deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-7168
Published: 2007-03-20
Description: PHP remote file inclusion vulnerability in includes/not_mem.php in the Add Name module for PHP allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2450; http://www.securityfocus.com/archive/1/448630/100/0/threaded; http://www.securityfocus.com/bid/20516
CVE: CVE-2006-7169
Published: 2007-03-20
Description: PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _CONFIG[skin_dir] parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/20936; https://exchange.xforce.ibmcloud.com/vulnerabilities/30025; https://www.exploit-db.com/exploits/2721
CVE: CVE-2006-7170
Published: 2007-03-20
Description: Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the (1) t, (2) productId, (3) sk, (4) x, or (5) so parameter to (a) product_review.php; or the (6) orderNo parameter to (b) order-track.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0459&w=2; http://www.securityfocus.com/bid/21072; https://exchange.xforce.ibmcloud.com/vulnerabilities/30214
CVE: CVE-2006-7171
Published: 2007-03-20
Description: product_review.php in Koan Software Mega Mall allows remote attackers to obtain the installation path via a request with an empty value of the x[] parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0459&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/30215; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0459&w=2
CVE: CVE-2007-0998
Published: 2007-03-20
Description: The VNC server implementation in QEMU, as used by Xen and possibly other environments, allows local users of a guest operating system to read arbitrary files on the host operating system via unspecified vectors related to QEMU monitor mode, as demonstrated by mapping files to a CDROM device.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://fedoranews.org/cms/node/2802; http://fedoranews.org/cms/node/2803; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
CVE: CVE-2007-1507
Published: 2007-03-20
Description: The default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid programs within the local cell, which might allow attackers to gain privileges by spoofing a response to an AFS cache manager FetchStatus request, and setting setuid and root ownership for files in the cache.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: http://secunia.com/advisories/24582; http://secunia.com/advisories/24599; http://secunia.com/advisories/24607
CVE: CVE-2007-1508
Published: 2007-03-20
Description: Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin allows remote attackers to inject arbitrary web script or HTML via the RESULT parameter, a different vector than CVE-2006-5983.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/34273; http://secunia.com/advisories/24551; http://www.securityfocus.com/archive/1/463003/100/0/threaded
CVE: CVE-2007-1509
Published: 2007-03-20
Description: Directory traversal vulnerability in enkrypt.php in Sascha Schroeder krypt (aka Holtstraeter Rot 13) allows remote attackers to read arbitrary files via a .. (dot dot) in the datei parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/34089; http://securityreason.com/securityalert/2458; http://www.securityfocus.com/archive/1/463011/100/0/threaded
CVE: CVE-2007-1510
Published: 2007-03-20
Description: SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter.
CVSS Score: 7.5 (HIGH)
References: http://forums.particlesoft.net/viewtopic.php?t=675; http://osvdb.org/34305; http://secunia.com/advisories/24559
CVE: CVE-2007-1511
Published: 2007-03-20
Description: Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privileges for creating a stored procedure, to execute arbitrary code via a CREATE PROCEDURE request with a long procedure name.
CVSS Score: 7.1 (HIGH)
References: http://osvdb.org/34282; http://secunia.com/advisories/24555; http://securityreason.com/securityalert/2470
CVE: CVE-2007-1512
Published: 2007-03-20
Description: Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 Gold and SP1, and Visual Studio .NET 2002 Gold and SP1, and 2003 Gold and SP1 allows user-assisted remote attackers to have an unknown impact (probably crash) via an RTF file with a malformed OLE object, which results in writing two 0x00 characters past the end of szBuffer, aka the "MFC42u.dll Off-by-Two Overflow." NOTE: this issue is due to an incomplete patch (MS07-012) for CVE-2007-0025.
