deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-7153
Published: 2007-03-07
Description: PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pathToFiles parameter.
CVSS Score: 10.0 (HIGH)
References: http://securityreason.com/securityalert/2371; http://www.securityfocus.com/archive/1/451402/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/30253
CVE: CVE-2006-7154
Published: 2007-03-07
Description: Iono allows remote attackers to obtain the full server path via certain requests to (1) templates/iono/admin/denied.tpl.php, (2) templates/iono/admin/index.tpl.php, and (a) other unspecified files in templates/.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/2386; http://www.osvdb.org/32410; http://www.osvdb.org/32411
CVE: CVE-2006-7155
Published: 2007-03-07
Description: Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue might be related to CVE-2006-5286.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22699; http://securitytracker.com/id?1017213; http://www.attrition.org/pipermail/vim/2007-March/001410.html
CVE: CVE-2006-7156
Published: 2007-03-07
Description: PHP remote file inclusion vulnerability in addon_keywords.php in Keyword Replacer (keyword_replacer) 1.0 and earlier, a module for miniBB, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22401; http://www.attrition.org/pipermail/vim/2007-March/001411.html; http://www.osvdb.org/29709
CVE: CVE-2006-7157
Published: 2007-03-07
Description: Buffer overflow in Google Earth v4.0.2091 (beta) allows remote user-assisted attackers to cause a denial of service (crash) via a KML or KMZ file with a long href element.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]9718&w=2; http://securitydot.net/xpl/exploits/vulnerabilities/articles/1660/exploit.html; http://securityreason.com/securityalert/2375
CVE: CVE-2006-7158
Published: 2007-03-07
Description: Cross-site scripting (XSS) vulnerability in Oracle Application Express (APEX) before 2.2.1, aka Oracle HTML DB, allows remote attackers to inject arbitrary web script or HTML via the NOTIFICATION_MSG parameter.  NOTE: it is likely that this issue overlaps one of the identifiers in CVE-2006-5351.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/22396; http://securityreason.com/securityalert/2382; http://www.red-database-security.com/advisory/oracle_apex_css_notification_msg.html
CVE: CVE-2006-7159
Published: 2007-03-07
Description: Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/22322; http://securityreason.com/securityalert/2377; http://www.securityfocus.com/archive/1/447928/100/0/threaded
CVE: CVE-2006-7160
Published: 2007-03-07
Description: The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) via invalid arguments to the (1) NtAssignProcessToJobObject,, (2) NtCreateKey, (3) NtCreateThread, (4) NtDeleteFile, (5) NtLoadDriver, (6) NtOpenProcess, (7) NtProtectVirtualMemory, (8) NtReplaceKey, (9) NtTerminateProcess, (10) NtTerminateThread, (11) NtUnloadDriver, and (12) NtWriteVirtualMemory functions.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/22913; http://securityreason.com/securityalert/2376; http://www.matousec.com/info/advisories/Outpost-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php
CVE: CVE-2006-7161
Published: 2007-03-07
Description: SQL injection vulnerability in giris_yap.asp in Hazir Site 2.0 allows remote attackers to bypass authentication via the (1) k_a class or (2) sifre parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2374; http://www.securityfocus.com/archive/1/447829/100/0/threaded; http://www.securityfocus.com/bid/20375
CVE: CVE-2006-7162
Published: 2007-03-07
Description: PuTTY 0.59 and earlier uses weak file permissions for (1) ppk files containing private keys generated by puttygen and (2) session logs created by putty, which allows local users to gain sensitive information by reading these files.
CVSS Score: 1.9 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=400804; http://secunia.com/advisories/24381; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=400804
CVE: CVE-2007-1324
Published: 2007-03-07
Description: SnapGear 560, 585, 580, 640, 710, and 720 appliances before the 3.1.4u5 firmware allow remote attackers to cause a denial of service (complete packet loss) via a packet flood, a different vulnerability than CVE-2006-4613.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/33864; http://secunia.com/advisories/24388; http://www.cyberguard.info/snapgear/releases.html
CVE: CVE-2007-1325
Published: 2007-03-07
Description: The PMA_ArrayWalkRecursive function in libraries/common.lib.php in phpMyAdmin before 2.10.0.2 does not limit recursion on arrays provided by users, which allows context-dependent attackers to cause a denial of service (web server crash) via an array with many dimensions.  NOTE: it could be argued that this vulnerability is caused by a problem in PHP (CVE-2006-1549) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in phpMyAdmin.
