deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-2461
Published: 2007-05-02
Description: The DHCP relay agent in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 allows remote attackers to cause a denial of service (dropped packets) via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocated for a local buffer.  NOTE: this issue only occurs when multiple DHCP servers are used.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/25109; http://www.cisco.com/en/US/products/products_security_response09186a[PII_REDACTED].html; http://www.kb.cert.org/vuls/id/530057
CVE: CVE-2007-2462
Published: 2007-05-02
Description: Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/25109; http://www.cisco.com/en/US/products/products_security_advisory09186a[PII_REDACTED].shtml; http://www.kb.cert.org/vuls/id/210876
CVE: CVE-2007-2463
Published: 2007-05-02
Description: Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)17 allows remote attackers to cause a denial of service (device reload) via unknown vectors related to VPN connection termination and password expiry.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/25109; http://www.cisco.com/en/US/products/products_security_advisory09186a[PII_REDACTED].shtml; http://www.osvdb.org/35332
CVE: CVE-2007-2464
Published: 2007-05-02
Description: Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service (device reload) via "non-standard SSL sessions."
CVSS Score: 7.1 (HIGH)
References: http://secunia.com/advisories/25109; http://www.cisco.com/en/US/products/products_security_advisory09186a[PII_REDACTED].shtml; http://www.kb.cert.org/vuls/id/337508
CVE: CVE-2007-2465
Published: 2007-05-02
Description: Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing (BSM) is enabled for file read, write, attribute modify, create, or delete audit classes, allows local users to cause a denial of service (panic) via unknown vectors, possibly related to the audit_savepath function.
CVSS Score: 4.7 (MEDIUM)
References: http://osvdb.org/34904; http://secunia.com/advisories/25081; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102900-1
CVE: CVE-2007-2466
Published: 2007-05-02
Description: Unspecified vulnerability in the LDAP Software Development Kit (SDK) for C, as used in Sun Java System Directory Server 5.2 up to Patch 4 and Sun ONE Directory Server 5.1, allows remote attackers to cause a denial of service (crash) via certain BER encodings.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/35743; http://secunia.com/advisories/25091; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102895-1
CVE: CVE-2007-2467
Published: 2007-05-02
Description: ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service (system crash) by sending malformed data to the vsdatant device driver, which causes an invalid memory access.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/35240; http://secunia.com/advisories/25064; http://www.matousec.com/info/advisories/ZoneAlarm-Insufficient-validation-of-vsdatant-driver-input-buffer.php
CVE: CVE-2007-2468
Published: 2007-05-02
Description: Unspecified vulnerability in HP OpenVMS for Integrity Servers 8.2-1 and 8.3 allows local users to cause a denial of service (crash) via "Program actions relating to exceptions."
CVSS Score: 4.9 (MEDIUM)
References: ftp://ftp.itrc.hp.com/openvms_patches/i64/V8.2-1/VMS821I_SYS-V0400.txt; ftp://ftp.itrc.hp.com/openvms_patches/i64/V8.3/VMS83I_SYS-V0200.txt; http://osvdb.org/35504
CVE: CVE-2007-2469
Published: 2007-05-02
Description: SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2007/05/filerun-vuln.html; http://secunia.com/advisories/25075; http://www.securityfocus.com/bid/23752
CVE: CVE-2007-2470
Published: 2007-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) module, or (3) section parameter.
CVSS Score: 5.8 (MEDIUM)
References: http://pridels0.blogspot.com/2007/05/filerun-vuln.html; http://secunia.com/advisories/25075; http://www.securityfocus.com/bid/23752
CVE: CVE-2007-2471
Published: 2007-05-02
Description: Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrary files via a full pathname in the form parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/35738; http://secunia.com/advisories/25085; https://exchange.xforce.ibmcloud.com/vulnerabilities/33995
CVE: CVE-2007-2472
Published: 2007-05-02
Description: Cross-site scripting (XSS) vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/35739; http://secunia.com/advisories/25085; https://exchange.xforce.ibmcloud.com/vulnerabilities/34173
CVE: CVE-2007-2473
Published: 2007-05-02
Description: SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter.
