultant from a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37273 - http://www.securityfocus.com/bid/23765 - http://savannah.gnu.org/bugs/?19774 - http://www.securitytra
/osvdb.org/37273 - http://www.securityfocus.com/bid/23765 - http://savannah.gnu.org/bugs/?19774 - http://www.securitytracker.com/id?1018041 - http://www.novell.com/linux/security/advisories/2007_13_sr.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34148 - http://www.vupen.com/english/advisories/2007/1688 - http://secunia.com/advisories/25787
CVE ID: CVE-2007-2501 State: PUBLISHED Published: 2007-05-04T01:00:00 Last Updated: 2024-08-07T13:42:32.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in codepress.html in CodePress before 0.9.4 allows remote attackers to execute arbitrary code via certain input that is used in an eval function call. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=505510 - http://secunia.com/advisories/25124 - http://osvdb.org/36484 - http://codepress.sourceforge.net/changelog.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/34055 - http://www.vupen.com/english/advisories/2007/1638
log.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/34055 - http://www.vupen.com/english/advisories/2007/1638 - http://www.securityfocus.com/bid/23788
CVE ID: CVE-2007-2502 State: PUBLISHED Published: 2007-05-04T01:00:00 Last Updated: 2024-08-07T13:42:32.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP ProCurve 9300m Series switches with software 08.0.01c through 08.0.01j allows remote attackers to cause a denial of service via unknown vectors, a different switch series than CVE-2006-4015. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01034753 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01034753 - http://secunia.com/advisories/25101 - https://exchange.xforce.ibmcloud.com/vul
Support/Document.jsp?objectID=c01034753 - http://secunia.com/advisories/25101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34033 - http://www.vupen.com/english/advisories/2007/1651 - http://www.securityfocus.com/bid/23791 - http://www.securitytracker.com/id?1018001
CVE ID: CVE-2007-2503 State: PUBLISHED Published: 2007-05-04T01:00:00 Last Updated: 2024-08-07T13:42:33.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in turbulence.php in PHP Turbulence 0.0.1 alpha allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[tcore] parameter. NOTE: this vulnerability is disputed by CVE and a reliable third party because a direct request to user/turbulence.php triggers a fatal error before inclusion Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2673 - http://www.attrition.org/pipermail/vim/2007-April/001541.h
References: - http://securityreason.com/securityalert/2673 - http://www.attrition.org/pipermail/vim/2007-April/001541.html - http://www.securityfocus.com/bid/23580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33824 - http://www.securityfocus.com/archive/1/466564/100/100/threaded
CVE ID: CVE-2007-2504 State: PUBLISHED Published: 2007-05-04T01:00:00 Last Updated: 2024-08-07T13:42:33.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in user/turbulence.php in PHP Turbulence 0.0.1 alpha allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[tcore] parameter. NOTE: this vulnerability is disputed by CVE and a reliable third party because a direct request to user/turbulence.php triggers a fatal error before inclusion Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2673 - http://www.attrition.org/pipermail/vim/2007-April/001541.html - http://
- http://securityreason.com/securityalert/2673 - http://www.attrition.org/pipermail/vim/2007-April/001541.html - http://www.securityfocus.com/bid/23580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33824 - http://www.securityfocus.com/archive/1/466564/100/100/threaded
CVE ID: CVE-2007-2505 State: PUBLISHED Published: 2007-05-04T01:00:00 Last Updated: 2024-08-07T13:42:33.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in InterVations MailCOPA 8.01 20070323 allows user-assisted remote attackers to execute arbitrary code via a long command line argument, as demonstrated by a long string in the subject field in a mailto URI. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23767 - http://www.skilltube.com/index.php?option=com_content&task=view&id=24&Itemid=37 - http://www.vupen.com/english/advisori
http://www.skilltube.com/index.php?option=com_content&task=view&id=24&Itemid=37 - http://www.vupen.com/english/advisories/2007/1652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34052 - http://secunia.com/advisories/25125 - http://www.securityfocus.com/archive/1/467372/100/0/threaded - http://osvdb.org/35546
CVE ID: CVE-2007-2506 State: PUBLISHED Published: 2007-05-04T01:00:00 Last Updated: 2024-08-07T13:42:33.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attackers to cause a denial of service (infinite loop and daemon hang) via a messenger URL that invokes _edit.r with no additional parameters, as demonstrated by requests for cgiip.exe or wsisa.dll with WService=wsbroker1/_edit.r in the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://progress.atgnow.com/esprogress/resultDisplay.do?gotoLink=115&docType=1006&clusterName=CombinedCluste