CVSS Score: 7.1 (HIGH)
References: http://osvdb.org/36834; http://secunia.com/advisories/26733; http://sourceforge.net/tracker/index.php?func=detail&aid=1671813&group_id=23067&atid=377408
CVE: CVE-2007-1326
Published: 2007-03-07
Description: SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipity[multiCat][] parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34935; http://securityreason.com/securityalert/2383; http://www.securityfocus.com/archive/1/461671/100/0/threaded
CVE: CVE-2007-1327
Published: 2007-03-07
Description: The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a request without a cipher algorithm and an invalid HMAC algorithm.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8036&w=2; http://osvdb.org/33887; http://secunia.com/advisories/24426
CVE: CVE-2007-1328
Published: 2007-03-07
Description: Cross-site scripting (XSS) vulnerability in formulaire.php in Bernard JOLY BJ Webring allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter related to the add link menu.
CVSS Score: 4.3 (MEDIUM)
References: http://forums.avenir-geopolitique.net/viewtopic.php?t=2707; http://securityreason.com/securityalert/2384; http://www.securityfocus.com/archive/1/461802/100/0/threaded
CVE: CVE-2007-1329
Published: 2007-03-07
Description: Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execute arbitrary code, via . (dot) characters adjacent to (1) users and (2) users/members strings, which are removed by blacklisting functions that filter these strings and collapse into .. (dot dot) sequences.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/33619; http://osvdb.org/33621; http://secunia.com/advisories/24363
CVE: CVE-2007-1330
Published: 2007-03-07
Description: Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key by guessing the name of a named pipe under \Device\NamedPipe\OLE and attempting to open it multiple times.
CVSS Score: 4.4 (MEDIUM)
References: http://osvdb.org/34957; http://securityreason.com/securityalert/2388; http://www.matousec.com/info/advisories/Comodo-Bypassing-settings-protection-using-magic-pipe.php
CVE: CVE-2007-1331
Published: 2007-03-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to inject arbitrary web script or HTML via unspecified vectors that bypass the client-side protection scheme, one of which may be the q parameter to the search program.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/24331; http://securityreason.com/securityalert/2385; http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2893
CVE: CVE-2007-1332
Published: 2007-03-07
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to perform unspecified restricted actions in the context of certain accounts by bypassing the client-side protection scheme.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/24331; http://securityreason.com/securityalert/2385; http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2893
CVE: CVE-2007-1338
Published: 2007-03-08
Description: The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting, which might allow remote attackers to bypass intended access restrictions by establishing IPv6 sessions that would have been rejected over IPv4.
CVSS Score: 7.5 (HIGH)
References: http://arstechnica.com/journals/apple.ars/2007/2/14/7063; http://docs.info.apple.com/article.html?artnum=305366; http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.html
CVE: CVE-2007-1339
Published: 2007-03-08
Description: SQL injection vulnerability in index.php in Links Management Application 1.0 allows remote attackers to execute arbitrary SQL commands via the lcnt parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33862; http://secunia.com/advisories/24355; http://www.securityfocus.com/bid/22825
CVE: CVE-2007-1340
Published: 2007-03-08
Description: PHP remote file inclusion vulnerability in eintrag.php in Weltennetz News-Letterman 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the sqllog parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35355; http://www.securityfocus.com/bid/22807; https://exchange.xforce.ibmcloud.com/vulnerabilities/32787
CVE: CVE-2007-1341
Published: 2007-03-08
Description: include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://code.google.com/p/simpleinvoices/issues/detail?id=35; http://forum.tufat.com/showthread.php?p=116753#post116753; http://osvdb.org/33860
CVE: CVE-2007-1342
Published: 2007-03-08
Description: Cross-site scripting (XSS) vulnerability in admincp/index.php in Jelsoft vBulletin 3.6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the add rss url form.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/2396; http://www.securityfocus.com/archive/1/461727/100/0/threaded; http://www.securityfocus.com/bid/22790
CVE: CVE-2007-1343
Published: 2007-03-08
Description: includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modification, which allows remote attackers to set arbitrary global variables via a URL with modified values in the noSet parameter, which leads to resultant vulnerabilities that probably include remote file inclusion and other issues.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24403; http://secunia.com/advisories/24519; http://sourceforge.net/mailarchive/forum.php?thread_id=31840112&forum_id=46247
CVE: CVE-2007-1344
Published: 2007-03-08
Description: Multiple buffer overflows in src/ezstream.c in Ezstream before 0.3.0 allow remote attackers to execute arbitrary code via a crafted XML configuration file processed by the (1) urlParse function, which causes a stack-based overflow and the (2) ReplaceString function, which causes a heap-based overflow.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/33869; http://secunia.com/advisories/24383; http://www.icecast.org/ezstream.php#ez_relnotes
CVE: CVE-2007-1346
Published: 2007-03-08
Description: Unspecified vulnerability in ipmitool for Sun Fire X2100M2 and X2200M2 allows local users to gain privileges and reset or turn off the server.