CVSS Score: 10.0 (HIGH)
References: http://www.securityfocus.com/archive/1/463009/100/0/threaded; http://www.securityfocus.com/archive/1/463009/100/0/threaded
CVE: CVE-2007-1513
Published: 2007-03-20
Description: PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder (CWB) PRO 1.9.8, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_PATH parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://advisories.echo.or.id/adv/adv76-theday-2007.txt; http://osvdb.org/34946; http://securityreason.com/securityalert/2452
CVE: CVE-2007-1514
Published: 2007-03-20
Description: PHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the modpath parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/34310; http://securityreason.com/securityalert/2449; http://www.securityfocus.com/archive/1/462930/100/0/threaded
CVE: CVE-2007-1515
Published: 2007-03-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via (1) the email Subject header in thread.php, (2) the edit_query parameter in search.php, or other unspecified parameters in search.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052977.html; http://lists.horde.org/archives/announce/2007/000316.html; http://secunia.com/advisories/24541
CVE: CVE-2007-1516
Published: 2007-03-20
Description: PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the functions_dir parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/34311; http://www.securityfocus.com/bid/22983; http://www.vupen.com/english/advisories/2007/1000
CVE: CVE-2007-0607
Published: 2007-03-20
Description: W-Agora (Web-Agora) 4.2.1, when register_globals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053054.html; http://securityreason.com/securityalert/2465; http://www.netvigilance.com/advisory0015
CVE: CVE-2007-1517
Published: 2007-03-20
Description: SQL injection vulnerability in comments.php in WSN Guest 1.02 and 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34512; http://securityreason.com/securityalert/2451; http://www.securityfocus.com/archive/1/462814/100/0/threaded
CVE: CVE-2007-1518
Published: 2007-03-20
Description: SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2455; http://www.securityfocus.com/archive/1/462860/100/0/threaded; http://www.securityfocus.com/archive/1/463002/100/0/threaded
CVE: CVE-2007-1519
Published: 2007-03-20
Description: Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the Downloads module, a different product than CVE-2006-3948.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://phpfi.com/214668; http://secunia.com/advisories/24629; http://www.securityfocus.com/archive/1/462308/100/100/threaded
CVE: CVE-2007-1520
Published: 2007-03-20
Description: The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is an array before validating the HTTP_REFERER, which allows remote attackers to conduct CSRF attacks.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/34501; http://phpfi.com/214668; http://secunia.com/advisories/24629
CVE: CVE-2007-1521
Published: 2007-03-20
Description: Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the session_regenerate_id function, as demonstrated by calling a userspace error handler or triggering a memory limit violation.
CVSS Score: 6.8 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://secunia.com/advisories/24505
CVE: CVE-2007-1522
Published: 2007-03-20
Description: Double free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to execute arbitrary code via illegal characters in a session identifier, which is rejected by an internal session storage module, which calls the session identifier generator with an improper environment, leading to code execution when the generator is interrupted, as demonstrated by triggering a memory limit violation or certain PHP errors.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/24505; http://secunia.com/advisories/25056; http://www.novell.com/linux/security/advisories/2007_32_php.html
CVE: CVE-2007-1523
Published: 2007-03-20
Description: Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems allows local users to have an unknown impact.  NOTE: this information is based upon a vague pre-advisory with no actionable information. Details will be updated after 20070329.
CVSS Score: 7.5 (HIGH)
References: http://kernelwars.blogspot.com/2007/01/alive.html; http://osvdb.org/34593; http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson
CVE: CVE-2007-1524
Published: 2007-03-20
Description: Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) in the settings[skin] parameter, as demonstrated by injecting PHP code into an Apache HTTP Server log file, which can then be included via themes/default/.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/24520; http://www.securityfocus.com/bid/22157; http://www.vupen.com/english/advisories/2007/0966
CVE: CVE-2007-1525
Published: 2007-03-20
Description: Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the cat parameter, which can be executed via a request to posts.php.
CVSS Score: 6.8 (MEDIUM)
References: http://infusion.110mb.com/enter/dfblog4.zip; http://osvdb.org/34073; http://secunia.com/advisories/24534
CVE: CVE-2007-1526
Published: 2007-03-20
Description: Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List (CRL) authorization control and access secure web server instances running under an account different from that used for the admin server via unspecified vectors.
