deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-2999
Published: 2007-06-04
Description: Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for those with an invalid user name, which allows context-dependent attackers to determine valid Active Directory account names.
CVSS Score: 1.8 (LOW)
References: http://osvdb.org/36138; http://secunia.com/advisories/25457; http://www.notsosecure.com/folder2/2007/05/27/logon-time-restrictions-in-a-domain-in-windows-server-2003-allows-username-enumeration/
CVE: CVE-2007-3000
Published: 2007-06-04
Description: Multiple SQL injection vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to execute arbitrary SQL commands via (1) the iCategoryUnq parameter to G_Display.php or (2) the iSearchID parameter to Search/DisplayResults.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36318; http://osvdb.org/36319; http://secunia.com/advisories/25487
CVE: CVE-2007-3001
Published: 2007-06-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to inject arbitrary web script or HTML via (1) the sUName parameter to UserArea/Authenticate.php, (2) the sAccountUnq parameter to UserArea/NewAccounts/index.php, or the (3) iCategoryUnq, (4) iDBLoc, (5) iTtlNumItems, (6) iNumPerPage, or (7) sSort parameter to G_Display.php, different vectors than CVE-2005-4239.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/38877; http://osvdb.org/38878; http://osvdb.org/38879
CVE: CVE-2007-3002
Published: 2007-06-04
Description: PHP JackKnife (PHPJK) allows remote attackers to obtain sensitive information via (1) a request to index.php with an invalid value of the iParentUnq[] parameter, or a request to G_Display.php with an invalid (2) iCategoryUnq[] or (3) sSort[] array parameter, which reveals the path in various error messages.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/45393; http://osvdb.org/45394; http://securityreason.com/securityalert/2768
CVE: CVE-2007-3003
Published: 2007-06-04
Description: Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat_id or (2) year parameter to index.php in a viewuser action, different vectors than CVE-2005-1500 and CVE-2005-4225.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38345; http://securityreason.com/securityalert/2769; http://www.securityfocus.com/archive/1/470112/100/0/threaded
CVE: CVE-2007-3004
Published: 2007-06-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-2788.  Reason: This candidate is a duplicate of CVE-2007-2788.  Notes: All CVE users should reference CVE-2007-2788 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CWE: CWE-119
CVE: CVE-2007-3005
Published: 2007-06-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-2789.  Reason: This candidate is a duplicate of CVE-2007-2789.  Notes: All CVE users should reference CVE-2007-2789 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-3006
Published: 2007-06-04
Description: Buffer overflow in Acoustica MP3 CD Burner 4.32 allows user-assisted remote attackers to execute arbitrary code via a .asx playlist file with a REF element containing a long string in the HREF attribute. NOTE: it was later claimed that 4.51 Build 147 is also affected.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/43455; http://secunia.com/advisories/31666; http://www.securityfocus.com/bid/24247
CVE: CVE-2007-3007
Published: 2007-06-04
Description: PHP 5 before 5.2.3 does not enforce the open_basedir or safe_mode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string.  NOTE: this issue might also involve the realpath function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://bugs.php.net/bug.php?id=41492; http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html; http://osvdb.org/36084
CVE: CVE-2007-3008
Published: 2007-06-04
Description: Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing (XST) attacks, a related issue to CVE-2004-2320 and CVE-2005-3398.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-200
References: http://secunia.com/advisories/25636; http://www.appwebserver.org/forum/viewtopic.php?t=996; http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html
CVE: CVE-2007-3009
Published: 2007-06-04
Description: Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in the HTTP scheme, as demonstrated by a "GET %n://localhost:80/" request.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/25641; http://www.appwebserver.org/forum/viewtopic.php?t=969; http://www.osvdb.org/35510
CVE: CVE-2007-1862
Published: 2007-06-04
Description: The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=186219; http://httpd.apache.org/security/vulnerabilities_22.html; http://issues.apache.org/bugzilla/show_bug.cgi?id=41551
CVE: CVE-2007-0933
Published: 2007-06-05
Description: Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ (Rev. A1) on Windows XP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a beacon frame with a long TIM Information Element.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/36160; http://secunia.com/advisories/25602; http://www.blackhat.com/presentations/bh-europe-07/Butti/Presentation/bh-eu-07-Butti.pdf
CVE: CVE-2007-0993
Published: 2007-06-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-0933.  Reason: This candidate is a duplicate of CVE-2007-0933 due to a typo.  Notes: All CVE users should reference CVE-2007-0933 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-3021
Published: 2007-06-05
Description: Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36109; http://secunia.com/advisories/25543; http://www.securityfocus.com/bid/24313
