Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5003 State: PUBLISHED Published: 2007-10-01T20:00:00 Last Updated: 2024-08-07T15:17:28.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long (1) username or (2) password to the rxrLogin command in rxRPC.dll, or a long (3) username argument to the GetUserInfo function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24348 - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35674 - http://secunia.com/advisories/256
cus.com/bid/24348 - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35674 - http://secunia.com/advisories/25606 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=599 - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006 - http://www.securityfocus.com/archive/1/480252/100/100/threaded - http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp - http://research.eeye.com/html/advisories/published/AD20070920.html - http://www.securitytracker.com/id?1018728
CVE ID: CVE-2007-5004 State: PUBLISHED Published: 2007-10-01T20:00:00 Last Updated: 2024-08-07T15:17:27.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long username and a certain "useless" password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24348 - http://secunia.com/advisories/25606 - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006 - http://www.securityfocus.com/archive/1/480252/100/100/threaded - http://www.ca.com/us/securi
ollateral.aspx?cid=156006 - http://www.securityfocus.com/archive/1/480252/100/100/threaded - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35675 - http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp - http://research.eeye.com/html/advisories/published/AD20070920.html - http://www.securitytracker.com/id?1018728
CVE ID: CVE-2007-5005 State: PUBLISHED Published: 2007-10-01T20:00:00 Last Updated: 2024-08-07T15:17:27.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ (dot dot backslash) sequence in the destination filename argument to sub-function 8 in the rxrReceiveFileFromServer command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24348 - http://secunia.com/advisories/25606 - http://www.ca.com/us/securityadvisor/newsi
ttp://www.securityfocus.com/bid/24348 - http://secunia.com/advisories/25606 - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006 - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35676 - http://www.securityfocus.com/archive/1/480252/100/100/threaded - http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp - http://research.eeye.com/html/advisories/published/AD20070920.html - http://www.securitytracker.com/id?1018728
CVE ID: CVE-2007-5006 State: PUBLISHED Published: 2007-10-01T20:00:00 Last Updated: 2024-08-07T15:17:27.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=598 - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35677 - http://www.securityfocus.com/bid/24348 - http://secunia.com/advisories/2560
ecurityadvisor/vulninfo/vuln.aspx?id=35677 - http://www.securityfocus.com/bid/24348 - http://secunia.com/advisories/25606 - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006 - http://www.securityfocus.com/archive/1/480252/100/100/threaded - http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp - http://www.securitytracker.com/id?1018728
CVE ID: CVE-2007-5007 State: PUBLISHED Published: 2007-09-20T20:00:00 Last Updated: 2024-08-07T15:17:27.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=193179 - https://bugzilla.redhat.com/show_bug.cgi?id=297581 - http://www.novell.com/linux/security/advisories/2007_19_sr.html - http://www.securityfocus.com/bid/25777 - http://bugzilla.gnome.org/show_bug.cgi?id=474366 - http://secunia.com/advisories/
tp://www.securityfocus.com/bid/25777 - http://bugzilla.gnome.org/show_bug.cgi?id=474366 - http://secunia.com/advisories/26987 - http://mail.gnome.org/archives/balsa-list/2007-September/msg00010.html - http://www.vupen.com/english/advisories/2007/3263 - http://secunia.com/advisories/27272 - http://osvdb.org/40585 - http://www.gentoo.org/security/en/glsa/glsa-200710-17.xml - http://secunia.com/advisories/26947
CVE ID: CVE-2007-5008 State: PUBLISHED Published: 2007-09-20T21:00:00 Last Updated: 2024-08-07T15:17:28.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5779 - http://secunia.com/advisories/26873 - http://www.securitytracker.com/id?1018709 - https://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c01167886 - http://www.vupen.com/
uritytracker.com/id?1018709 - https://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c01167886 - http://www.vupen.com/english/advisories/2007/3230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36702 - https://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c01167886 - http://www.securityfocus.com/bid/25740
CVE ID: CVE-2007-5009 State: PUBLISHED Published: 2007-09-20T21:00:00 Last Updated: 2024-08-07T15:17:28.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in language/lang_german/lang_main_album.php in phpBB Plus 1.53, and 1.53a before 20070922, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26888 - http://www.vupen.com/english/advisories/2007/3247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36697 - https://www.exploit-db.com/exploits/4434 - http://osvdb.org/38265 - http://www.phpbb2.d
loud.com/vulnerabilities/36697 - https://www.exploit-db.com/exploits/4434 - http://osvdb.org/38265 - http://www.phpbb2.de/ftopic45218.html - http://www.securityfocus.com/bid/25737 - http://marc.info/?l=bugtraq&m=119022976831594&w=2
CVE ID: CVE-2007-5010 State: PUBLISHED Published: 2007-09-20T21:00:00 Last Updated: 2024-08-07T15:17:27.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebBatch allows remote attackers to inject arbitrary web script or HTML via the URL to webbatch.exe. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=119030378017879&w=2 - http://www.securityfocus.com/bid/25744 - http://osvdb.org/38285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36704 - http://secunia.com/advisories/26889
CVE ID: CVE-2007-5011 State: PUBLISHED Published: 2007-09-20T21:00:00 Last Updated: 2024-08-07T15:17:27.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: webbatch.exe in WebBatch allows remote attackers to obtain sensitive information via the dumpinputdata parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=119030378017879&w=2 - http://osvdb.org/38286 - http://www.securityfocus.com/bid/25744 - http://secunia.com/advisories/26889
