deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-5645
Published: 2017-04-17
Description: In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.openwall.com/lists/oss-security/2019/12/19/2; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html
CVE: CVE-2017-7892
Published: 2017-04-17
Description: Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization. A remote attacker can trigger a segfault in a 32-bit libcapnp application because Cap'n Proto relies on pointer arithmetic calculations that overflow. An example compiler with optimization that elides a bounds check in such calculations is Apple LLVM version 8.1.0 (clang-802.0.41). The attack vector is a crafted far pointer within a message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/sandstorm-io/capnproto/blob/master/security-advisories/2017-04-17-0-apple-clang-elides-bounds-check.md; https://github.com/sandstorm-io/capnproto/blob/master/security-advisories/2017-04-17-0-apple-clang-elides-bounds-check.md
CVE: CVE-2017-5661
Published: 2017-04-18
Description: In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full compromise of the server - including confidential or sensitive files - would be possible. XXE can also be used to attack the availability of the server via denial of service as the references within a xml document can trivially trigger an amplification attack.
CVSS Score: 7.3 (HIGH)
CWE: CWE-611
References: http://www.debian.org/security/2017/dsa-3864; http://www.securityfocus.com/bid/97947; https://www.tenable.com/security/tns-2021-14
CVE: CVE-2017-5662
Published: 2017-04-18
Description: In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full compromise of the server - including confidential or sensitive files - would be possible. XXE can also be used to attack the availability of the server via denial of service as the references within a xml document can trivially trigger an amplification attack.
CVSS Score: 7.3 (HIGH)
CWE: CWE-611
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2017-7645
Published: 2017-04-18
Description: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.debian.org/security/2017/dsa-3886; http://www.securityfocus.com/bid/97950; https://access.redhat.com/errata/RHSA-2017:1615
CVE: CVE-2017-7896
Published: 2017-04-18
Description: Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/97938; https://success.trendmicro.com/solution/1116821-security-bulletin-trend-micro-interscan-messaging-security-virtual-appliance-imsva-9-1-multiple-v; http://www.securityfocus.com/bid/97938
CVE: CVE-2017-5653
Published: 2017-04-18
Description: JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-295
References: http://cxf.apache.org/security-advisories.data/CVE-2017-5653.txt.asc?version=1&modificationDate=[PII_REDACTED]10&api=v2; http://www.securityfocus.com/bid/97968; http://www.securitytracker.com/id/1038279
CVE: CVE-2017-5656
Published: 2017-04-18
Description: Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-384
References: http://cxf.apache.org/security-advisories.data/CVE-2017-5656.txt.asc?version=1&modificationDate=[PII_REDACTED]82&api=v2; http://www.securityfocus.com/bid/97971; http://www.securitytracker.com/id/1038282
CVE: CVE-2017-7897
Published: 2017-04-18
Description: A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) and User Information (view_user_page.php) pages, allows remote attackers to inject arbitrary code (if CSP settings permit it) through crafted PATH_INFO in a URL, due to use of unsanitized $_SERVER['PHP_SELF'] to generate URLs.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.mantisbt.org/bugs/view.php?id=22742; http://www.securitytracker.com/id/1038278; https://github.com/mantisbt/mantisbt/commit/a1c719313d61b07bbe[PII_REDACTED]b8195fdc32f1
CVE: CVE-2017-7939
Published: 2017-04-18
Description: The read_next_pam_token function in imagew-pnm.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/jsummers/imageworsener/issues/13; https://security.gentoo.org/glsa/201706-06; https://github.com/jsummers/imageworsener/issues/13
CVE: CVE-2017-7940
Published: 2017-04-18
Description: The iw_read_gif_file function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/jsummers/imageworsener/issues/18; https://security.gentoo.org/glsa/201706-06; https://github.com/jsummers/imageworsener/issues/18
CVE: CVE-2017-7941
Published: 2017-04-18
Description: The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.debian.org/security/2017/dsa-3863; http://www.securityfocus.com/bid/97944; https://github.com/ImageMagick/ImageMagick/issues/428
CVE: CVE-2017-7942
Published: 2017-04-18
Description: The ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/97946; https://github.com/ImageMagick/ImageMagick/issues/429; http://www.securityfocus.com/bid/97946
CVE: CVE-2017-7943
Published: 2017-04-18
Description: The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.debian.org/security/2017/dsa-3863; http://www.securityfocus.com/bid/97956; https://github.com/ImageMagick/ImageMagick/issues/427
CVE: CVE-2016-10345
Published: 2017-04-18
Description: In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: https://github.com/phusion/passenger/blob/stable-5.1/CHANGELOG; https://github.com/phusion/passenger/commit/e5b4b0824d6b648525b4bf63d9fa37e5beeae441; https://github.com/phusion/passenger/blob/stable-5.1/CHANGELOG
CVE: CVE-2017-7946
Published: 2017-04-18
