deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-4265
Published: 2007-08-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in VisionProject 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) projectIssueId parameter in EditProjectIssue.do, the (2) projectId parameter in ProjectSelected.do, the (3) folderId parameter in ProjectDocuments.do and the (4) sortField parameter in ProjectIssues.do.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36433; http://osvdb.org/36434; http://osvdb.org/36435
CVE: CVE-2007-3872
Published: 2007-08-09
Description: Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.
CVSS Score: 6.8 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01106515; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109171; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109584
CVE: CVE-2007-2955
Published: 2007-08-09
Description: Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via (1) the AnomalyList property to AxSysListView32 and (2) Anomaly property to AxSysListView32OAA.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/25215; http://secunia.com/secunia_research/2007-53/advisory/; http://www.securityfocus.com/bid/24983
CVE: CVE-2007-3843
Published: 2007-08-09
Description: The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request.
CVSS Score: 4.3 (MEDIUM)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=246595; http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc1; http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html
CVE: CVE-2007-4279
Published: 2007-08-09
Description: PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter.
CVSS Score: 7.5 (HIGH)
References: http://arfis.wordpress.com/2007/09/14/rfi-02-frontaccounting/; http://osvdb.org/36431; http://secunia.com/advisories/26350
CVE: CVE-2007-4280
Published: 2007-08-09
Description: The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIES_RES_MESSAGE packet with a capabilities count larger than the capabilities_res_message array population.
CVSS Score: 3.5 (LOW)
References: http://downloads.digium.com/pub/asa/ASA-2007-019.pdf; http://secunia.com/advisories/26340; http://www.securityfocus.com/bid/25228
CVE: CVE-2007-4281
Published: 2007-08-09
Description: Cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source 3.4 and 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the login field on the login page, and other unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36579; http://secunia.com/advisories/26333; http://sourceforge.net/forum/forum.php?forum_id=722865
CVE: CVE-2007-4282
Published: 2007-08-09
Description: The "Extended properties for entries" (entryproperties) plugin in serendipity_event_entryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies the password being checked.
CVSS Score: 5.0 (MEDIUM)
References: http://blog.drinsama.de/erich/en/security/[PII_REDACTED]-security-issue-in-serendipity.html; http://blog.s9y.org/archives/178-Serendipity-1.1.4-released%2C-security-bug-in-entryproperties-plugin.html; http://osvdb.org/36534
CVE: CVE-2007-4283
Published: 2007-08-09
Description: PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38710; http://securityreason.com/securityalert/2989; http://www.securityfocus.com/archive/1/475866/100/0/threaded
CVE: CVE-2007-4284
Published: 2007-08-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified MeetingPlace Web Conferencing (MP) 5.3.235.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) Success Template (STPL) and (2) Failure Template (FTPL) parameters, which are not properly handled in an error message.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065134.html; http://secunia.com/advisories/26376; http://securityreason.com/securityalert/2990
CVE: CVE-2007-4285
Published: 2007-08-09
Description: Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remote attackers to obtain sensitive information (partial packet contents) or cause a denial of service (router or component crash) via crafted IPv6 packets with a Type 0 routing header.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/26359; http://www.cisco.com/en/US/products/products_security_advisory09186a[PII_REDACTED].shtml; http://www.securitytracker.com/id?1018542
CVE: CVE-2007-4286
Published: 2007-08-09
Description: Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (restart) and execute arbitrary code via a crafted NHRP packet.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/26360; http://www.cisco.com/en/US/products/products_security_advisory09186a008089963b.shtml; http://www.kb.cert.org/vuls/id/201984
CVE: CVE-2007-4287
Published: 2007-08-09