CVE: CVE-2007-3022
Published: 2007-06-05
Description: Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36108; http://secunia.com/advisories/25543; http://www.securityfocus.com/bid/24312
CVE: CVE-2007-3042
Published: 2007-06-05
Description: Cross-site scripting (XSS) vulnerability in Meneame before 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/36411; http://secunia.com/advisories/25510
CVE: CVE-2007-3043
Published: 2007-06-05
Description: Cross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaboration Portal up to 07-30-/D, Groupmax Collaboration Web Client - Forum/File Sharing up to 07-30-/C, uCosminexus Collaboration Portal up to 06-30-/D, and uCosminexus Collaboration Portal - Forum/File Sharing up to 06-30-/C on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36828; http://secunia.com/advisories/25507; http://www.hitachi-support.com/security_e/vuls_e/HS07-011_e/index-e.html
CVE: CVE-2007-3044
Published: 2007-06-05
Description: Unspecified vulnerability in the Map I/O Service (xpwmap) in Hitachi XP/W on HI-UX/WE2 before 20070319, and XP/W on HP-UX before 20070405, allows remote attackers to cause a denial of service via certain data to the service port.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/36895; http://secunia.com/advisories/25494; http://www.hitachi-support.com/security_e/vuls_e/HS07-013_e/index-e.html
CVE: CVE-2007-3045
Published: 2007-06-05
Description: Unspecified vulnerability in Hitachi TP1/NET/OSI-TP-Extended on HI-UX/WE2 before 20070213, and on HP-UX before 20070314, allows remote attackers to cause a denial of service via certain data to a port.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/36825; http://secunia.com/advisories/25511; http://www.hitachi-support.com/security_e/vuls_e/HS07-012_e/index-e.html
CVE: CVE-2007-3046
Published: 2007-06-05
Description: Buffer overflow in Advanced Software Production Line Vortex Library before 1.0.3 allows remote attackers to cause a denial of service (listener crash) via unspecified vectors related to the select I/O implementation and the file set buffer.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.aspl.es/pipermail/vortex/2007-May/000152.html; http://osvdb.org/36819; http://secunia.com/advisories/25442
CVE: CVE-2007-3047
Published: 2007-06-05
Description: The Vonage VoIP Telephone Adapter has a default administrator username "user" and password "user," which allows remote attackers to obtain administrative access.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/38522; http://securityreason.com/securityalert/2771; http://www.securityfocus.com/archive/1/470443/100/0/threaded
CVE: CVE-2007-3048
Published: 2007-06-05
Description: GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt.  NOTE: multiple third parties report inability to reproduce this issue
CVSS Score: 7.2 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063706.html; http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063710.html; http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063721.html
CVE: CVE-2007-3049
Published: 2007-06-06
Description: Cross-site scripting (XSS) vulnerability in index.php in Buttercup web file manager (BWFM) May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/38805; http://redlevel.org/wp-content/uploads/buttercup.txt; http://www.securityfocus.com/bid/24269
CVE: CVE-2007-3050
Published: 2007-06-06
Description: Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://osvdb.org/36912; http://secunia.com/advisories/25526; http://www.majorsecurity.de/index_2.php?major_rls=major_rls50
CVE: CVE-2007-3051
Published: 2007-06-06
Description: SQL injection vulnerability in inc/class_users.php in RevokeSoft RevokeBB 1.0 RC4 and earlier allows remote attackers to execute arbitrary SQL commands via the revokebb_user cookie.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38366; http://www.securityfocus.com/archive/1/470276/100/0/threaded; http://www.securityfocus.com/bid/24272
CVE: CVE-2007-3052
Published: 2007-06-06
Description: SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers to execute arbitrary SQL commands via the c parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35424; http://secunia.com/advisories/25480; http://www.securityfocus.com/bid/24295
CVE: CVE-2007-3053
Published: 2007-06-06
Description: Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36984; http://secunia.com/advisories/25521; http://www.majorsecurity.de/index_2.php?major_rls=major_rls49
CVE: CVE-2007-3054
Published: 2007-06-06
Description: Cross-site scripting (XSS) vulnerability in search.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the kword parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36412; http://secunia.com/advisories/25517; http://www.securityfocus.com/bid/24296
CVE: CVE-2007-3055
Published: 2007-06-06
Description: Cross-site scripting (XSS) vulnerability in index.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36413; http://osvdb.org/38374; http://secunia.com/advisories/25517
CVE: CVE-2007-3056
Published: 2007-06-06
Description: Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.gentoo.org/show_bug.cgi?id=180879; http://bugs.gentoo.org/show_bug.cgi?id=180879; http://osvdb.org/36409
CVE: CVE-2007-3057
Published: 2007-06-06
Description: PHP remote file inclusion vulnerability in include/wysiwyg/spaw_control.class.php in the icontent 4.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.  NOTE: this issue is probably a duplicate of CVE-2006-4656.