CVSS Score: 7.5 (HIGH)
References: http://blog.cmsmadesimple.org/2007/04/24/cms-made-simple-106-released/; http://osvdb.org/35744; http://secunia.com/advisories/25082
CVE: CVE-2007-2474
Published: 2007-05-02
Description: Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) include/payment/payflow_pro.php, (2) global.php, or (3) libsecure.php, different vectors than CVE-2007-2070.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/466850/100/0/threaded; http://www.securityfocus.com/bid/23662; http://www.securityfocus.com/archive/1/466850/100/0/threaded
CVE: CVE-2007-2475
Published: 2007-05-02
Description: Unspecified vulnerability in the ADSCHEMA utility in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact and remote attack vectors, related to granting "users excess permissions to their own attributes."
CVSS Score: 6.5 (MEDIUM)
References: http://osvdb.org/35774; http://secunia.com/advisories/25160; http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5003822.html
CVE: CVE-2007-2476
Published: 2007-05-02
Description: Unspecified vulnerability in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact and remote attack vectors, related to Active Directory (AD) password changes.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/35775; http://secunia.com/advisories/25160; http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5003822.html
CVE: CVE-2007-2477
Published: 2007-05-03
Description: PHP remote file inclusion vulnerability in phpMyChat.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the {ChatPath} parameter.  NOTE: this has been disputed by multiple third parties and CVE because $ChatPath is set to a constant value
CVSS Score: 7.5 (HIGH)
References: http://www.attrition.org/pipermail/vim/2007-April/001525.html; http://www.attrition.org/pipermail/vim/2007-April/001531.html; http://www.securityfocus.com/archive/1/465741/100/100/threaded
CVE: CVE-2007-2478
Published: 2007-05-03
Description: Multiple heap-based buffer overflows in the IRC component in Cerulean Studios Trillian Pro before 3.1.5.1 allow remote attackers to corrupt memory and possibly execute arbitrary code via (1) a URL with a long UTF-8 string, which triggers the overflow when the user highlights it, or (2) a font HTML tag with a face attribute containing a long UTF-8 string.
CVSS Score: 9.3 (HIGH)
References: http://blog.ceruleanstudios.com/?p=131; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=522; http://osvdb.org/35721
CVE: CVE-2007-2479
Published: 2007-05-03
Description: Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be sent to the attacker.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://blog.ceruleanstudios.com/?p=131; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=522; http://osvdb.org/35722
CVE: CVE-2007-2480
Published: 2007-05-03
Description: The _udp_lib_get_port function in net/ipv4/udp.c in Linux kernel 2.6.21 and earlier does not prevent a bind to a port with a local address when there is already a bind to that port with a wildcard local address, which might allow local users to intercept local traffic for daemons or other applications.
CVSS Score: 4.6 (MEDIUM)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=de34ed91c4ffa4727964a832c46e624dd1495cf5; http://osvdb.org/39235; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=de34ed91c4ffa4727964a832c46e624dd1495cf5
CVE: CVE-2007-2481
Published: 2007-05-03
Description: PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://advisories.echo.or.id/adv/adv81-K-159-2007.txt; http://alexrabe.boelinger.com/; http://osvdb.org/34358
CVE: CVE-2007-2482
Published: 2007-05-03
Description: Directory traversal vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the wpPATH parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://advisories.echo.or.id/adv/adv81-K-159-2007.txt; http://alexrabe.boelinger.com/; http://osvdb.org/45168
CVE: CVE-2007-2483
Published: 2007-05-03
Description: Directory traversal vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the wpPATH parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://advisories.echo.or.id/adv/adv82-K-159-2007.txt; http://alexrabe.boelinger.com/; http://osvdb.org/37297
CVE: CVE-2007-2484
Published: 2007-05-03
Description: PHP remote file inclusion vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://advisories.echo.or.id/adv/adv82-K-159-2007.txt; http://alexrabe.boelinger.com/; http://osvdb.org/34357
CVE: CVE-2007-2485
Published: 2007-05-03
Description: PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.
CVSS Score: 7.5 (HIGH)
References: http://alexrabe.boelinger.com/; http://osvdb.org/34359; http://www.securityfocus.com/bid/23749
CVE: CVE-2007-2486
Published: 2007-05-03
Description: Directory traversal vulnerability in download.asp in Motobit 1.3 and 1.5 (aka PStruh-CZ) allows remote attackers to read arbitrary files via a .. (dot dot) in the File parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/38458; http://www.securityfocus.com/bid/23757; http://www.vupen.com/english/advisories/2007/1629
CVE: CVE-2007-2487
Published: 2007-05-03
Description: Stack-based buffer overflow in AtomixMP3 allows remote attackers to execute arbitrary code via a long filename in an MP3 file, a different vector than CVE-2006-6287.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35532; http://secunia.com/advisories/25126; http://securityreason.com/securityalert/2675
CVE: CVE-2007-2489
Published: 2007-05-03
Description: Heap-based buffer overflow in LiveData Protocol Server 5.00.045, and other versions before update 500062 (5.00.062), allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted request for a WSDL file that causes a negative length to be used in a strncpy call.