CVSS Score: 6.6 (MEDIUM)
References: http://osvdb.org/33889; http://secunia.com/advisories/24447; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102828-1
CVE: CVE-2007-1347
Published: 2007-03-08
Description: Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption and crash) via an Office file with crafted document summary information, which causes an error in Ole32.dll.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: http://lostmon.blogspot.com/2007/08/windows-extended-file-attributes-buffer.html; http://osvdb.org/36141; http://www.kb.cert.org/vuls/id/194944
CVE: CVE-2007-1350
Published: 2007-03-08
Description: Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code via a long username during HTTP Basic authentication.
CVSS Score: 6.8 (MEDIUM)
References: http://download.novell.com/Download?buildid=sMYRODW09pw; http://secunia.com/advisories/24445; http://securityreason.com/securityalert/2395
CVE: CVE-2007-1359
Published: 2007-03-08
Description: Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ (0x00) byte, which mod_security treats as a terminator even though it is still processed as normal data by some HTTP parsers including PHP 5.2.0, and possibly parsers in Perl, and Python.
CVSS Score: 6.8 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/24373; http://secunia.com/advisories/25316
CVE: CVE-2007-1360
Published: 2007-03-08
Description: Unspecified vulnerability in the Nodefamily module for Drupal 5.x before 5.x-1.0 allows remote authenticated users to access and modify other users' profiles via unspecified URL parameters.
CVSS Score: 6.0 (MEDIUM)
References: http://drupal.org/node/125324; http://osvdb.org/33911; http://secunia.com/advisories/24372
CVE: CVE-2007-1361
Published: 2007-03-08
Description: Cross-site scripting (XSS) vulnerability in virtuemart_parser.php in VirtueMart before 20070213 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: this issue is probably different than CVE-2007-0376.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/33829; http://secunia.com/advisories/24399; http://sourceforge.net/project/shownotes.php?release_id=490831
CVE: CVE-2007-1367
Published: 2007-03-09
Description: Cross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM) S87XX, S8500, and S8300 products before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Login field.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/24397; http://support.avaya.com/elmodocs2/security/ASA-2007-064.htm; http://www.osvdb.org/33297
CVE: CVE-2007-1368
Published: 2007-03-09
Description: The Project issue tracking module before 4.7.x-1.3, 4.7.x-2.* before 4.7.x-2.3, and 5 before 5.x-0.2-beta for Drupal allows remote authenticated users, with "access project issues" permission, to read the contents of a private node via a URL with a modified node identifier.
CVSS Score: 3.5 (LOW)
References: http://drupal.org/node/125832; http://drupal.org/node/125833; http://osvdb.org/33913
CVE: CVE-2007-1369
Published: 2007-03-09
Description: ini_modifier (sgid-zendtech) in Zend Platform 2.2.3 and earlier allows local users to modify the system php.ini file by editing a copy of php.ini file using the -f parameter, and then performing a symlink attack using the directory that contains the attacker-controlled php.ini file, and linking this directory to /usr/local/Zend/etc.
CVSS Score: 4.4 (MEDIUM)
References: http://osvdb.org/33930; http://secunia.com/advisories/24501; http://www.osvdb.org/32773
CVE: CVE-2007-1370
Published: 2007-03-09
Description: Zend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which allows local users to gain root privileges by modifying the files.  NOTE: this only occurs when safe_mode and open_basedir are disabled; other settings require leverage for other vulnerabilities.