eferences: - http://progress.atgnow.com/esprogress/resultDisplay.do?gotoLink=115&docType=1006&clusterName=CombinedCluster&contentId=12&groupId=3&answerGroup=1&score=1932&page=http%3A%2F%2Fprogress.atgnow.com%2Fesprogress%2Fdocs%2FSolutions%2FProgress%2FESERVER_P123694.xhtml&result=0&excerpt=P123694 - http://www.securityfocus.com/bid/23778 - http://www.ishare.nl/ - http://www.securityfocus.com/archive/1/467376/100/0/threaded - http://osvdb.org/35541 - http://www.securityfocus.com/archive/1/467375/100/0/threaded - http://secunia.com/advisories/25129
CVE ID: CVE-2007-2507 State: PUBLISHED Published: 2007-05-04T01:00:00 Last Updated: 2024-08-07T13:42:33.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/download.php in Treble Designs 1024 CMS 0.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the item parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35542 - http://secunia.com/advisories/25120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34004 - https://www.exploit-db.com/exploits/3832 - http://www.securityfocus.com/bid/23774 - http://www.vupen.com/english/advisories/2007/1630 - http://www.attrition.org/pi
http://www.securityfocus.com/bid/23774 - http://www.vupen.com/english/advisories/2007/1630 - http://www.attrition.org/pipermail/vim/2007-May/001578.html
CVE ID: CVE-2007-2508 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T13:42:33.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories
a TmRpcSrv.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34163 - http://osvdb.org/35790 - http://www.zerodayinitiative.com/advisories/ZDI-07-025.html - http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txt - http://www.securityfocus.com/archive/1/467932/100/0/threaded - http://www.kb.cert.org/vuls/id/515616 - http://www.securityfocus.com/bid/23868 - http://www.securityfocus.com/archive/1/467933/100/0/threaded - http://www.securityfocus.com/bid/23866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34162 - http://security
- http://www.securityfocus.com/bid/23866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34162 - http://securitytracker.com/id?1018010 - http://secunia.com/advisories/25186 - http://osvdb.org/35789 - http://www.zerodayinitiative.com/advisories/ZDI-07-024.html - http://www.kb.cert.org/vuls/id/488424
CVE ID: CVE-2007-2509 State: PUBLISHED Published: 2007-05-09T00:00:00 Last Updated: 2024-08-07T13:42:32.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25660 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:103 - http://secunia.com/advisories/25187 - http://secunia.com/advisories/25191 - http://www.ubuntu.com/usn/usn-462-1 - http://www.vupen.com/english/adv
ies/25187 - http://secunia.com/advisories/25191 - http://www.ubuntu.com/usn/usn-462-1 - http://www.vupen.com/english/advisories/2007/2187 - http://www.redhat.com/support/errata/RHSA-2007-0888.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:102 - http://secunia.com/advisories/26048 - http://www.debian.org/security/2007/dsa-1296 - http://www.redhat.com/support/errata/RHSA-2007-0355.html - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://secunia.com/advisories/26967 - http://secunia.com/advisories/27351 - http://www.trustix.org/errata/2007/0017/ - http://www.securityfocus.com/bid/23818 - http://www.securityfocus.com/bid/23813 - http://us2.php.net/releases/4_4_7.php
http://www.securityfocus.com/bid/23818 - http://www.securityfocus.com/bid/23813 - http://us2.php.net/releases/4_4_7.php - http://www.redhat.com/support/errata/RHSA-2007-0349.html - http://www.debian.org/security/2007/dsa-1295 - http://secunia.com/advisories/25318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34413 - http://www.securityfocus.com/archive/1/463596/100/0/threaded - http://rhn.redhat.com/errata/RHSA-2007-0889.html - http://us2.php.net/releases/5_2_2.php - http://secunia.com/advisories/25365 - http://securityreason.com/securityalert/2672 - http://secunia.com/advisories/25255 - http://secunia.com/advisories/25445 - http://support.avaya.com/elmodocs2/security/ASA-2007-231.
a.com/advisories/25255 - http://secunia.com/advisories/25445 - http://support.avaya.com/elmodocs2/security/ASA-2007-231.htm - http://secunia.com/advisories/25372 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10839 - http://www.securitytracker.com/id?1018022 - https://rhn.redhat.com/errata/RHSA-2007-0348.html - http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
CVE ID: CVE-2007-2510 State: PUBLISHED Published: 2007-05-09T00:00:00 Last Updated: 2024-08-07T13:42:33.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" (slash) characters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25187 - http://secunia.com/advisories/25191 - http://www.ubuntu.com/usn/usn-462-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:102 - http://secunia.com/advisories/26048 - http://www.redhat.com/support/errata/RHSA-2007-0355.html - http://security.gentoo.or
tp://secunia.com/advisories/26048 - http://www.redhat.com/support/errata/RHSA-2007-0355.html - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://www.trustix.org/errata/2007/0017/ - http://www.securityfocus.com/bid/23813 - http://viewcvs.php.net/viewvc.cgi/php-src/ext/soap/php_http.c?r1=1.77.2.11.2.5&r2=1.77.2.11.2.6 - http://www.debian.org/security/2007/dsa-1295 - http://secunia.com/advisories/25318 - http://osvdb.org/34675 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10715 - http://www.securityfocus.com/bid/24034 - http://us2.php.net/releases/5_2_2.php - http://www.securitytracker.com/id?1018023 - http://secunia.com/advisories/25255 - ht