CVSS Score: 6.0 (MEDIUM)
References: http://osvdb.org/34074; http://secunia.com/advisories/24531; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102822-1
CVE: CVE-2007-1527
Published: 2007-03-20
Description: The LLTD Mapper in Microsoft Windows Vista does not verify that an IP address in a TLV type 0x07 field in a HELLO packet corresponds to a valid IP address for the local network, which allows remote attackers to trick users into communicating with an external host by sending a HELLO packet with the MW characteristic and a spoofed TLV type 0x07 field, aka the "Spoof and Management URL IP Redirect" attack.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/33663; http://www.securityfocus.com/archive/1/462793/100/0/threaded; http://www.securityfocus.com/archive/1/464617/100/0/threaded
CVE: CVE-2007-1528
Published: 2007-03-20
Description: The LLTD Mapper in Microsoft Windows Vista allows remote attackers to spoof hosts, and nonexistent bridge relationships, into the network topology map by using a MAC address that differs from the MAC address provided in the Real Source field of the LLTD BASE header of a HELLO packet, aka the "Spoof on Bridge" attack.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/33662; http://www.securityfocus.com/archive/1/462793/100/0/threaded; http://www.securityfocus.com/archive/1/464617/100/0/threaded
CVE: CVE-2007-1529
Published: 2007-03-20
Description: The LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY packet if another host has sent a spoofed response first, which allows remote attackers to spoof arbitrary hosts via a network-based race condition, aka the "Total Spoof" attack.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/33661; http://www.securityfocus.com/archive/1/462793/100/0/threaded; http://www.securityfocus.com/archive/1/464617/100/0/threaded
CVE: CVE-2007-1530
Published: 2007-03-20
Description: The LLTD Mapper in Microsoft Windows Vista does not properly gather responses to EMIT packets, which allows remote attackers to cause a denial of service (mapping failure) by omitting an ACK response, which triggers an XML syntax error.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/33660; http://www.securityfocus.com/archive/1/462793/100/0/threaded; http://www.securityfocus.com/archive/1/464617/100/0/threaded
CVE: CVE-2007-1531
Published: 2007-03-20
Description: Microsoft Windows XP and Vista overwrites ARP table entries included in gratuitous ARP, which allows remote attackers to cause a denial of service (loss of network access) by sending a gratuitous ARP for the address of the Vista host.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://osvdb.org/33664; http://www.securityfocus.com/archive/1/462793/100/0/threaded; http://www.securityfocus.com/archive/1/464617/100/0/threaded
CVE: CVE-2007-1532
Published: 2007-03-20
Description: The neighbor discovery implementation in Microsoft Windows Vista allows remote attackers to conduct a redirect attack by (1) responding to queries by sending spoofed Neighbor Advertisements or (2) blindly sending Neighbor Advertisements.
CVSS Score: 6.4 (MEDIUM)
References: http://osvdb.org/33665; http://www.securityfocus.com/archive/1/462793/100/0/threaded; http://www.securityfocus.com/archive/1/464617/100/0/threaded
CVE: CVE-2007-1533
Published: 2007-03-20
Description: The Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with different UDP ports within a solicitation session, which makes it easier for remote attackers to spoof the nonce through brute force attacks.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/33666; http://www.securityfocus.com/archive/1/462793/100/0/threaded; http://www.securityfocus.com/archive/1/464617/100/0/threaded
CVE: CVE-2007-1534
Published: 2007-03-20
Description: DFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote connections on TCP port 5722 for 2 minutes after Windows Meeting Space is closed, which allows remote attackers to have an unknown impact by connecting to this port during the time window.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/33668; http://www.securityfocus.com/archive/1/462793/100/0/threaded; http://www.securityfocus.com/archive/1/464617/100/0/threaded
CVE: CVE-2007-1535
Published: 2007-03-20
Description: Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33667; http://www.securityfocus.com/archive/1/462793/100/0/threaded; http://www.securityfocus.com/archive/1/464617/100/0/threaded
CVE: CVE-2007-1536
Published: 2007-03-20
Description: Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-001.txt.asc; http://docs.info.apple.com/article.html?artnum=305530; http://lists.apple.com/archives/security-announce/2007/May/msg00004.html
CVE: CVE-2006-7172
Published: 2007-03-20
Description: Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers to execute arbitrary code via a leading dotted-quad IP address string in the (1) PC-REMOTE-ADDR HTTP header, which is inserted into $_SERVER['HTTP_PC_REMOTE_ADDR'], or (2) ip parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34280; http://secunia.com/advisories/24553; http://www.vupen.com/english/advisories/2007/1004
CVE: CVE-2006-7173
Published: 2007-03-20
Description: Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to execute arbitrary PHP code via a crafted option_new[report_w_day] parameter in a preferenze action, which can be later accessed via option/php-stats-options.php.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/24553; http://www.vupen.com/english/advisories/2007/1004; https://www.exploit-db.com/exploits/3502
CVE: CVE-2007-1537
Published: 2007-03-20
Description: \Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the device and cause a denial of service, as demonstrated by using an IRQL to acquire a spinlock on paged memory via the NdisTapiDispatch function.
