Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3985 State: PUBLISHED Published: 2007-07-25T18:00:00 Last Updated: 2024-08-07T14:37:05.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.3 allows remote attackers to download arbitrary files via a .. (dot dot) in the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securecomputing.com/index.cfm?skey=1429 - http://secunia.com/advisories/26167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35585 - http://www.securityfocus.com/bid/25027 - http://www.securitytracker.com/id?1018443 - http://osvdb.or
erabilities/35585 - http://www.securityfocus.com/bid/25027 - http://www.securitytracker.com/id?1018443 - http://osvdb.org/43770 - http://www.oliverkarow.de/research/securityreporter.txt - http://marc.info/?l=bugtraq&m=118522960430476&w=2
CVE ID: CVE-2007-3986 State: PUBLISHED Published: 2007-07-25T18:00:00 Last Updated: 2024-08-07T14:37:05.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.3 allows remote attackers to bypass authentication via a name parameter that specifies the eventcache directory and a non-GIF file, which causes the $dontvalidate variable to be set to true. NOTE: a separate traversal vulnerability could be leveraged to download arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35591 - http://www.securecomputing.com/index.cfm?ske
References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35591 - http://www.securecomputing.com/index.cfm?skey=1429 - http://secunia.com/advisories/26167 - http://www.securityfocus.com/bid/25027 - http://www.oliverkarow.de/research/securityreporter.txt - http://marc.info/?l=bugtraq&m=118522960430476&w=2
CVE ID: CVE-2007-3987 State: PUBLISHED Published: 2007-07-25T18:00:00 Last Updated: 2024-08-07T14:37:05.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attackers to execute arbitrary SQL commands via the SearchWord parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26169 - http://outlaw.aria-security.info/?p=7 - http://osvdb.org/36277 - http://www.securityfocus.com/archive/1/474419/100/0/threaded - http://securityreason.com/securityalert/2925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35537 - http:
aded - http://securityreason.com/securityalert/2925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35537 - http://www.securityfocus.com/bid/25010
CVE ID: CVE-2007-3988 State: PUBLISHED Published: 2007-07-25T18:00:00 Last Updated: 2024-08-07T14:37:05.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35548 - http://securityreason.com/securityalert/2926 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls51 - http://www.securityfocus.com/archive/1/474324/100/0/threaded - http://secunia.c
y.de/index_2.php?major_rls=major_rls51 - http://www.securityfocus.com/archive/1/474324/100/0/threaded - http://secunia.com/advisories/26142
CVE ID: CVE-2007-3989 State: PUBLISHED Published: 2007-07-25T18:00:00 Last Updated: 2024-08-07T14:37:05.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set to iletisim, allow remote attackers to inject arbitrary web script or HTML via the (1) Adiniz and (2) Soyadiniz parameters; and possibly other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26173 - http://www.vupen.com/english/ad
lyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26173 - http://www.vupen.com/english/advisories/2007/2605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35553 - http://www.securityfocus.com/bid/25004
CVE ID: CVE-2007-3990 State: PUBLISHED Published: 2007-07-25T18:00:00 Last Updated: 2024-08-07T14:37:05.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35555 - http://secunia.com/advisories/26173 - http://www.vupen.com/english/advisories/2007/2605 - http://www.