Description: PHP remote file inclusion vulnerability in fc_functions/fc_example.php in FishCart 3.2 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the docroot parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.attrition.org/pipermail/vim/2007-August/001757.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/35888; https://www.exploit-db.com/exploits/4271
CVE: CVE-2007-4288
Published: 2007-08-09
Description: Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted .au file that triggers a divide-by-zero error, as demonstrated by iapetus.au.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/2987; http://www.safehack.com/exp/mp/mplayer11.txt; http://www.securityfocus.com/archive/1/475839/100/0/threaded
CVE: CVE-2007-4289
Published: 2007-08-09
Description: Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3715.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/26327; http://securitytracker.com/id?1018513; http://sunsolve.sun.com/search/document.do?assetkey=1-26-103015-1
CVE: CVE-2007-4290
Published: 2007-08-09
Description: Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in the script_root parameter to (1) delete.php, (2) edit.php, or (3) inc/common.inc.php; or (4) database.php, (5) entries.php, (6) index.php, (7) logout.php, or (8) settings.php in admin/.  NOTE: a third party disputes this vulnerability, noting that these scripts defend against direct requests
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: http://securityreason.com/securityalert/2988; http://www.securityfocus.com/archive/1/475854/100/0/threaded; http://www.securityfocus.com/archive/1/476010/100/0/threaded
CVE: CVE-2007-4291
Published: 2007-08-09
Description: Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via (1) a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by (2) CSCsi60004 with Proxy Unregistration and (3) CSCsg70474; and a malformed Real-time Transport Protocol (RTP) packet, which causes a device crash, as identified by (4) CSCse68138, related to VOIP RTP Lib, and (5) CSCse05642, related to I/O memory corruption.
CVSS Score: 7.1 (HIGH)
References: http://osvdb.org/36677; http://osvdb.org/36678; http://osvdb.org/36679
CVE: CVE-2007-4292
Published: 2007-08-09
Description: Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service (device crash) via a malformed SIP packet, aka (1) CSCsf11855, (2) CSCeb21064, (3) CSCse40276, (4) CSCse68355, (5) CSCsf30058, (6) CSCsb24007, and (7) CSCsc60249.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/36670; http://osvdb.org/36671; http://osvdb.org/36672
CVE: CVE-2007-4293
Published: 2007-08-09
Description: Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device crash) via (1) "abnormal" MGCP messages, aka CSCsd81407; and (2) a large facsimile packet, aka CSCej20505.
CVSS Score: 7.1 (HIGH)
References: http://osvdb.org/36668; http://osvdb.org/36669; http://secunia.com/advisories/26363
CVE: CVE-2007-4294
Published: 2007-08-09
Description: Unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36693; http://secunia.com/advisories/26362; http://securitytracker.com/id?1018538
CVE: CVE-2007-4295
Published: 2007-08-09
Description: Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80749.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36667; http://secunia.com/advisories/26363; http://securitytracker.com/id?1018533
CVE: CVE-2007-4274
Published: 2007-08-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-4275.  Reason: This candidate is a reservation duplicate of CVE-2007-4275.  Notes: All CVE users should reference CVE-2007-4275 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-4296
Published: 2007-08-10
Description: Unspecified vulnerability in assp.pl in Anti-Spam SMTP Proxy Server (ASSP) 1.3.3 has unknown impact and attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/39524; http://secunia.com/advisories/26316; http://sourceforge.net/forum/forum.php?forum_id=722845
CVE: CVE-2007-4297
Published: 2007-08-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in yorumkaydet.asp in Dersimiz Haber Ekleme Modulu allow remote attackers to inject arbitrary web script or HTML via the (1) yazan, (2) mail, and (3) yorum parameters.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/37537; http://secunia.com/advisories/26380; http://www.packetstormsecurity.org/0708-exploits/dersimiz-xss.txt
CVE: CVE-2007-2956
Published: 2007-08-13
Description: Stack-based buffer overflow in the readRadianceHeader function in (1) src/fileformat/rgbeio.cpp in pfstools 1.6.2 and (2) src/Fileformat/rgbeio.cpp in Qtpfsgui 1.8.11 allows remote attackers to execute arbitrary code via a crafted Radiance RGBE (.hdr) file.
