Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1512 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T12:59:08.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 Gold and SP1, and Visual Studio .NET 2002 Gold and SP1, and 2003 Gold and SP1 allows user-assisted remote attackers to have an unknown impact (probably crash) via an RTF file with a malformed OLE object, which results in writing two 0x00 characters past the end of szBuffer, aka the "MFC42u.dll Off-by-Two Overflow." NOTE: this issue is due to an incomplete patch (MS07-012) for CVE-2007-0025.
aka the "MFC42u.dll Off-by-Two Overflow." NOTE: this issue is due to an incomplete patch (MS07-012) for CVE-2007-0025. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463009/100/0/threaded
CVE ID: CVE-2007-1513 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T12:59:08.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder (CWB) PRO 1.9.8, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0994 - http://www.securityfocus.com/archive/1/462917/100/0/threaded - https://www.exploit-db.com/exploits/3485 - http://securityreason.com/securityalert/2452 - http://advisories.echo.or.id
- https://www.exploit-db.com/exploits/3485 - http://securityreason.com/securityalert/2452 - http://advisories.echo.or.id/adv/adv76-theday-2007.txt - http://osvdb.org/34946 - http://www.securityfocus.com/bid/22974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33035
CVE ID: CVE-2007-1514 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T12:59:08.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the modpath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33034 - http://securityreason.com/securityalert/2449 - http://www.securityfocus.com/bid/22979 - http://www.securityfocus.com/archive/1/462930/100/0/threaded - http://osvdb.org/34310
CVE ID: CVE-2007-1515 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T12:59:08.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via (1) the email Subject header in thread.php, (2) the edit_query parameter in search.php, or other unspecified parameters in search.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017774 - http://lists.grok.org.uk/pipermail/full-disclosure/200
tainer: References: - http://www.securitytracker.com/id?1017774 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052977.html - http://lists.horde.org/archives/announce/2007/000316.html - http://www.securityfocus.com/archive/1/462914/100/0/threaded - http://www.vupen.com/english/advisories/2007/0964 - http://secunia.com/advisories/24541 - http://www.securityfocus.com/bid/22975
CVE ID: CVE-2007-1516 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T12:59:08.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the functions_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32999 - https://www.exploit-db.com/exploits/3487 - http://osvdb.org/34311 - http://www.securityfocus.com/bid/22983 - http://www.vupen.com/english/advisories/2007/1000
CVE ID: CVE-2007-1517 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comments.php in WSN Guest 1.02 and 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32983 - https://www.exploit-db.com/exploits/3477 - http://www.securityfocus.com/archive/1/462814/100/0/threaded - http://securityreason.com/securityalert/2451 - http://osvdb.org/34512 - http://www.vupen.com/english/advisor
/threaded - http://securityreason.com/securityalert/2451 - http://osvdb.org/34512 - http://www.vupen.com/english/advisories/2007/0968
CVE ID: CVE-2007-1518 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2455 - http://www.securityfocus.com/archive/1/463002/100/0/threaded - http://www.securityfocus.com/archive/1/462860/100/0/threaded - http://www.securityfocus.com/bid/22970
CVE ID: CVE-2007-1519 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the Downloads module, a different product than CVE-2006-3948. Additional Analyst Notes: - CVE Program Container: References: - http://phpfi.com/214668 - http://www.wisec.it/ush/phpnukexss.html - http://www.ush.it/2007/03/09/php-nuke-wild-post-xss/ - http://secunia.com/advisories/24629 - http://www.securityfocus.com/archive/1/462308/10
7/03/09/php-nuke-wild-post-xss/ - http://secunia.com/advisories/24629 - http://www.securityfocus.com/archive/1/462308/100/100/threaded
CVE ID: CVE-2007-1520 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is an array before validating the HTTP_REFERER, which allows remote attackers to conduct CSRF attacks. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34501 - http://phpfi.com/214668 - http://www.wisec.it/ush/phpnukexss.html - http://www.securityfocus.com/archive/1/462727/100/0/threaded - http://www.ush.it/2007/03/09/php-nuke-wild-post-xss/ - http://secunia.com/advisories/24629 -
e/1/462727/100/0/threaded - http://www.ush.it/2007/03/09/php-nuke-wild-post-xss/ - http://secunia.com/advisories/24629 - http://www.securityfocus.com/archive/1/462308/100/100/threaded - http://www.securityfocus.com/archive/1/462575/100/0/threaded
CVE ID: CVE-2007-1521 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the session_regenerate_id function, as demonstrated by calling a userspace error handler or triggering a memory limit violation. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0960 - http://www.vupen.com/english/advisories/2007/2732 - http://secunia.com/advisories/25056 - http://www.debian.org/security/2007/dsa-1283 - htt