rabilities/35555 - http://secunia.com/advisories/26173 - http://www.vupen.com/english/advisories/2007/2605 - http://www.securityfocus.com/bid/25004
CVE ID: CVE-2007-3991 State: PUBLISHED Published: 2007-07-25T18:00:00 Last Updated: 2024-08-07T14:37:05.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cv.asp in Asp cvmatik 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Adiniz (Ady), (2) Soyadiniz (Soyady), (3) Ehliyet, (4) Askerlik, and (5) GSM parameters; and possibly other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36471 - http://www.securityfocus.com/bid/25008 - http://secunia.com/advisories/26174 - http://downloads.securityfocus.com/vulnerabilities/exploits/25008.h
om/bid/25008 - http://secunia.com/advisories/26174 - http://downloads.securityfocus.com/vulnerabilities/exploits/25008.html - http://www.vupen.com/english/advisories/2007/2604
CVE ID: CVE-2007-3992 State: PUBLISHED Published: 2007-07-25T18:00:00Z Last Updated: 2024-09-17T00:56:39.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vir_login.asp in iExpress Property Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the Username parameter is covered by CVE-2006-6029. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26153
CVE ID: CVE-2007-3993 State: PUBLISHED Published: 2007-07-25T18:00:00 Last Updated: 2024-08-07T14:37:05.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the attachment filter in Kerio MailServer before 6.4.1 has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2637 - http://secunia.com/advisories/26185 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35618 - http://www.securityfocus.com/bid/25038 - http://osvdb.org/38571 - http://www.kerio.com/kms_history.html - http://www.securitytracker.com/id?1018453
CVE ID: CVE-2007-3996 State: PUBLISHED Published: 2007-09-04T18:00:00 Last Updated: 2024-08-07T14:37:05.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26822 - http://security.gentoo.org/glsa/glsa-200712-13.xml - http://www.de
: References: - http://secunia.com/advisories/26822 - http://security.gentoo.org/glsa/glsa-200712-13.xml - http://www.debian.org/security/2008/dsa-1613 - http://www.redhat.com/support/errata/RHSA-2007-0888.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36382 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11147 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html - http://secunia.com/advisories/28658 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html - http://bugs.gentoo.org/show_bug.cgi?id=201546 - http://secunia.com/advisories/26967 - http://secunia.com/advisories/27351 - http:
gs.gentoo.org/show_bug.cgi?id=201546 - http://secunia.com/advisories/26967 - http://secunia.com/advisories/27351 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://secunia.com/advisories/31168 - http://www.php.net/ChangeLog-5.php#5.2.4 - http://secunia.com/advisories/26930 - http://www.trustix.org/errata/2007/0026/ - http://rhn.redhat.com/errata/RHSA-2007-0889.html - http://secweb.se/en/advisories/php-imagecopyresized-integer-overflow/ - https://issues.rpath.com/browse/RPL-1693 - http://secweb.se/en/advisories/php-imagecreatetruecolor-integer-overflow/ - https://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/27545 - http://support.avaya.com/elmodocs2/secur
ttps://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/27545 - http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm - http://www.ubuntu.com/usn/usn-557-1 - http://secunia.com/advisories/26838 - http://securityreason.com/securityalert/3103 - http://secunia.com/advisories/27377 - http://secunia.com/advisories/28009 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:187 - http://secunia.com/advisories/27102 - http://www.vupen.com/english/advisories/2007/3023 - http://www.php.net/releases/5_2_4.php - http://secunia.com/advisories/28147 - http://secunia.com/advisories/26895 - http://www.redhat.com/support/errata/RHSA-2007-0890.html - http://www.redhat.com/suppo
://secunia.com/advisories/26895 - http://www.redhat.com/support/errata/RHSA-2007-0890.html - http://www.redhat.com/support/errata/RHSA-2007-0891.html - http://secunia.com/advisories/26871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36383 - http://secunia.com/advisories/26642
CVE ID: CVE-2007-3997 State: PUBLISHED Published: 2007-09-04T18:00:00 Last Updated: 2024-08-07T14:37:06.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe_mode and open_basedir restrictions via MySQL LOCAL INFILE operations, as demonstrated by a query with LOAD DATA LOCAL INFILE. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39402 - http://secunia.com/advisories/26822 - http://www.vupen.com/english/advisories/2008/0059 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http:
- http://www.vupen.com/english/advisories/2008/0059 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://www.php.net/releases/4_4_8.php - http://www.php.net/ChangeLog-5.php#5.2.4 - http://www.trustix.org/errata/2007/0026/ - https://issues.rpath.com/browse/RPL-1693 - http://securityreason.com/securityalert/3102 - http://secweb.se/en/advisories/php-mysql-safe-mode-bypass-vulnerability/ - https://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/26838 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36384 - http://secunia.com/advisories/27377 - https://www.exploit-db.com/exploits/4392 - http://www.php.net/ChangeLog-4.php - http://secunia.com/advisories/2710
377 - https://www.exploit-db.com/exploits/4392 - http://www.php.net/ChangeLog-4.php - http://secunia.com/advisories/27102 - http://www.vupen.com/english/advisories/2007/3023 - http://www.php.net/releases/5_2_4.php - http://secunia.com/advisories/28318 - http://secunia.com/advisories/26642