CVE ID: CVE-2007-5012 State: PUBLISHED Published: 2007-09-20T21:00:00 Last Updated: 2024-08-07T15:17:27.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in picture.php in PhpWebGallery 1.7.0, when Comments for all is enabled, allows remote attackers to inject arbitrary web script or HTML via the author parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25745 - http://secunia.com/advisories/26908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36706 - http://os
bid/25745 - http://secunia.com/advisories/26908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36706 - http://osvdb.org/37164
CVE ID: CVE-2007-5013 State: PUBLISHED Published: 2007-09-20T21:00:00 Last Updated: 2024-08-07T15:17:27.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Phormer 3.31 allow remote attackers to inject arbitrary web script or HTML via the (1) u, (2) p, (3) c, and (4) s parameters, and other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36708 - http://www.securityfocus.com/bid/25742 -
osvdb.org/37183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36708 - http://www.securityfocus.com/bid/25742 - http://secunia.com/advisories/26886
CVE ID: CVE-2007-5014 State: PUBLISHED Published: 2007-09-20T21:00:00 Last Updated: 2024-08-07T15:17:27.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in pSlash 0.70 allow remote attackers to execute arbitrary PHP code via a URL in (1) the lvc_admin_dir parameter to modules/visitors2/admin/view-archiver.inc.php or (2) the lvc_include_dir parameter to modules/visitors2/include/menus.inc.php. NOTE: the modules/visitors2/include/config.inc.php vector is already covered by CVE-2006-4373. NOTE: vector 1 is disputed by CVE because PHP encounters a fatal instantiation error on a direct request for the file, before reaching the incl
ted by CVE because PHP encounters a fatal instantiation error on a direct request for the file, before reaching the include statement. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38288 - http://osvdb.org/38289 - http://arfis.wordpress.com/2007/09/14/rfi-03-pslash/
CVE ID: CVE-2007-5015 State: PUBLISHED Published: 2007-09-20T21:00:00 Last Updated: 2024-08-07T15:17:28.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow remote attackers to execute arbitrary PHP code via a URL in the sl_theme_unix_path parameter to (1) admin_footer.php, (2) info_footer.php, (3) theme_footer.php, (4) browse_footer.php, (5) account_footer.php, or (6) search_footer.php in core/theme/includes/. NOTE: the vulnerability is present only when the administrator does not follow installation instructions about the requirement for .htaccess Limit support. Additional Analyst N
trator does not follow installation instructions about the requirement for .htaccess Limit support. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25736 - http://osvdb.org/38292 - http://arfis.wordpress.com/2007/09/14/rfi-03-streamline-php-media-server/ - http://osvdb.org/38291 - http://osvdb.org/38295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36683 - http://osvdb.org/38290 - https://www.exploit-db.com/exploits/4430 - http://osvdb.org/38293 - http://osvdb.org/38294
CVE ID: CVE-2007-5016 State: PUBLISHED Published: 2007-09-20T21:00:00 Last Updated: 2024-08-07T15:17:28.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in userreviews.php in OneCMS 2.4 allows remote attackers to execute arbitrary SQL commands via the abc parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36705 - http://secunia.com/advisories/26902 - http://osvdb.org/37163 - http://www.securityfocus.com/bid/25741 - https://www.exploit-db.com/exploits/4433
CVE ID: CVE-2007-5017 State: PUBLISHED Published: 2007-09-20T21:00:00 Last Updated: 2024-08-07T15:17:28.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attackers to force a download, and create or overwrite arbitrary files via a full pathname in the second argument to the GetFile method. Additional Analyst Notes: - CVE Program Container: References: - http://www.shinnai.altervista.org/exploits/txt/TXT_KJDPaI2IlM5P9PP6N6dI.html - https://www.exploit-db.com/exploits/4428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36694 - http:
6dI.html - https://www.exploit-db.com/exploits/4428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36694 - http://osvdb.org/38296 - http://www.securityfocus.com/bid/25727 - http://www.securitytracker.com/id?1018715
CVE ID: CVE-2007-5018 State: PUBLISHED Published: 2007-09-20T21:00:00 Last Updated: 2024-08-07T15:17:27.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via a long argument in a SEARCH ON command. NOTE: this issue might overlap with CVE-2004-1211. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018714 - http://www.securityfocus.com/bid/25733 - https://www.exploit-db.com/exploits/4429 - http://osvdb.org/39670 - http://secunia.com/advisories/26878 - http://www.vupen.com/english/advisories/2007/3224
CVE ID: CVE-2007-5019 State: PUBLISHED Published: 2007-09-20T21:00:00 Last Updated: 2024-08-07T15:17:27.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a long argument to the dnsResolve (isInstalled.dnsResolve) method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36682 - http://www.securityfocus.com/bid/25734 - http://osvdb.org/38297
CVE ID: CVE-2007-5020 State: PUBLISHED Published: 2007-09-21T17:00:00 Last Updated: 2024-08-07T15:17:27.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted PDF file, related to the mailto: option and Internet Explorer 7 on Windows XP. NOTE: this information is based upon a vague pre-advisory by a reliable researcher. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36722 - http://www.securityfocus.com/archive/1/480080/100/0/threaded - htt
/exchange.xforce.ibmcloud.com/vulnerabilities/36722 - http://www.securityfocus.com/archive/1/480080/100/0/threaded - http://www.securityfocus.com/bid/25748 - http://www.adobe.com/support/security/advisories/apsa07-04.html - http://www.vupen.com/english/advisories/2007/3392 - http://www.gnucitizen.org/blog/0day-pdf-pwns-windows - http://www.us-cert.gov/cas/techalerts/TA07-297B.html
CVE ID: CVE-2007-5021 State: REJECTED Published: 2007-09-21T17:00:00 Last Updated: 2007-09-28T09:00:00 Description: No description available.