CVSS Score: 6.8 (MEDIUM)
References: http://pfstools.cvs.sourceforge.net/pfstools/pfstools/src/fileformat/rgbeio.cpp?r1=1.8&r2=1.9; http://pfstools.cvs.sourceforge.net/pfstools/pfstools/src/fileformat/rgbeio.cpp?revision=1.9&view=markup; http://secunia.com/advisories/26387
CVE: CVE-2007-3851
Published: 2007-08-13
Description: The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager (DRM) to write to arbitrary memory locations and gain privileges via a crafted batchbuffer.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-399
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2; http://secunia.com/advisories/26389; http://secunia.com/advisories/26450
CVE: CVE-2007-4301
Published: 2007-08-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in the management interface in WebCart 2.20 through 2.25 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/36441; http://secunia.com/advisories/26382
CVE: CVE-2007-4302
Published: 2007-08-13
Description: Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit (GSWTK) allow local users to defeat system call interposition and possibly gain privileges or bypass auditing.
CVSS Score: 6.2 (MEDIUM)
References: http://secunia.com/advisories/26469; http://www.securityfocus.com/bid/25251; http://www.watson.org/~robert/2007woot/
CVE: CVE-2007-4303
Published: 2007-08-13
Description: Multiple race conditions in (1) certain rules and (2) argument copying during VM protection, in CerbNG for FreeBSD 4.8 allow local users to defeat system call interposition and possibly gain privileges or bypass auditing, as demonstrated by modifying command lines in log-exec.cb.
CVSS Score: 6.2 (MEDIUM)
References: http://secunia.com/advisories/26474; http://www.securityfocus.com/bid/25259; http://www.watson.org/~robert/2007woot/
CVE: CVE-2007-4304
Published: 2007-08-13
Description: CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages".
CVSS Score: 6.2 (MEDIUM)
References: http://www.watson.org/~robert/2007woot/; http://www.watson.org/~robert/2007woot/
CVE: CVE-2007-4305
Published: 2007-08-13
Description: Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.
CVSS Score: 6.2 (MEDIUM)
References: http://secunia.com/advisories/26479; http://www.securityfocus.com/bid/25258; http://www.watson.org/~robert/2007woot/
CVE: CVE-2007-4306
Published: 2007-08-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers to inject arbitrary web script or HTML via the (1) unlim_num_rows, (2) sql_query, or (3) pos parameter to (a) tbl_export.php; the (4) session_max_rows or (5) pos parameter to (b) sql.php; the (6) username parameter to (c) server_privileges.php; or the (7) sql_query parameter to (d) main.php.  NOTE: vector 5 might be a regression or incomplete fix for CVE-2006-6942.7.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels-team.blogspot.com/2007/08/phpmyadmin-multiple-xss-vuln.html; http://www.mandriva.com/security/advisories?name=MDKSA-2007:199; http://www.securityfocus.com/bid/25268
CVE: CVE-2007-4307
Published: 2007-08-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Storesprite 7 and earlier allow remote attackers to inject arbitrary web script or HTML via the next parameter to (1) addaddress.php, (2) editshipdetails.php, (3) register.php, or (4) login.php in secure/.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36458; http://osvdb.org/36459; http://osvdb.org/36460
CVE: CVE-2007-4308
Published: 2007-08-13
Description: The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.
CVSS Score: 1.9 (LOW)
References: http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2; http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html
CVE: CVE-2007-4309
Published: 2007-08-13
Description: IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remote authenticated administrators to obtain a cleartext notes.id password by setting the notes.ini (1) KFM_ShowEntropy and (2) Debug_Outfile debug variables, a different vulnerability than CVE-2005-2696.