CVE ID: CVE-2007-3998 State: PUBLISHED Published: 2007-09-04T18:00:00 Last Updated: 2024-08-07T14:37:05.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash, or infinite loop) via certain arguments, as demonstrated by a 'chr(0), 0, ""' argument set. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30288 - http://secunia.com/advisories/26822 - https://launchpad.net/bugs/173043 - https://oval.cisecurity.org/repository/se
88 - http://secunia.com/advisories/26822 - https://launchpad.net/bugs/173043 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10603 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html - http://secunia.com/advisories/28658 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html - http://secunia.com/advisories/26967 - http://www.debian.org/security/2008/dsa-1444 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://secunia.com/advisories/27864 - http://www.php.net/ChangeLog-5.php#5.2.4 - http://secunia.com/advisories/26930 - http://www.trustix.org/errata/2007/0026/ - http://rhn.redhat
angeLog-5.php#5.2.4 - http://secunia.com/advisories/26930 - http://www.trustix.org/errata/2007/0026/ - http://rhn.redhat.com/errata/RHSA-2007-0889.html - https://usn.ubuntu.com/549-1/ - https://issues.rpath.com/browse/RPL-1693 - http://secunia.com/advisories/28249 - http://www.debian.org/security/2008/dsa-1578 - https://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/27545 - http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm - http://secunia.com/advisories/26838 - http://secweb.se/en/advisories/php-wordwrap-vulnerability/ - http://secunia.com/advisories/27377 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:187 - http://secunia.com/advisories/27102 - h
sories/27377 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:187 - http://secunia.com/advisories/27102 - http://www.vupen.com/english/advisories/2007/3023 - http://www.php.net/releases/5_2_4.php - http://secunia.com/advisories/26895 - http://www.ubuntu.com/usn/usn-549-2 - http://www.redhat.com/support/errata/RHSA-2007-0890.html - http://www.redhat.com/support/errata/RHSA-2007-0891.html - http://secunia.com/advisories/26871 - http://secunia.com/advisories/26642
CVE ID: CVE-2007-3999 State: PUBLISHED Published: 2007-09-05T10:00:00 Last Updated: 2024-08-07T14:37:05.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/gl
RPC message. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200709-01.xml - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00087.html - http://www.securityfocus.com/archive/1/479251/100/0/threaded - http://secunia.com/advisories/26713 - http://secunia.com/advisories/26822 - http://secunia.com/advisories/27043 - http://www.vupen.com/english/advisories/2008/0803/references - http://secunia.com/advisories/26699 - http://www.novell.com/linux/security/advisories/2007_19_sr.html - http://www.vupen.com/english/advisories/2007/3060 - http://secunia.com/advisories/26680 - http://secunia.com/advisories/26783 - ht
.vupen.com/english/advisories/2007/3060 - http://secunia.com/advisories/26680 - http://secunia.com/advisories/26783 - http://www.securitytracker.com/id?1018647 - http://www.securityfocus.com/bid/26444 - http://www.vupen.com/english/advisories/2007/3051 - http://secunia.com/advisories/27756 - http://secunia.com/advisories/26684 - http://www.debian.org/security/2007/dsa-1367 - http://www.redhat.com/support/errata/RHSA-2007-0951.html - http://secunia.com/advisories/26728 - http://secunia.com/advisories/26700 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3162 - https://bugzilla.redhat.com/show_bug.cgi?id=250973 - http://secunia.com/advisories/26987 - ht
.mitre.oval%3Adef%3A3162 - https://bugzilla.redhat.com/show_bug.cgi?id=250973 - http://secunia.com/advisories/26987 - http://www.trustix.org/errata/2007/0026/ - http://secunia.com/advisories/26676 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9379 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.ubuntu.com/usn/usn-511-1 - http://secunia.com/advisories/27081 - http://www.securityfocus.com/archive/1/478748/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_24_sr.html - http://secunia.com/advisories/29270 - https://www.redhat.com/archives/f
.com/linux/security/advisories/2007_24_sr.html - http://secunia.com/advisories/29270 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00173.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201319-1 - http://www.vupen.com/english/advisories/2007/3868 - http://security.gentoo.org/glsa/glsa-200710-01.xml - http://www.redhat.com/support/errata/RHSA-2007-0913.html - http://lists.rpath.com/pipermail/security-announce/2007-September/000237.html - http://www.debian.org/security/2007/dsa-1368 - http://www.redhat.com/support/errata/RHSA-2007-0858.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:181 - http://www.zerodayinitiative.com/advisories/ZD
.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:181 - http://www.zerodayinitiative.com/advisories/ZDI-07-052.html - http://secunia.com/advisories/26691 - http://secunia.com/advisories/26896 - http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-006.txt - http://secunia.com/advisories/26697 - http://secunia.com/advisories/27146 - http://www.kb.cert.org/vuls/id/883632 - http://secunia.com/advisories/27643 - http://www.vupen.com/english/advisories/2007/3052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36437 - http://www.securityfocus.com/bid/25534 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html - http://secunia.com/advisories/26705 - http://securityreason.
