deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-6577
Published: 2007-12-28
Description: Multiple SQL injection vulnerabilities in index.php in zBlog 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the categ parameter in a categ action or (2) the article parameter in an articles action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/39774; http://osvdb.org/39775; http://www.securityfocus.com/bid/26994
CVE: CVE-2007-6578
Published: 2007-12-28
Description: SQL injection vulnerability in go.php in PHP ZLink 0.3 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/39762; http://www.securityfocus.com/bid/26997; https://exchange.xforce.ibmcloud.com/vulnerabilities/39231
CVE: CVE-2007-6579
Published: 2007-12-28
Description: Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vlan_id parameter to (1) vlanview.php, (2) vlanedit.php, and (3) vlandel.php; the (4) assetclassgroup_id parameter to assetclassgroupview.php; the (5) subnet_id parameter to nodelist.php; and unspecified other vectors. NOTE: it was later reported that the vlanview.php and vlandel.php vectors are also in 0.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/39776; http://osvdb.org/39777; http://osvdb.org/39778
CVE: CVE-2007-6580
Published: 2007-12-28
Description: Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands via (1) the catid parameter to category.php or (2) the groupid parameter to editadgroup.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/40368; http://osvdb.org/40369; http://www.securityfocus.com/bid/26984
CVE: CVE-2007-6581
Published: 2007-12-28
Description: Multiple directory traversal vulnerabilities in Social Engine 2.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the global_lang parameter to (1) header_album.php, (2) header_blog.php, or (3) header_group.php; or (4) admin_header_album.php, (5) admin_header_blog.php, or (6) admin_header_group.php in admin/.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/40370; http://osvdb.org/40371; http://osvdb.org/40372
CVE: CVE-2007-6582
Published: 2007-12-28
Description: Directory traversal vulnerability in index.php in mBlog 1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter in a page mode action.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/39620; http://secunia.com/advisories/28242; http://www.securityfocus.com/bid/26989
CVE: CVE-2007-6583
Published: 2007-12-28
Description: SQL injection vulnerability in admin/ops/findip/ajax/search.php in 1024 CMS 1.3.1 allows remote attackers to execute arbitrary SQL commands via the ip parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/39763; https://www.exploit-db.com/exploits/4765; http://osvdb.org/39763
CVE: CVE-2007-6584
Published: 2007-12-28
Description: Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the lang parameter to pages/print/default/ops/news.php or (2) the theme_dir parameter to pages/download/default/ops/search.php; or the admin_theme_dir parameter to (3) download.php, (4) forum.php, or (5) news.php in admin/ops/reports/ops/.  NOTE: it was later reported that 1.4.2 beta and earlier are also affected for vector 1.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/41280; http://osvdb.org/41281; http://osvdb.org/41282
CVE: CVE-2007-6585
Published: 2007-12-28
Description: PHP remote file inclusion vulnerability in confirmUnsubscription.php in NmnNewsletter 1.0.7 allows remote attackers to execute arbitrary PHP code via a URL in the output parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/28245; http://www.osvdb.org/39641; http://www.securityfocus.com/bid/26985
CVE: CVE-2007-6586
Published: 2007-12-28
Description: SQL injection vulnerability in sezione_news.php in nicLOR-CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a sezione page action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/39789; http://secunia.com/advisories/28222; http://www.securityfocus.com/bid/26983
CVE: CVE-2007-6587
Published: 2007-12-28
Description: SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://attrition.org/pipermail/vim/2012-May/002556.html; http://dev.plogger.org/changeset/489; http://packetstormsecurity.com/files/112947/Plogger-Photo-Gallery-SQL-Injection.html
CVE: CVE-2007-6588
Published: 2007-12-28
Description: Cross-site scripting (XSS) vulnerability in PHCDownload 1.10 allows remote attackers to inject arbitrary web script or HTML via the username field in an unspecified component.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/40376; http://www.securityfocus.com/bid/26991; https://exchange.xforce.ibmcloud.com/vulnerabilities/39240
CVE: CVE-2007-6589
Published: 2007-12-28
Description: The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 does not update the origin domain when retrieving the inner URL parameter yields an HTTP redirect, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI, a different vulnerability than CVE-2007-5947.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://blog.beford.org/?p=8; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742; http://osvdb.org/43477
CVE: CVE-2007-6590
Published: 2007-12-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-2809.  Reason: This candidate is a duplicate of CVE-2008-2809.  Notes: All CVE users should reference CVE-2008-2809 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-6591
Published: 2007-12-28
Description: KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, even though these fields cannot be examined in the product, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.
