Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://secunia.com/advisories/29852 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231601-1 - http://www.novell.com/linux/security/advisories/2008_23_openoffice.html - https://bugzilla.redhat.com/show_bug.cgi?id=435678 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=691 - http://secunia.com/advisories/29864 - http://security.gentoo.org/glsa/glsa-200805-16.xml - http://secunia.com/advisories/30100 - http://secunia.com/advisories/29987 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:095 - http://www.securitytracker.com/id?1019891 - http://www.openoffice.org/security/cves/CVE-2007-4770.html - http://www.debian.org/security/2008/dsa-1547 - http
19891 - http://www.openoffice.org/security/cves/CVE-2007-4770.html - http://www.debian.org/security/2008/dsa-1547 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11006 - http://www.vupen.com/english/advisories/2008/1253/references - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html - http://www.vupen.com/english/advisories/2008/1375/references - http://www.openoffice.org/security/bulletin.html - http://secunia.com/advisories/30179 - http://www.openoffice.org/security/cves/CVE-2007-5745.html - http://www.securityfocus.com/bid/28819 - http://secunia.com/advisories/29871 - http://secunia.com/advisories/29910 - http://www.ub
.securityfocus.com/bid/28819 - http://secunia.com/advisories/29871 - http://secunia.com/advisories/29910 - http://www.ubuntu.com/usn/usn-609-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41863
CVE ID: CVE-2007-5746 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T15:39:13.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an EMF file with a crafted EMR_STRETCHBLT record, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-231661-1 - http://secunia.com/advisories/29913 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:090 - http://www.redhat.com/support/errata/RHSA-2008-0175.h
http://www.mandriva.com/security/advisories?name=MDVSA-2008:090 - http://www.redhat.com/support/errata/RHSA-2008-0175.html - http://secunia.com/advisories/29852 - http://www.novell.com/linux/security/advisories/2008_23_openoffice.html - http://secunia.com/advisories/29864 - http://secunia.com/advisories/29844 - http://security.gentoo.org/glsa/glsa-200805-16.xml - http://secunia.com/advisories/30100 - http://secunia.com/advisories/29987 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:095 - http://www.openoffice.org/security/cves/CVE-2007-4770.html - http://www.openoffice.org/security/cves/CVE-2007-5746.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
.openoffice.org/security/cves/CVE-2007-5746.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10249 - http://www.debian.org/security/2008/dsa-1547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41861 - http://www.vupen.com/english/advisories/2008/1253/references - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html - http://www.redhat.com/support/errata/RHSA-2008-0176.html - http://www.vupen.com/english/advisories/2008/1375/references - http://www.openoffice.org/security/bulletin.html - http://secunia.com/advisories/30179 - http://www.openoffice.org/security/cves/CVE-2007-5745.html - http://www.securityfocus.com
secunia.com/advisories/30179 - http://www.openoffice.org/security/cves/CVE-2007-5745.html - http://www.securityfocus.com/bid/28819 - http://secunia.com/advisories/29871 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=692 - http://secunia.com/advisories/29910 - http://www.ubuntu.com/usn/usn-609-1 - http://www.securitytracker.com/id?1019892
CVE ID: CVE-2007-5747 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T15:39:13.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted values that trigger an excessive loop and a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29913 - http://www.redhat.com/support/errata/RHSA-2008-0175.html - http://secunia.com/advisories/29852 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231601-1 - http
75.html - http://secunia.com/advisories/29852 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231601-1 - http://www.novell.com/linux/security/advisories/2008_23_openoffice.html - http://secunia.com/advisories/29864 - http://security.gentoo.org/glsa/glsa-200805-16.xml - http://secunia.com/advisories/30100 - http://secunia.com/advisories/29987 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:095 - http://www.securitytracker.com/id?1019891 - http://www.openoffice.org/security/cves/CVE-2007-4770.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41881 - http://www.debian.org/security/2008/dsa-1547 - http://www.vupen.com/english/advisories/2008/1253/references - h
/41881 - http://www.debian.org/security/2008/dsa-1547 - http://www.vupen.com/english/advisories/2008/1253/references - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html - https://bugzilla.redhat.com/show_bug.cgi?id=435681 - http://www.vupen.com/english/advisories/2008/1375/references - http://www.openoffice.org/security/bulletin.html - http://secunia.com/advisories/30179 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=693 - http://www.openoffice.org/security/cves/CVE-2007-5745.html - http://www.securityfocus.com/bid/28819 - http://secunia.com/advisories/29871 - http://secunia.com/advisories/29910 - http://www.ubuntu.com/usn/usn-609-1 - ht
9 - http://secunia.com/advisories/29871 - http://secunia.com/advisories/29910 - http://www.ubuntu.com/usn/usn-609-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11298