CVSS Score: 3.5 (LOW)
References: http://securitytracker.com/id?1018433; http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21266085; http://www.heise-security.co.uk/news/92958
CVE: CVE-2007-4310
Published: 2007-08-13
Description: The finger daemon (in.fingerd) in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a single digit, as demonstrated by a "finger 9@host" command, a different vulnerability than CVE-2001-1503.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/2996; http://www.securityfocus.com/archive/1/474858/100/100/threaded; http://www.securityfocus.com/archive/1/474927/100/100/threaded
CVE: CVE-2007-4311
Published: 2007-08-13
Description: The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-310
References: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git%3Ba=commit%3Bh=bd67d4c7b11cc33ebdc346bc8926d255b354cd64; http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git%3Ba=commit%3Bh=faa3369ac2ea7feb0dd266b6a5e8d6ab153cf925; http://secunia.com/advisories/29058
CVE: CVE-2007-4312
Published: 2007-08-13
Description: SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL commands via the article_id parameter in a "print articles" action.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38717; http://www.securityfocus.com/bid/25264; https://exchange.xforce.ibmcloud.com/vulnerabilities/35943
CVE: CVE-2007-4313
Published: 2007-08-13
Description: PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, a different vector than CVE-2006-2392, CVE-2006-3076, and CVE-2006-6958.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36442; http://secunia.com/advisories/26414; http://www.securityfocus.com/archive/1/476432/100/0/threaded
CVE: CVE-2007-4314
Published: 2007-08-13
Description: pixlie.php in Pixlie 1.7 allows remote attackers to trigger the reading and JPEG image processing of files in a remote directory tree via a URL in the root parameter.  NOTE: this can be leveraged for traffic amplification or other denial of service.
CVSS Score: 6.8 (MEDIUM)
References: https://www.exploit-db.com/exploits/4278; https://www.exploit-db.com/exploits/4278
CVE: CVE-2007-4315
Published: 2007-08-13
Description: The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecified vectors, as demonstrated by "Purple Pill".
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://blogs.zdnet.com/security/?p=427; http://blogs.zdnet.com/security/?p=438; http://secunia.com/advisories/26448
CVE: CVE-2007-4316
Published: 2007-08-13
Description: The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device has a certain default password, which allows remote attackers to perform administrative actions.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/37669; http://secunia.com/advisories/26381; http://securityreason.com/securityalert/3002
CVE: CVE-2007-4317
Published: 2007-08-13
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allow remote attackers to perform certain actions as administrators, as demonstrated by a request to Forms/General_1 with the (1) sysSystemName and (2) sysDomainName parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/37670; http://secunia.com/advisories/26381; http://securityreason.com/securityalert/3002
CVE: CVE-2007-4318
Published: 2007-08-13
Description: Cross-site scripting (XSS) vulnerability in Forms/General_1 in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to inject arbitrary web script or HTML via the sysSystemName parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/38721; http://secunia.com/advisories/26381; http://securityreason.com/securityalert/3002
CVE: CVE-2007-4319
Published: 2007-08-13
Description: The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a denial of service (infinite reboot loop) via invalid configuration data.  NOTE: this issue might not cross privilege boundaries, and it might be resultant from CSRF; if so, then it should not be included in CVE.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/42448; http://securityreason.com/securityalert/3002; http://www.louhi.fi/advisory/zyxel_070810.txt
CVE: CVE-2007-4320
Published: 2007-08-14
Description: PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the adminfolder parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36426; http://secunia.com/advisories/26383; http://www.securityfocus.com/bid/25248
CVE: CVE-2007-4321
Published: 2007-08-14
Description: fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol version identification containing an IP address string, a different vector than CVE-2006-6302.
CVSS Score: 6.8 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=181214; http://osvdb.org/42484; http://secunia.com/advisories/23237
CVE: CVE-2007-4322
Published: 2007-08-14
Description: BlockHosts before 2.0.4 does not properly parse (1) sshd and (2) vsftpd log files, which allows remote attackers to add arbitrary deny entries to the /etc/hosts.allow file and cause a denial of service by adding arbitrary IP addresses to a daemon log file, as demonstrated by connecting through ssh with a client protocol version identification containing an IP address string, or connecting through ftp with a username containing an IP address string, different vectors than CVE-2007-2765.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36515; http://www.aczoom.com/tools/blockhosts/CHANGES; http://www.ossec.net/en/attacking-loganalysis.html