CVSS Score: 4.3 (MEDIUM)
References: http://nils.toedtmann.net/pub/subjectAltName.txt; http://securityreason.com/securityalert/3498; http://www.securityfocus.com/archive/1/483929/100/100/threaded
CVE: CVE-2007-6592
Published: 2007-12-28
Description: Apple Safari 2, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.
CVSS Score: 4.3 (MEDIUM)
References: http://nils.toedtmann.net/pub/subjectAltName.txt; http://securityreason.com/securityalert/3498; http://www.securityfocus.com/archive/1/483929/100/100/threaded
CVE: CVE-2007-6593
Published: 2007-12-28
Description: Multiple stack-based buffer overflows in l123sr.dll in Autonomy (formerly Verity) KeyView SDK, as used by IBM Lotus Notes 5.x through 8.x, allow user-assisted remote attackers to execute arbitrary code via the (1) Length and (2) Value fields for certain Types in a Lotus 1-2-3 (.123) file in the Worksheet File (WKS) format, as demonstrated by a file with a crafted SRANGE record, a different vulnerability than CVE-2007-5909.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/058680.html; http://secunia.com/advisories/27835; http://secunia.com/advisories/27836
CVE: CVE-2007-6594
Published: 2007-12-28
Description: IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the installation kit obtained through a Notes 8 download and (2) 0777 permissions for the installdata file that is created by setup.sh, which allows local users to gain privileges via a Trojan horse file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/40933; http://osvdb.org/40934; http://secunia.com/advisories/27860
CVE: CVE-2007-6337
Published: 2007-12-31
Description: Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV before 0.92 has unknown impact and remote attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=307562; http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
CVE: CVE-2007-6595
Published: 2007-12-31
Description: ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool, when utf16-decode is enabled.
CVSS Score: 2.1 (LOW)
CWE: CWE-59
References: http://kolab.org/security/kolab-vendor-notice-19.txt; http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html; http://secunia.com/advisories/28949
CVE: CVE-2007-6596
Published: 2007-12-31
Description: ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html; http://secunia.com/advisories/29891; http://securityreason.com/securityalert/3501
CVE: CVE-2007-6597
Published: 2007-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the (1) KW and (2) SF parameters to forum/login_user.asp, and (3) the Date parameter to blogs.asp.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/39860; http://osvdb.org/39861; http://secunia.com/advisories/28252
CVE: CVE-2007-6602
Published: 2007-12-31
Description: SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username field to the login script.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://noserub.googlecode.com/svn/trunk/app/models/identity.php; http://osvdb.org/39832; http://seclog.de/pub/seclog-2007-001.txt
CVE: CVE-2007-6603
Published: 2007-12-31
Description: Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via a direct request to control/downloadfile.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/40572; http://secunia.com/advisories/28261; https://exchange.xforce.ibmcloud.com/vulnerabilities/39344
CVE: CVE-2007-6604
Published: 2007-12-31
Description: Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the s parameter to the admin page or (2) the pg parameter to an arbitrary module, as demonstrated by reading a password hash in a .dtb file under dati/membri/ or by executing embedded PHP code in images under uploads/avatar/.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/40276; http://secunia.com/advisories/28256; http://www.securityfocus.com/bid/27060
CVE: CVE-2007-6605
Published: 2007-12-31
Description: Buffer overflow in a certain ActiveX control in SkyFexClient.ocx 1.0.2.77 in SkyFex Client 1.0 allows remote attackers to execute arbitrary code via long strings in the first four arguments to the Start method.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/39868; http://www.securityfocus.com/bid/27059; https://exchange.xforce.ibmcloud.com/vulnerabilities/39288
CVE: CVE-2007-6606
Published: 2007-12-31
Description: OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/40377; http://securityreason.com/securityalert/3502; http://sourceforge.net/project/shownotes.php?release_id=451780&group_id=50071
CVE: CVE-2007-6607