CVE ID: CVE-2007-5751 State: PUBLISHED Published: 2007-10-31T17:00:00 Last Updated: 2024-08-07T15:39:13.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liferea before 1.4.6 uses weak permissions (0644) for the feedlist.opml backup file, which allows local users to obtain credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26254 - https://bugzilla.redhat.com/show_bug.cgi?id=360641 - http://secunia.com/advisories/27491 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00021.html - http://osvdb.org/40649 - http://sourceforge.net/project/shownotes.php?release_id=550468 - https://exchange.xforce.ib
l - http://osvdb.org/40649 - http://sourceforge.net/project/shownotes.php?release_id=550468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38156 - http://secunia.com/advisories/27438
CVE ID: CVE-2007-5752 State: PUBLISHED Published: 2007-10-31T17:00:00 Last Updated: 2024-08-07T15:39:13.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: adduser.php in PHP-AGTC Membership (AGTC-Membership) System 1.1a does not require authentication, which allows remote attackers to create accounts via a modified form, as demonstrated by an account with admin (userlevel 4) privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38173 - http://securityreason.com/securityalert/3326 - http://secunia.com/advisories/27430 - http://www.securityfocus.com/bid/26255 - http://www.securityfocus.com/archive/1/482919
://secunia.com/advisories/27430 - http://www.securityfocus.com/bid/26255 - http://www.securityfocus.com/archive/1/482919/100/0/threaded
CVE ID: CVE-2007-5753 State: PUBLISHED Published: 2007-10-31T17:00:00 Last Updated: 2024-08-07T15:39:13.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Light FMan PHP (lfman or lightfman) before 2.0rc1 has unknown impact and attack vectors related to "actions." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38168 - http://sourceforge.net/forum/forum.php?forum_id=749157 - http://www.securityfocus.com/bid/26267 - http://www.vupen.com/english/advisories/2007/3662 - http://sourceforge.net/project/shownotes.php?release_id=550239&group_id=179336
CVE ID: CVE-2007-5754 State: PUBLISHED Published: 2007-10-31T17:00:00 Last Updated: 2024-08-07T15:39:13.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in urlinn_includes/config.php in phpFaber URLInn 2.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the dir_ws parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38182 - http://www.securityfocus.com/bid/26261 - https://www.exploit-db.com/exploits/4588
CVE ID: CVE-2007-5755 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:39:13.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the AOL AmpX ActiveX control in AmpX.dll 2.6.1.11 in AOL Radio allow remote attackers to execute arbitrary code via long arguments to unspecified methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26396 - http://secunia.com/advisories/27622 - http://osvdb.org/38705 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=623 - http://www.securitytracker.com/id?1018929 - https://exchange.xforce.ibmcloud.com/vulnerabili
lities/display.php?id=623 - http://www.securitytracker.com/id?1018929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38397 - http://www.vupen.com/english/advisories/2007/3822
CVE ID: CVE-2007-5756 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:39:13.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode (aka Table Management Extensions or TME), and as used in Wireshark and possibly other products, allow local users to gain privileges via crafted IOCTL requests. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625 - http://www.winpcap.org/misc/changelog.htm - http://www.securitytracker.com/id?1018935 - http://www.securityfoc
?id=625 - http://www.winpcap.org/misc/changelog.htm - http://www.securitytracker.com/id?1018935 - http://www.securityfocus.com/bid/26409 - http://secunia.com/advisories/27676 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38433 - http://www.vupen.com/english/advisories/2007/3835
CVE ID: CVE-2007-5757 State: PUBLISHED Published: 2008-02-12T23:00:00Z Last Updated: 2024-09-16T17:08:00.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in db2pd in IBM DB2 Universal Database (UDB) 8 before FixPak 16 and 9 before Fix Pack 4 allows local users to gain root privileges via a modified DB2INSTANCE environment variable that points to a malicious library. NOTE: this might be the same issue as CVE-2008-0697. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT - http://securitytracker.com/id?1019319 - http://labs.idefense.com/intel
/fixes/english-us/aparlist/db2_v82/APARLIST.TXT - http://securitytracker.com/id?1019319 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=653 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ03546
CVE ID: CVE-2007-5758 State: PUBLISHED Published: 2008-04-16T18:00:00 Last Updated: 2024-08-07T15:39:13.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to execute arbitrary code via a long DASPROF environment variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41847 - http://www.securitytracker.com/id?1019853 - http://secunia.com/advisories/29784 - http://www.vupen.com/english/advisories/2008/1237/referenc
racker.com/id?1019853 - http://secunia.com/advisories/29784 - http://www.vupen.com/english/advisories/2008/1237/references - http://www.securityfocus.com/bid/27870 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=689
CVE ID: CVE-2007-5759 State: REJECTED Published: 2007-12-20T01:00:00Z Last Updated: 2024-09-16T20:32:32.428Z Description: No description available.