CVSS Score: 6.2 (MEDIUM)
References: http://secunia.com/advisories/24501; http://www.osvdb.org/32772; http://www.php-security.org/MOPB/BONUS-06-2007.html
CVE: CVE-2006-7163
Published: 2007-03-10
Description: DreameeSoft Password Master 1.0 stores the database in an unencrypted format when the master password is set, which allows attackers with physical access to read the database contents via an unspecified authentication bypass.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://www.securityfocus.com/bid/19983; http://www.securityfocus.com/bid/19983
CVE: CVE-2007-0005
Published: 2007-03-10
Description: Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-119
References: http://fedoranews.org/cms/node/2787; http://fedoranews.org/cms/node/2788; http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc3
CVE: CVE-2007-1371
Published: 2007-03-10
Description: Multiple buffer overflows in Conquest 8.2a and earlier (1) allow local users to gain privileges by querying a metaserver that sends a long server entry processed by metaGetServerList and allow remote metaservers to execute arbitrary code via a long server entry processed by metaGetServerList; (2) allow attackers to have an unknown impact by exceeding the configured number of metaservers; and allow remote attackers to corrupt memory via a SP_CLIENTSTAT packet with certain values of (3) unum or (4) snum, different vulnerabilities than CVE-2003-0933.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/24370; http://securityreason.com/securityalert/2399; http://www.radscan.com/conquest/cq-ml/msg00169.html
CVE: CVE-2007-1372
Published: 2007-03-10
Description: PHP remote file inclusion vulnerability in styles/internal/header.php in the PostGuestbook 0.6.1 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the tpl_pgb_moddir parameter.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/36320; http://www.securityfocus.com/bid/22858; http://www.vupen.com/english/advisories/2007/0880
CVE: CVE-2007-1373
Published: 2007-03-10
Description: Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers to execute arbitrary code via a long LOGIN command.  NOTE: this might be the same issue as CVE-2006-5961.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052802.html; http://osvdb.org/33883; http://secunia.com/advisories/24367
CVE: CVE-2007-1374
Published: 2007-03-10
Description: Cross-site scripting (XSS) vulnerability in pop_profile.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the MSN parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/33885; http://secunia.com/advisories/24358; http://www.securityfocus.com/bid/22869
CVE: CVE-2007-1375
Published: 2007-03-10
Description: Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sensitive memory via a large value in the length argument, a different vulnerability than CVE-2006-1991.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/24606; http://secunia.com/advisories/25056; http://secunia.com/advisories/25057
CVE: CVE-2007-1376
Published: 2007-03-10
Description: The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24606; http://secunia.com/advisories/25056; http://secunia.com/advisories/25057
CVE: CVE-2007-1377
Published: 2007-03-10
Description: AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-400
References: http://www.securityfocus.com/bid/22856; http://www.securityfocus.com/data/vulnerabilities/exploits/22856.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/32896
CVE: CVE-2007-1378
Published: 2007-03-10
Description: The ovrimos_longreadlen function in the Ovrimos extension for PHP before 4.4.5 allows context-dependent attackers to write to arbitrary memory locations via the result_id and length arguments.
CVSS Score: 5.1 (MEDIUM)
References: http://www.osvdb.org/32779; http://www.php-security.org/MOPB/MOPB-13-2007.html; http://www.securityfocus.com/bid/22833
CVE: CVE-2007-1379
Published: 2007-03-10
Description: The ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an arbitrary address, which might allow context-dependent attackers to execute arbitrary code.
CVSS Score: 5.1 (MEDIUM)
References: http://www.osvdb.org/34691; http://www.php-security.org/MOPB/MOPB-13-2007.html; http://www.securityfocus.com/bid/22833
CVE: CVE-2007-1380
Published: 2007-03-10
Description: The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read.
CVSS Score: 5.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137; http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html
CVE: CVE-2007-1381
Published: 2007-03-10
Description: The wddx_deserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 and fixed on 20070304, calls strlcpy where strlcat was intended and uses improper arguments, which allows context-dependent attackers to execute arbitrary code via a WDDX packet with a malformed overlap of a STRING element, which triggers a buffer overflow.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://cvs.php.net/viewvc.cgi/php-src/ext/wddx/wddx.c?r1=1.119.2.10.2.13&r2=1.119.2.10.2.14; http://cvs.php.net/viewvc.cgi/php-src/ext/wddx/wddx.c?revision=1.119.2.10.2.14&view=markup; http://www.osvdb.org/32775