CVE ID: CVE-2007-5022 State: PUBLISHED Published: 2007-09-21T17:00:00 Last Updated: 2024-08-07T15:17:27.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2, when using "server-initiated prompted scheduling," allows remote attackers to read a client's data, aka IC53616. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25743 - http://www-1.ibm.com/support/docview.wss?uid=swg21268775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36701 - http://www.vupen.com/english/ad
cview.wss?uid=swg21268775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36701 - http://www.vupen.com/english/advisories/2007/3228 - http://secunia.com/advisories/26883 - http://www-1.ibm.com/support/search.wss?rs=0&q=IC53616&apar=only - http://www.securitytracker.com/id?1018725 - http://osvdb.org/38162
CVE ID: CVE-2007-5023 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T15:17:27.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075, and Server before 1.0.4 Build 56528 allows local users to gain privileges via unspecified vectors, possibly involving a malicious "program.exe" file in the C: folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/support/server/doc/releasenotes_server.html - htt
st Notes: - CVE Program Container: References: - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://www.securityfocus.com/bid/25732 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
CVE ID: CVE-2007-5024 State: PUBLISHED Published: 2007-09-21T18:00:00Z Last Updated: 2024-09-17T03:49:14.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2005-3620. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/support/server/doc/releasenotes_server.html
CVE ID: CVE-2007-5025 State: PUBLISHED Published: 2007-09-21T18:00:00Z Last Updated: 2024-09-17T01:26:17.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an unspecified manipulation of "images stored in virtual machines downloaded by the user." Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/support/ace/doc/releasenotes_ace.html
CVE ID: CVE-2007-5026 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T15:17:27.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3156 - http://osvdb.org/43970 - http://www.securityfocus.com/archive/1/479969/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36703 - http://www.waraxe.us/advisory-52.html
CVE ID: CVE-2007-5027 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T15:17:27.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firmware R1.94p0vTIG allow remote attackers to inject arbitrary web script or HTML via the (1) DD or (2) DU parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25738 - http://www.securityfocus.com/archive/1/479994/100/0/threaded - http://osvdb.org/38886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36696 - http://securityreason.
/threaded - http://osvdb.org/38886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36696 - http://securityreason.com/securityalert/3159
CVE ID: CVE-2007-5028 State: PUBLISHED Published: 2007-09-21T18:00:00Z Last Updated: 2024-09-16T23:22:10.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://klub.com.pl/dhcpv6/
CVE ID: CVE-2007-5029 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T15:17:27.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes, which allows remote attackers to trigger a buffer over-read and cause a denial of service (daemon crash), as demonstrated by incorrect behavior of the TSrvMsg constructor in SrvMessages/SrvMsg.cpp when (1) reading the option code and option length and (2) parsing options. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.html - https://exchange.xf
ainer: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36685 - http://secunia.com/advisories/26876 - http://klub.com.pl/dhcpv6/ - http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt - http://osvdb.org/40569 - http://www.securityfocus.com/bid/25726
CVE ID: CVE-2007-5030 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T15:17:27.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via packets containing options with large lengths, which trigger attempts at excessive memory allocation, as demonstrated by (1) the TSrvMsg constructor in SrvMessages/SrvMsg.cpp; the (2) TClntMsg, (3) TClntOptIAAddress, (4) TClntOptIAPrefix, (5) TOptVendorSpecInfo, and (6) TOptOptionRequest constructors; and the (7) TRelIfaceMgr::decodeRelayRepl, (8) TRelMsg::decodeOpts, and (9) TSrvIfaceMgr::decodeRelayForw methods.
tors; and the (7) TRelIfaceMgr::decodeRelayRepl, (8) TRelMsg::decodeOpts, and (9) TSrvIfaceMgr::decodeRelayForw methods. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36684 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.html - http://osvdb.org/40568 - http://secunia.com/advisories/26876 - http://klub.com.pl/dhcpv6/ - http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt - http://www.securityfocus.com/bid/25726