CVE ID: CVE-2007-5760 State: PUBLISHED Published: 2008-01-18T22:00:00 Last Updated: 2024-08-07T15:39:13.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27336 - http://www.vupen.com/english/advisories/2008/0184 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html - http://secunia.
008-January/msg00704.html - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html - http://secunia.com/advisories/28532 - http://secunia.com/advisories/29707 - http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm - http://secunia.com/advisories/28843 - http://www.debian.org/security/2008/dsa-1466 - http://secunia.com/advisories/28540 - http://www.securityfocus.com/archive/1/487335/100/0/threaded - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=646 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39766 - http://secunia.com/advisories/28718 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1 - http://secunia.com/advisorie
.com/advisories/28718 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1 - http://secunia.com/advisories/28584 - http://www.openbsd.org/errata41.html#012_xorg - http://secunia.com/advisories/28941 - http://secunia.com/advisories/28592 - http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm - http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 - http://www.securityfocus.com/bid/27354 - http://secunia.com/advisories/30161 - http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml - http://www.redhat.com/support/errata/RHSA-2008-0030.html - http://secunia.com/advisories/28543 - http://secunia.com/advisories/28273 - http://www.redhat.com/support/errata/RHSA-2
http://secunia.com/advisories/28543 - http://secunia.com/advisories/28273 - http://www.redhat.com/support/errata/RHSA-2008-0031.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11718 - http://secunia.com/advisories/28550 - http://www.vupen.com/english/advisories/2008/0497/references - http://bugs.gentoo.org/show_bug.cgi?id=204362 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:023 - http://secunia.com/advisories/28885 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:025 - https://usn.ubuntu.com/571-1/ - http://security.gentoo.org/glsa/glsa-200804-05.xml
rity/advisories?name=MDVSA-2008:025 - https://usn.ubuntu.com/571-1/ - http://security.gentoo.org/glsa/glsa-200804-05.xml - http://secunia.com/advisories/28535 - http://lists.freedesktop.org/archives/xorg/2008-January/031918.html - http://securitytracker.com/id?1019232 - https://issues.rpath.com/browse/RPL-2010 - http://www.openbsd.org/errata42.html#006_xorg - http://secunia.com/advisories/28539 - http://secunia.com/advisories/28616 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html - http://secunia.com/advisories/28536 - http://secunia.com/advisories/28693 - http://security.gentoo.org/glsa/glsa-200801-09.xml - http://www.vupen.com/english/advisories/2008/017
advisories/28693 - http://security.gentoo.org/glsa/glsa-200801-09.xml - http://www.vupen.com/english/advisories/2008/0179
CVE ID: CVE-2007-5761 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T15:39:13.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \\.\NantSys device interface (nantsys.sys), which allows local users to gain privileges or cause a denial of service (system crash), as demonstrated by modifying the SYSENTER_EIP_MSR CPU Model Specific Register (MSR) value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27175 - http://secunia.com/advisories/28366 - http://www.netopia.com/support/software/technotes/netoctopus/Remov
com/bid/27175 - http://secunia.com/advisories/28366 - http://www.netopia.com/support/software/technotes/netoctopus/Removing_the_nantsys_Driver.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/39503 - http://www.vupen.com/english/advisories/2008/0062 - http://securitytracker.com/id?1019161 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=636
CVE ID: CVE-2007-5762 State: PUBLISHED Published: 2008-01-09T22:00:00 Last Updated: 2024-08-07T15:39:13.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27209 - http://secunia.com/advisories/28396 - http://www.vupen.com/english/advisories/2008/0088 - http://download.novell.com/Download?buildid=4FmI89wOmg4~ - http://labs.idefense.com/intelligence/vulne
ories/2008/0088 - http://download.novell.com/Download?buildid=4FmI89wOmg4~ - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39576 - http://www.securitytracker.com/id?1019172
CVE ID: CVE-2007-5763 State: REJECTED Published: 2008-02-13T23:00:00Z Last Updated: 2024-09-16T22:08:42.067Z Description: No description available.