CVSS Score: 10.0 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=523; http://osvdb.org/35529; http://secunia.com/advisories/25076
CVE: CVE-2007-2490
Published: 2007-05-03
Description: Unspecified vulnerability in LiveData Server before 5.00.62 allows remote attackers to cause a denial of service (exit) via crafted Connection-Oriented Transport Protocol (COTP) packets.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/35530; http://secunia.com/advisories/25113; http://www.kb.cert.org/vuls/id/711420
CVE: CVE-2007-2491
Published: 2007-05-04
Description: The PIIX4 power management subsystem in EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996 allows local users to write to arbitrary memory locations via a crafted poke to I/O port 0x1004, triggering a denial of service (virtual machine crash) or other unspecified impact, a related issue to CVE-2007-1337.
CVSS Score: 7.2 (HIGH)
References: http://osvdb.org/40088; http://taviso.decsystem.org/virtsec.pdf; http://www.vupen.com/english/advisories/2007/1592
CVE: CVE-2007-2492
Published: 2007-05-04
Description: SQL injection vulnerability in index.php in the v4bJournal module for PostNuke allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a journal_comment action.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35703; http://securityreason.com/securityalert/2674; http://www.securityfocus.com/archive/1/467387/100/0/threaded
CVE: CVE-2007-2493
Published: 2007-05-04
Description: PHP remote file inclusion vulnerability in faq.php in the FAQ & RULES 2.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/37613; http://www.securityfocus.com/bid/23758; http://www.vupen.com/english/advisories/2007/1631
CVE: CVE-2007-2494
Published: 2007-05-04
Description: Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value.  NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
References: http://moaxb.blogspot.com/2007/05/moaxb-01-powerpointviewerocx-31.html; http://osvdb.org/34332; http://secunia.com/advisories/25092
CVE: CVE-2007-2495
Published: 2007-05-04
Description: Multiple stack-based buffer overflows in the ExcelOCX ActiveX control in ExcelViewer.ocx 3.1.0.6 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://moaxb.blogspot.com/2007/05/moaxb-02-excelviewerocx-v-31-multiple.html; http://osvdb.org/34333; http://secunia.com/advisories/25077
CVE: CVE-2007-2496
Published: 2007-05-04
Description: The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) GotoPage, (6) Save, (7) SaveWebFile, (8) HttpDownloadFile, (9) Open, (10) OpenWebFile, (11) SaveAs, or (12) ShowWordStandardDialog property value.
CVSS Score: 7.8 (HIGH)
References: http://moaxb.blogspot.com/2007/05/moaxb-03-wordviewerocx-32-multiple_03.html; http://osvdb.org/34334; http://secunia.com/advisories/25100
CVE: CVE-2007-2497
Published: 2007-05-04
Description: RealNetworks RealPlayer 10 Gold allows remote attackers to cause a denial of service (memory consumption) via a certain .ra file.  NOTE: this issue was referred to as a "memory leak," but it is not clear if this is correct.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/41730; http://www.securityfocus.com/bid/23712; https://www.exploit-db.com/exploits/3819
CVE: CVE-2007-2498
Published: 2007-05-04
Description: libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/25089; http://securitytracker.com/id?1017993; http://www.securityfocus.com/bid/23723
CVE: CVE-2007-2499
Published: 2007-05-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in DVDdb 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the movieid parameter to loan.php or (2) the s parameter to listmovies.php.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/35544; http://osvdb.org/35545; http://pridels0.blogspot.com/2007/05/dvddb-xss-vuln.html
CVE: CVE-2007-2500
Published: 2007-05-04
Description: server/parser/sprite_definition.cpp in GNU Gnash (aka GNU Flash Player) 0.7.2 allows remote attackers to execute arbitrary code via a large number of SHOWFRAME elements within a DEFINESPRITE element, which triggers memory corruption and enables the attacker to call free with an arbitrary address, probably resultant from a buffer overflow.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/37273; http://savannah.gnu.org/bugs/?19774; http://secunia.com/advisories/25787
CVE: CVE-2007-2501
Published: 2007-05-04
Description: Eval injection vulnerability in codepress.html in CodePress before 0.9.4 allows remote attackers to execute arbitrary code via certain input that is used in an eval function call.