/english/advisories/2007/2732 - http://secunia.com/advisories/25056 - http://www.debian.org/security/2007/dsa-1283 - http://secunia.com/advisories/24505 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://us2.php.net/releases/4_4_7.php - http://secunia.com/advisories/25062 - http://www.ubuntu.com/usn/usn-455-1 - http://www.debian.org/security/2007/dsa-1282 - http://us2.php.net/releases/5_2_2.php - http://docs.info.apple.com/article.html?artnum=306172 - http://www.php-security.org/MOPB/MOPB-22-2007.html - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/25445 - http://secunia.com/adviso
-22-2007.html - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/25445 - http://secunia.com/advisories/25057 - http://www.novell.com/linux/security/advisories/2007_32_php.html - http://secunia.com/advisories/25025 - http://www.securityfocus.com/bid/22968 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-1522 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to execute arbitrary code via illegal characters in a session identifier, which is rejected by an internal session storage module, which calls the session identifier generator with an improper environment, leading to code execution when the generator is interrupted, as demonstrated by triggering a memory limit violation or certain PHP errors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vu
ry limit violation or certain PHP errors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0960 - http://secunia.com/advisories/25056 - http://secunia.com/advisories/24505 - http://www.php-security.org/MOPB/MOPB-23-2007.html - http://www.securityfocus.com/bid/22971 - http://www.novell.com/linux/security/advisories/2007_32_php.html
CVE ID: CVE-2007-1523 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems allows local users to have an unknown impact. NOTE: this information is based upon a vague pre-advisory with no actionable information. Details will be updated after 20070329. Additional Analyst Notes: - CVE Program Container: References: - http://kernelwars.blogspot.com/2007/01/alive.html - http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson - http://osvdb.org/
t.com/2007/01/alive.html - http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson - http://osvdb.org/34593 - http://www.securityfocus.com/bid/22945
CVE ID: CVE-2007-1524 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) in the settings[skin] parameter, as demonstrated by injecting PHP code into an Apache HTTP Server log file, which can then be included via themes/default/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22157 - http://www.vupen.com/english/advisories/2007/0966 - https://www.exploit-db.com/exploits/3476/ - https://exchange
22157 - http://www.vupen.com/english/advisories/2007/0966 - https://www.exploit-db.com/exploits/3476/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/32982 - http://secunia.com/advisories/24520
CVE ID: CVE-2007-1525 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the cat parameter, which can be executed via a request to posts.php. Additional Analyst Notes: - CVE Program Container: References: - http://infusion.110mb.com/enter/dfblog4.zip - http://www.vupen.com/english/advisories/2007/0969 - http://secunia.com/advisories/24534 - https://www.exploit-db.com/exploits/3478 - http://www.securityfocus.com/bid/22972 - http://osvdb.org/34073
CVE ID: CVE-2007-1526 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List (CRL) authorization control and access secure web server instances running under an account different from that used for the admin server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24531 - http://www.securitytracker.com/id?1017777 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102822-1
s/24531 - http://www.securitytracker.com/id?1017777 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102822-1 - http://osvdb.org/34074 - http://www.vupen.com/english/advisories/2007/0958
CVE ID: CVE-2007-1527 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LLTD Mapper in Microsoft Windows Vista does not verify that an IP address in a TLV type 0x07 field in a HELLO packet corresponds to a valid IP address for the local network, which allows remote attackers to trick users into communicating with an external host by sending a HELLO packet with the MW characteristic and a spoofed TLV type 0x07 field, aka the "Spoof and Management URL IP Redirect" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/reference/Vista_Network_Att
ional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf - http://www.securityfocus.com/archive/1/462793/100/0/threaded - http://www.securityfocus.com/archive/1/464617/100/0/threaded - http://osvdb.org/33663 - http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html - http://www.securityfocus.com/bid/23279
CVE ID: CVE-2007-1528 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LLTD Mapper in Microsoft Windows Vista allows remote attackers to spoof hosts, and nonexistent bridge relationships, into the network topology map by using a MAC address that differs from the MAC address provided in the Real Source field of the LLTD BASE header of a HELLO packet, aka the "Spoof on Bridge" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23280 - http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf - http://www.securityfocus.