Description: The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted Mach0 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/radare/radare2/commit/d1e8ac62c6d978d4662f69116e30230d43033c92; https://github.com/radare/radare2/issues/7301; https://github.com/radare/radare2/commit/d1e8ac62c6d978d4662f69116e30230d43033c92
CVE: CVE-2014-9907
Published: 2017-04-19
Description: coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93231; https://bugzilla.redhat.com/show_bug.cgi?id=1378734
CVE: CVE-2016-5410
Published: 2017-04-19
Description: firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287
References: http://rhn.redhat.com/errata/RHSA-2016-2597.html; http://www.firewalld.org/2016/08/firewalld-0-4-3-3-release; http://www.openwall.com/lists/oss-security/2016/08/16/3
CVE: CVE-2016-7515
Published: 2017-04-19
Description: The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the number of pixels.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93120; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533445
CVE: CVE-2016-7519
Published: 2017-04-19
Description: The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533445
CVE: CVE-2016-7522
Published: 2017-04-19
Description: The ReadPSDImage function in MagickCore/locale.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537419
CVE: CVE-2016-7528
Published: 2017-04-19
Description: The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted VIFF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93226; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537425
CVE: CVE-2016-7529
Published: 2017-04-19
Description: coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted XCF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1539051
CVE: CVE-2016-7531
Published: 2017-04-19
Description: MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PDB file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1539061
CVE: CVE-2016-7533
Published: 2017-04-19
Description: The ReadWPGImage function in coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WPG file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1542114
CVE: CVE-2016-7537
Published: 2017-04-19
Description: MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted PDB file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1553366
CVE: CVE-2017-7849
Published: 2017-04-19
Description: Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due to insecure permissions when running in Agent Mode.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: http://www.securityfocus.com/bid/97951; https://www.tenable.com/security/tns-2017-10; http://www.securityfocus.com/bid/97951
CVE: CVE-2017-7850
Published: 2017-04-19
Description: Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local privilege escalation issue due to insecure permissions when running in Agent Mode.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://www.securityfocus.com/bid/97952; https://www.tenable.com/security/tns-2017-10; http://www.securityfocus.com/bid/97952
CVE: CVE-2017-7948
Published: 2017-04-19
Description: Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via a crafted PostScript document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://git.ghostscript.com/?p=ghostpdl.git%3Bh=8210a[PII_REDACTED]b49c526e2b102fdc00c9c4699; https://bugs.ghostscript.com/show_bug.cgi?id=697762; https://security.gentoo.org/glsa/201811-12
CVE: CVE-2017-7960
Published: 2017-04-19
Description: The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted CSS file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html; https://blogs.gentoo.org/ago/2017/04/17/libcroco-heap-overflow-and-undefined-behavior/; https://git.gnome.org/browse/libcroco/commit/?id=898e3a8c8c0314d2e6b106809a8e3e93cf9d4394
CVE: CVE-2017-7961
Published: 2017-04-19
Description: The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CSS file. NOTE: third-party analysis reports "This is not a security issue in my view. The conversion surely is truncating the double into a long value, but there is no impact as the value is one of the RGB components.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html; http://openwall.com/lists/oss-security/2017/04/24/2; https://blogs.gentoo.org/ago/2017/04/17/libcroco-heap-overflow-and-undefined-behavior/
CVE: CVE-2017-7962
Published: 2017-04-19
Description: The iwgif_read_image function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://blogs.gentoo.org/ago/2017/04/17/imageworsener-divide-by-zero-in-iwgif_record_pixel-imagew-gif-c/; https://github.com/jsummers/imageworsener/commit/ca3356eb49fee03e2eaf6b6aff826988c1122d93; https://github.com/jsummers/imageworsener/issues/15
CVE: CVE-2017-7963
Published: 2017-04-19
Description: The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1.4 allow attackers to cause a denial of service (memory consumption and application crash) via operations on long strings. NOTE: the vendor disputes this, stating "There is no security issue here, because GMP safely aborts in case of an OOM condition. The only attack vector here is denial of service. However, if you allow attacker-controlled, unbounded allocations you have a DoS vector regardless of GMP's OOM behavior.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://bugs.php.net/bug.php?id=74308; https://bugs.php.net/bug.php?id=74308
CVE: CVE-2017-7964
Published: 2017-04-19