CVSS Score: 3.6 (LOW)
References: http://secunia.com/advisories/24598; http://securityreason.com/securityalert/2471; http://www.osvdb.org/33628
CVE: CVE-2007-1538
Published: 2007-03-20
Description: McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in (1) HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection or (2) HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Entreprise\CurrentVersion.  NOTE: this issue has been disputed by third-party researchers, stating that the default permissions for HKEY_LOCAL_MACHINE\SOFTWARE does not allow for write access and the product does not modify the inherited permissions. There might be an interaction error with another product
CVSS Score: 7.5 (HIGH)
References: http://homepage.mac.com/adonismac/Advisory/bypass_mcafee_entreprise_password.html; http://homepage.mac.com/adonismac/Advisory/crack_mcafee_password_protection.html; http://www.osvdb.org/33800
CVE: CVE-2007-1539
Published: 2007-03-20
Description: Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the module_name parameter, as demonstrated via a static PHP code injection attack in an Apache log file.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/34306; http://secunia.com/advisories/24589; http://www.securityfocus.com/bid/23044
CVE: CVE-2007-1540
Published: 2007-03-20
Description: Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows remote attackers to run arbitrary executables and bypass authentication via a .. (dot dot) sequence and trailing NULL (%00) in the login parameter.  NOTE: this issue was reportedly addressed in SQL-Ledger 2.6.27, however third-party researchers claim that the file is still executed even though an error is generated.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/24560; http://secunia.com/advisories/24585; http://sourceforge.net/project/shownotes.php?release_id=494462&group_id=175965
CVE: CVE-2007-1541
Published: 2007-03-20
Description: Directory traversal vulnerability in am.pl in SQL-Ledger 2.6.27 only checks for the presence of a NULL (%00) character to protect against directory traversal attacks, which allows remote attackers to run arbitrary executables and bypass authentication via a .. (dot dot) sequence in the login parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24560; http://sql-ledger.com/cgi-bin/nav.pl?page=news.html&title=What%27s%20New; http://www.securityfocus.com/archive/1/463175/100/0/threaded
CVE: CVE-2007-1542
Published: 2007-03-20
Description: Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers to cause a denial of service via the Remote-Party-ID sipURI field in a SIP INVITE request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/24600; http://www.cisco.com/en/US/products/products_security_response09186a00808075ad.html; http://www.securityfocus.com/bid/23047
CVE: CVE-2007-1543
Published: 2007-03-20
Description: Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection.
CVSS Score: 10.0 (HIGH)
References: http://aluigi.altervista.org/adv/nasbugs-adv.txt; http://secunia.com/advisories/24527; http://secunia.com/advisories/24601
CVE: CVE-2007-1544
Published: 2007-03-20
Description: Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large max_samples value.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/nasbugs-adv.txt; http://secunia.com/advisories/24527; http://secunia.com/advisories/24601
CVE: CVE-2007-1545
Published: 2007-03-20
Description: The AddResource function in server/dia/resource.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (server crash) via a nonexistent client ID.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/nasbugs-adv.txt; http://secunia.com/advisories/24527; http://secunia.com/advisories/24601
CVE: CVE-2007-1546
Published: 2007-03-20
Description: Array index error in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) via (1) large num_action values in the ProcAuSetElements function in server/dia/audispatch.c or (2) a large inputNum parameter to the compileInputs function in server/dia/auutil.c.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/nasbugs-adv.txt; http://secunia.com/advisories/24527; http://secunia.com/advisories/24601