CVSS Score: 7.5 (HIGH)
References: http://codepress.sourceforge.net/changelog.php; http://osvdb.org/36484; http://secunia.com/advisories/25124
CVE: CVE-2007-2502
Published: 2007-05-04
Description: Unspecified vulnerability in HP ProCurve 9300m Series switches with software 08.0.01c through 08.0.01j allows remote attackers to cause a denial of service via unknown vectors, a different switch series than CVE-2006-4015.
CVSS Score: 7.8 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01034753; http://secunia.com/advisories/25101; http://www.securityfocus.com/bid/23791
CVE: CVE-2007-2503
Published: 2007-05-04
Description: Directory traversal vulnerability in turbulence.php in PHP Turbulence 0.0.1 alpha allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[tcore] parameter.  NOTE: this vulnerability is disputed by CVE and a reliable third party because a direct request to user/turbulence.php triggers a fatal error before inclusion
CVSS Score: 10.0 (HIGH)
References: http://securityreason.com/securityalert/2673; http://www.attrition.org/pipermail/vim/2007-April/001541.html; http://www.securityfocus.com/archive/1/466564/100/100/threaded
CVE: CVE-2007-2504
Published: 2007-05-04
Description: PHP remote file inclusion vulnerability in user/turbulence.php in PHP Turbulence 0.0.1 alpha allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[tcore] parameter.  NOTE: this vulnerability is disputed by CVE and a reliable third party because a direct request to user/turbulence.php triggers a fatal error before inclusion
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2673; http://www.attrition.org/pipermail/vim/2007-April/001541.html; http://www.securityfocus.com/archive/1/466564/100/100/threaded
CVE: CVE-2007-2505
Published: 2007-05-04
Description: Stack-based buffer overflow in InterVations MailCOPA 8.01 20070323 allows user-assisted remote attackers to execute arbitrary code via a long command line argument, as demonstrated by a long string in the subject field in a mailto URI.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/35546; http://secunia.com/advisories/25125; http://www.securityfocus.com/archive/1/467372/100/0/threaded
CVE: CVE-2007-2506
Published: 2007-05-04
Description: WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attackers to cause a denial of service (infinite loop and daemon hang) via a messenger URL that invokes _edit.r with no additional parameters, as demonstrated by requests for cgiip.exe or wsisa.dll with WService=wsbroker1/_edit.r in the PATH_INFO.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/35541; http://progress.atgnow.com/esprogress/resultDisplay.do?gotoLink=115&docType=1006&clusterName=CombinedCluster&contentId=12&groupId=3&answerGroup=1&score=1932&page=http%3A%2F%2Fprogress.atgnow.com%2Fesprogress%2Fdocs%2FSolutions%2FProgress%2FESERVER_P123694.xhtml&result=0&excerpt=P123694; http://secunia.com/advisories/25129
CVE: CVE-2007-2507
Published: 2007-05-04
Description: Directory traversal vulnerability in includes/download.php in Treble Designs 1024 CMS 0.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the item parameter.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/35542; http://secunia.com/advisories/25120; http://www.attrition.org/pipermail/vim/2007-May/001578.html
CVE: CVE-2007-1861
Published: 2007-05-07
Description: The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial of service (kernel panic) via NETLINK_FIB_LOOKUP replies, which trigger infinite recursion and a stack overflow.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.8; http://secunia.com/advisories/25030; http://secunia.com/advisories/25083
CVE: CVE-2007-2239
Published: 2007-05-07
Description: Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/35602; http://secunia.com/advisories/25093; http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdf
CVE: CVE-2007-2488
Published: 2007-05-07
Description: The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information (memory contents) or cause a denial of service (application crash), by sending a frame that lacks a 0 byte.
CVSS Score: 10.0 (HIGH)
References: http://ftp.digium.com/pub/asa/ASA-2007-013.pdf; http://osvdb.org/35769; http://secunia.com/advisories/25134