Description: Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-1188
References: https://www.oxy-gen.mobi/blog.html; https://www.oxy-gen.mobi/blog.html
CVE: CVE-2017-7975
Published: 2017-04-19
Description: Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function in jbig2_huffman.c during operations on a crafted JBIG2 file, leading to a denial of service (application crash) or possibly execution of arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.debian.org/security/2017/dsa-3855; https://bugs.ghostscript.com/show_bug.cgi?id=697693; https://security.gentoo.org/glsa/201708-10
CVE: CVE-2013-7463
Published: 2017-04-19
Description: The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms via a chosen plaintext attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: http://www.securityfocus.com/bid/98035; https://github.com/Gurpartap/aescrypt/issues/4; http://www.securityfocus.com/bid/98035
CVE: CVE-2017-7976
Published: 2017-04-19
Description: Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-190
References: http://www.debian.org/security/2017/dsa-3855; https://bugs.ghostscript.com/show_bug.cgi?id=697683; https://security.gentoo.org/glsa/201708-10
CVE: CVE-2017-7978
Published: 2017-04-19
Description: Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to obtain sensitive information by reading a world-readable log file after an unexpected reboot. The Samsung ID is SVE-2017-8290.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://security.samsungmobile.com/smrupdate.html#SMR-APR-2017; http://security.samsungmobile.com/smrupdate.html#SMR-APR-2017
CVE: CVE-2017-7979
Published: 2017-04-19
Description: The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the tb nlattr array, which allows local users to cause a denial of service (uninitialized memory access and refcount underflow, and system hang or crash) or possibly have unspecified other impact via "tc filter add" commands in certain contexts. NOTE: this does not affect stable kernels, such as 4.10.x, from kernel.org.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://marc.info/?l=linux-netdev&m=[PII_REDACTED]6349; http://marc.info/?l=linux-netdev&m=[PII_REDACTED]6365; http://marc.info/?l=linux-netdev&m=[PII_REDACTED]6366
CVE: CVE-2017-6919
Published: 2017-04-20
Description: Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is enabled and the site allows PATCH requests.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/97941; http://www.securitytracker.com/id/1038371; https://www.drupal.org/SA-CORE-2017-002
CVE: CVE-2017-7282
Published: 2017-04-20
Description: An issue was discovered in Unitrends Enterprise Backup before 9.1.1. The function downloadFile in api/includes/restore.php blindly accepts any filename passed to /api/restore/download as valid. This allows an authenticated attacker to read any file in the filesystem that the web server has access to, aka Local File Inclusion (LFI).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-2/; https://support.unitrends.com/UnitrendsBackup/s/article/ka640000000CcWGAA0/000005558?r=1; https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-2/
CVE: CVE-2017-7283
Published: 2017-04-20
Description: An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-2/; https://support.unitrends.com/UnitrendsBackup/s/article/ka640000000CcWBAA0/000005557?r=1; https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-2/
CVE: CVE-2017-5181
Published: 2017-04-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-7692. Reason: This candidate is a reservation duplicate of CVE-2017-7692. Notes: All CVE users should reference CVE-2017-7692 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-7692
Published: 2017-04-20
Description: SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call. It's possible to exploit this vulnerability to execute arbitrary shell commands on the remote server. The problem is in the Deliver_SendMail.class.php with the initStream function that uses escapeshellcmd() to sanitize the sendmail command before executing it. The use of escapeshellcmd() is not correct in this case since it doesn't escape whitespaces, allowing the injection of arbitrary command parameters. The problem is in -f$envelopefrom within the sendmail command line. Hence, if the target server uses sendmail and SquirrelMail is configured to use it as a command-line program, it's possible to trick sendmail into using an attacker-provided configuration file that triggers the execution of an arbitrary command. For exploitation, the attacker must upload a sendmail.cf file as an email attachment, and inject the sendmail.cf filename with the -C option within the "Options > Personal Informations > Email Address" setting.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://openwall.com/lists/oss-security/2017/04/19/6; http://openwall.com/lists/oss-security/2017/04/27/1; http://www.debian.org/security/2017/dsa-3852
CVE: CVE-2017-7938
Published: 2017-04-20
Description: Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long argument. An example threat model is automated execution of DMitry with hostname strings found in local log files.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-119
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://github.com/jaygreig86/dmitry/pull/12; https://packetstormsecurity.com/files/142210/Dmitry-1.3a-Local-Stack-Buffer-Overflow.html