/bid/23280 - http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf - http://www.securityfocus.com/archive/1/462793/100/0/threaded - http://www.securityfocus.com/archive/1/464617/100/0/threaded - http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html - http://osvdb.org/33662
CVE ID: CVE-2007-1529 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY packet if another host has sent a spoofed response first, which allows remote attackers to spoof arbitrary hosts via a network-based race condition, aka the "Total Spoof" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf - http://www.securityfocus.com/archive/1/462793/100/0/threaded - http://www.securityfocus.com/archive/1/464617/
_RTM.pdf - http://www.securityfocus.com/archive/1/462793/100/0/threaded - http://www.securityfocus.com/archive/1/464617/100/0/threaded - http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html - http://www.securityfocus.com/bid/23263 - http://osvdb.org/33661
CVE ID: CVE-2007-1530 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LLTD Mapper in Microsoft Windows Vista does not properly gather responses to EMIT packets, which allows remote attackers to cause a denial of service (mapping failure) by omitting an ACK response, which triggers an XML syntax error. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf - http://www.securityfocus.com/archive/1/462793/100/0/threaded - http://www.securityfocus.com/archive/1/464617/100/0/threaded - http://www.symantec.co
/archive/1/462793/100/0/threaded - http://www.securityfocus.com/archive/1/464617/100/0/threaded - http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html - http://osvdb.org/33660 - http://www.securityfocus.com/bid/23271
CVE ID: CVE-2007-1531 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP and Vista overwrites ARP table entries included in gratuitous ARP, which allows remote attackers to cause a denial of service (loss of network access) by sending a gratuitous ARP for the address of the Vista host. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf - http://www.securityfocus.com/archive/1/462793/100/0/threaded - http://osvdb.org/33664 - http://www.securityfocus.com/archive/1/464617/100/0/threaded -
rchive/1/462793/100/0/threaded - http://osvdb.org/33664 - http://www.securityfocus.com/archive/1/464617/100/0/threaded - http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html - http://www.securityfocus.com/bid/23266
CVE ID: CVE-2007-1532 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: The neighbor discovery implementation in Microsoft Windows Vista allows remote attackers to conduct a redirect attack by (1) responding to queries by sending spoofed Neighbor Advertisements or (2) blindly sending Neighbor Advertisements. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf - http://www.securityfocus.com/archive/1/462793/100/0/threaded - http://www.securityfocus.com/archive/1/464617/100/0/threaded - http://osvdb.org/3366
m/archive/1/462793/100/0/threaded - http://www.securityfocus.com/archive/1/464617/100/0/threaded - http://osvdb.org/33665 - http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html - http://www.securityfocus.com/bid/23293
CVE ID: CVE-2007-1533 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with different UDP ports within a solicitation session, which makes it easier for remote attackers to spoof the nonce through brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf - http://www.securityfocus.com/archive/1/462793/100/0/threaded - http://www.securityfocus.com/archive/1/464617/100/0/threaded - http://www.symantec.c
m/archive/1/462793/100/0/threaded - http://www.securityfocus.com/archive/1/464617/100/0/threaded - http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html - http://www.securityfocus.com/bid/23301 - http://osvdb.org/33666
CVE ID: CVE-2007-1534 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: DFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote connections on TCP port 5722 for 2 minutes after Windows Meeting Space is closed, which allows remote attackers to have an unknown impact by connecting to this port during the time window. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf - http://www.securityfocus.com/archive/1/462793/100/0/threaded - http://www.securityfocus.com/archive/1/4646
ace_RTM.pdf - http://www.securityfocus.com/archive/1/462793/100/0/threaded - http://www.securityfocus.com/archive/1/464617/100/0/threaded - http://osvdb.org/33668 - http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html
CVE ID: CVE-2007-1535 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33667 - http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf - http://www.securityfocus.com/archive/1/462793/100/0/threaded - http://www.securityfocus.com/a
k_Attack_Surface_RTM.pdf - http://www.securityfocus.com/archive/1/462793/100/0/threaded - http://www.securityfocus.com/archive/1/464617/100/0/threaded - http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html - http://www.securityfocus.com/bid/23267
CVE ID: CVE-2007-1536 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:59:08.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27314 - http://docs.info.apple.com/article.html?artnum=305530 - http://secunia.com/advisories/25393 - http://secunia.com/advisories/29179 - http://www.vupen.com/english/advisories/2007/1939 - http://www.securityfocus.com/bid/23021 - http://secun
sories/29179 - http://www.vupen.com/english/advisories/2007/1939 - http://www.securityfocus.com/bid/23021 - http://secunia.com/advisories/24616 - http://www.securitytracker.com/id?1017796 - http://openbsd.org/errata40.html#015_file - http://secunia.com/advisories/27307 - http://mx.gw.com/pipermail/file/2007/000161.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:067 - http://www.securityfocus.com/archive/1/477950/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_5_sr.html - http://secunia.com/advisories/24723 - http://secunia.com/advisories/24754 - http://lists.apple.com/archives/security-announce/2007/May/msg00004.html - http://secunia.com/advisories/25