Published: 2007-12-31
Description: OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) shared/footer.php, (2) circ/mbr_fields.php, or (3) admin/custom_marc_form_fields.php, which reveals the path in various error messages.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/41286; http://osvdb.org/41287; http://osvdb.org/41288
CVE: CVE-2007-6608
Published: 2007-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to admin/staff_del_confirm.php, (3) the name parameter to admin/theme_del_confirm.php, or (4) the themeName parameter to admin/theme_preview.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/39869; http://osvdb.org/39870; http://osvdb.org/39871
CVE: CVE-2007-6609
Published: 2007-12-31
Description: Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long (1) cTag or (2) cValue field in an OGG Vorbis file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/culplayer-adv.txt; http://osvdb.org/42671; http://secunia.com/advisories/28226
CVE: CVE-2007-6610
Published: 2008-01-03
Description: unp 1.0.12, and other versions before 1.0.14, does not properly escape file names, which might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument. NOTE: this might only be a vulnerability when unp is invoked by a third party product.
CVSS Score: 10.0 (HIGH)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448437; http://bugs.gentoo.org/show_bug.cgi?id=203106; http://osvdb.org/42759
CVE: CVE-2007-6611
Published: 2008-01-03
Description: Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML via a filename, related to bug_report.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/39873; http://secunia.com/advisories/28185; http://secunia.com/advisories/28352
CVE: CVE-2007-6612
Published: 2008-01-03
Description: Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (".%252e").
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://lists.apple.com/archives/security-announce/2008//May/msg00001.html; http://mongrel.rubyforge.org/news.html; http://osvdb.org/39866
CVE: CVE-2007-6613
Published: 2008-01-03
Description: Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows context-dependent attackers to cause a denial of service (core dump) and possibly execute arbitrary code via a disk or image that contains a long joilet file name.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=203777; http://lists.gnu.org/archive/html/libcdio-devel/2007-12/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
CVE: CVE-2008-0061
Published: 2008-01-03
Description: MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an authoritative name (CNAME) record from resolving, aka "improper rotation of resource records."
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=204351; http://maradns.blogspot.com/2007/08/maradns-update-all-versions.html; http://secunia.com/advisories/28329
CVE: CVE-2007-6614
Published: 2008-01-03
Description: PHP remote file inclusion vulnerability in admin/frontpage_right.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter, a related issue to CVE-2007-6542.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://forums.agaresmedia.com/viewtopic.php?f=13&t=407; http://osvdb.org/39617; http://secunia.com/advisories/28230
CVE: CVE-2007-6615
Published: 2008-01-03
Description: Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the selected_provider parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://forums.agaresmedia.com/viewtopic.php?f=13&t=407; http://osvdb.org/39618; http://secunia.com/advisories/28230
CVE: CVE-2007-6616
Published: 2008-01-03
Description: Cross-site scripting (XSS) vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchkey parameter in a search action.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/28235; http://securityreason.com/securityalert/3509; http://www.securityfocus.com/archive/1/485489/100/0/threaded
CVE: CVE-2007-6617
Published: 2008-01-03
Description: Cross-site scripting (XSS) vulnerability in 500page.jsp in JIRA Enterprise Edition before 3.12.1 allows remote attackers to inject arbitrary web script or HTML, which is not properly handled when generating error messages, as demonstrated by input originally sent in the URI to secure/CreateIssue.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24; http://jira.atlassian.com/browse/CONF-9560; http://osvdb.org/42768
CVE: CVE-2007-6618
Published: 2008-01-03
Description: JIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared filter via a modified filter ID.