34 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html - http://secunia.com/advisories/26705 - http://securityreason.com/securityalert/3092 - http://support.avaya.com/elmodocs2/security/ASA-2007-396.htm - http://secunia.com/advisories/26792 - http://secunia.com/advisories/29247 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103060-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:174
CVE ID: CVE-2007-4000 State: PUBLISHED Published: 2007-09-05T10:00:00 Last Updated: 2024-08-07T14:37:05.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200709-01.
Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200709-01.xml - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00087.html - http://www.novell.com/linux/security/advisories/2007_19_sr.html - https://issues.rpath.com/browse/RPL-1696 - http://secunia.com/advisories/26680 - http://secunia.com/advisories/26783 - http://www.securitytracker.com/id?1018647 - http://www.vupen.com/english/advisories/2007/3051 - http://secunia.com/advisories/26728 - http://secunia.com/advisories/26700 - http://www.securityfocus.com/bid/25533 - http://www.securityfocus.com/archive/1/478794/100/0/threaded - https://bugzilla.redhat.co
.securityfocus.com/bid/25533 - http://www.securityfocus.com/archive/1/478794/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=250976 - http://secunia.com/advisories/26987 - http://secunia.com/advisories/26676 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36438 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9278 - http://www.redhat.com/support/errata/RHSA-2007-0858.html - http://www.kb.cert.org/vuls/id/377544 - http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-006.txt - http://securityreason.com/securityalert/3092 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:174
CVE ID: CVE-2007-4003 State: PUBLISHED Published: 2007-07-26T22:00:00 Last Updated: 2024-08-07T14:37:05.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: pioout in IBM AIX 5.3 SP6 allows local users to execute arbitrary code by specifying a malicious library with the -R (ParseRoutine) command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01122 - http://secunia.com/advisories/26219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35628 - http://www.securityfocus.com/bid/25084 - http://www.securitytracker.com/id?1018466 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01121 - http://lab
5084 - http://www.securitytracker.com/id?1018466 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01121 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=569 - ftp://aix.software.ibm.com/aix/efixes/security/README - http://www.vupen.com/english/advisories/2007/2677
CVE ID: CVE-2007-4004 State: PUBLISHED Published: 2007-07-26T22:00:00 Last Updated: 2024-08-07T14:37:05.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function call. NOTE: the client is setuid root on AIX, so this issue crosses privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26219 - http://www.securitytracker.com/id?1018465 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=571 - http://www-1.ibm.com/support/docview.wss?ui
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=571 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35627 - http://www.securityfocus.com/bid/25077 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01813 - http://www.vupen.com/english/advisories/2007/2675 - ftp://aix.software.ibm.com/aix/efixes/security/README
CVE ID: CVE-2007-4005 State: PUBLISHED Published: 2007-07-26T00:00:00 Last Updated: 2024-08-07T14:37:05.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 allows remote attackers to execute arbitrary code via a long string to the shell port (514/tcp). NOTE: this might overlap CVE-2007-4006. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4222 - http://secunia.com/advisories/26197 - http://www.securityfocus.com/bid/25044 - http://www.securitytracker.com/id?1018459