CVE ID: CVE-2007-5764 State: PUBLISHED Published: 2008-01-25T00:00:00 Last Updated: 2024-08-07T15:39:13.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the pioout program in printers.rte in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long command line option. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28609 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4078 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10844 - http://www.securitytracker.com/id?1019264 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=648 - http://www-1.ibm
ritytracker.com/id?1019264 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=648 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39912 - http://www.vupen.com/english/advisories/2008/0261 - http://www.securityfocus.com/bid/27428 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10842 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10841 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5616
CVE ID: CVE-2007-5766 State: PUBLISHED Published: 2007-11-08T20:00:00 Last Updated: 2024-08-07T15:39:13.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html - http://www.securityfocus.com/archive/1/483098/100/100/threaded - http://www.zerodayinitiative.com/advisories/ZDI-0
tml - http://www.securityfocus.com/archive/1/483098/100/100/threaded - http://www.zerodayinitiative.com/advisories/ZDI-07-058.html - http://securityreason.com/securityalert/3344 - http://osvdb.org/40080
CVE ID: CVE-2007-5767 State: PUBLISHED Published: 2007-11-02T23:00:00 Last Updated: 2024-08-07T15:39:13.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager 3.8 before Update 1.5 allows remote attackers to execute arbitrary code via a validation request in which the Novell tree name is not properly delimited with a wide-character backslash or NULL character. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018882 - http://www.vupen.com/english/advisories/2007/3682 - http://download.novell.com/Download?buildid=AuOWp2Xsvmc~ - http://www.sec
//www.vupen.com/english/advisories/2007/3682 - http://download.novell.com/Download?buildid=AuOWp2Xsvmc~ - http://www.securityfocus.com/bid/26285 - http://www.zerodayinitiative.com/advisories/ZDI-07-064.html - http://secunia.com/advisories/27468
CVE ID: CVE-2007-5768 State: PUBLISHED Published: 2007-10-31T22:00:00 Last Updated: 2024-08-07T15:39:13.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43676 - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=363
CVE ID: CVE-2007-5769 State: PUBLISHED Published: 2007-12-06T15:00:00 Last Updated: 2024-08-07T15:39:13.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the getreply function in ftp.c in netkit ftp (netkit-ftp) 0.17 20040614 and later allows remote FTP servers to cause a denial of service (application crash) and possibly have unspecified other impact via some types of FTP protocol behavior. NOTE: the netkit-ftpd issue is covered by CVE-2007-6263. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26764 - http://marc.info/?l=full-disclosure&m=119704348003382&w=2 - http://bugs.gentoo.org/show_bug.cgi?id=
ocus.com/bid/26764 - http://marc.info/?l=full-disclosure&m=119704348003382&w=2 - http://bugs.gentoo.org/show_bug.cgi?id=199206 - http://cvs.fedora.redhat.com/viewcvs/rpms/ftp/F-8/netkit-ftp-0.17-sigseg.patch?view=auto
CVE ID: CVE-2007-5770 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:39:13.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in Ruby 1.8.5 and 1.8.6 do not verify that the commonName (CN) field in a server certificate matches the domain name in a request sent over SSL, which makes it easier for remote attackers to intercept SSL transmissions via a man-in-the-middle attack or spoofed web site, different components than CVE-2007-5162. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27576 - http://www.vupen.com/