CVSS Score: 5.0 (MEDIUM)
References: http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24; http://osvdb.org/42769; http://secunia.com/advisories/27954
CVE: CVE-2007-6619
Published: 2008-01-03
Description: The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete, which allows remote attackers to change the default language.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24; http://osvdb.org/42770; http://secunia.com/advisories/27954
CVE: CVE-2007-6620
Published: 2008-01-04
Description: Directory traversal vulnerability in include/images.inc.php in Joovili 2.x allows remote attackers to read arbitrary files via a .. (dot dot) in the picture parameter.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/40153; http://secunia.com/advisories/28231; http://www.securityfocus.com/bid/27056
CVE: CVE-2007-6621
Published: 2008-01-04
Description: Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the picture parameter.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/39666; http://secunia.com/advisories/28231; http://www.securityfocus.com/bid/27056
CVE: CVE-2007-6622
Published: 2008-01-04
Description: SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/39759; http://secunia.com/advisories/28194; http://www.securityfocus.com/bid/27058
CVE: CVE-2007-6623
Published: 2008-01-04
Description: Absolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to list arbitrary directories via a full pathname in the dir parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/39760; http://secunia.com/advisories/28194; http://www.securityfocus.com/bid/27058
CVE: CVE-2007-6624
Published: 2008-01-04
Description: Directory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://irk4z.wordpress.com/2007/12/27/pnphpbb2-12i-printviewphp-phpex-local-file-inclusion-vuln/; http://osvdb.org/39879; http://www.securityfocus.com/bid/27039
CVE: CVE-2007-6625
Published: 2008-01-04
Description: The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3.5.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as demonstrated by a Nessus scan.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-134
References: http://osvdb.org/40104; http://secunia.com/advisories/28237; http://securitytracker.com/id?1019144
CVE: CVE-2007-6626
Published: 2008-01-04
Description: Multiple buffer overflows in the RTSP_valid_response_msg function in RTSP_state_machine.c in LScube Feng 0.1.15 and earlier allow remote attackers to execute arbitrary code via (1) a long first line of a response, as demonstrated by a long VER line; or (2) a long second line of a response, as demonstrated by a message that follows a RETURN line.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/fengulo-adv.txt; http://aluigi.org/poc/fengulo.zip; http://osvdb.org/40532
CVE: CVE-2007-6627
Published: 2008-01-04
Description: Integer overflow in the RTSP_remove_msg function in RTSP_lowlevel.c in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an RTP packet with a size value of 0xffff.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://aluigi.altervista.org/adv/fengulo-adv.txt; http://aluigi.org/poc/fengulo.zip; http://osvdb.org/40533
CVE: CVE-2007-6628
Published: 2008-01-04
Description: LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via (1) a malformed Transport header, which triggers misparsing in parse_transport_header in RTSP_setup.c, as demonstrated by a Transport header that contains only a "RTP/AVP;unicast;client_port" sequence; or (2) a malformed Range header, which triggers misparsing in parse_play_time_range in RTSP_Play, as demonstrated by an empty Range header.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/fengulo-adv.txt; http://aluigi.org/poc/fengulo.zip; http://osvdb.org/40534
CVE: CVE-2007-6629
Published: 2008-01-04
Description: Interpretation conflict in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a User-Agent header line that contains a carriage-return character, which is considered a line delimiter when the header is split into individual lines, but not when log_user_agent in RTSP_utils.c parses the content of the User-Agent line.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/fengulo-adv.txt; http://aluigi.org/poc/fengulo.zip; http://osvdb.org/40537