CVSS Score: 6.8 (MEDIUM)
References: http://attrition.org/pipermail/vim/2007-June/001639.html; http://osvdb.org/35381; http://secunia.com/advisories/25522
CVE: CVE-2007-3058
Published: 2007-06-06
Description: Multiple PHP remote file inclusion vulnerabilities in Madirish Webmail 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[basedir] parameter to (1) calendar.php, (2) compose.php, and (3) index.php, different vectors than CVE-2007-2826.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36803; http://osvdb.org/36804; http://osvdb.org/36805
CVE: CVE-2007-3059
Published: 2007-06-06
Description: SendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sc_language parameter to sendcard.php, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/35740; http://securityreason.com/securityalert/2770; http://www.securityfocus.com/archive/1/470237/100/0/threaded
CVE: CVE-2007-3060
Published: 2007-06-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to (a) chat.php, (2) LANG[DEFAULT_BRANDING] and (3) PHPLIVE_VERSION parameters to (b) help.php, the (4) admin[name] parameter to (c) admin/header.php, and the (5) BASE_URL parameter to (d) super/info.php, and in some cases, the LANG[DEFAULT_BRANDING], PHPLIVE_VERSION, and (6) nav_line parameters to setup/footer.php, different vectors than CVE-2006-6769.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0357&w=2; http://osvdb.org/36986; http://osvdb.org/36987
CVE: CVE-2007-3061
Published: 2007-06-06
Description: Cactushop 6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) cactushop6.mdb or (2) cactushop5.mdb.
CVSS Score: 7.8 (HIGH)
CWE: CWE-255
References: http://osvdb.org/42052; http://osvdb.org/42053; http://securityreason.com/securityalert/2780
CVE: CVE-2007-3062
Published: 2007-06-06
Description: Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.2 running on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01056592; http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/36829
CVE: CVE-2007-3063
Published: 2007-06-06
Description: SQL injection vulnerability in diary.php in My Databook allows remote attackers to execute arbitrary SQL commands via the delete parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38384; http://www.securityfocus.com/archive/1/470483/100/0/threaded; http://www.securityfocus.com/bid/24311
CVE: CVE-2007-3064
Published: 2007-06-06
Description: Cross-site scripting (XSS) vulnerability in diary.php in My Databook allows remote attackers to inject arbitrary web script or HTML via the year parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/38385; http://www.securityfocus.com/archive/1/470483/100/0/threaded; http://www.securityfocus.com/bid/24311
CVE: CVE-2007-3065
Published: 2007-06-06
Description: SQL injection vulnerability in viewimage.php in Particle Soft Particle Gallery 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the editcomment parameter, a different version and vector than CVE-2006-2862.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36309; http://secunia.com/advisories/25524; http://www.securityfocus.com/bid/24273
CVE: CVE-2007-3066
Published: 2007-06-06
Description: Multiple PHP remote file inclusion vulnerabilities in php(Reactor) 1.2.7 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter to (1) view.inc.php, (2) users.inc.php, (3) updatecms.inc.php, and (4) polls.inc.php in inc/; and other unspecified files, different vectors than CVE-2006-3983.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38375; http://osvdb.org/38376; http://osvdb.org/38377
CVE: CVE-2007-3067
Published: 2007-06-06
Description: Cross-site scripting (XSS) vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the (1) keyshow, (2) sortkey, and (3) show parameters to index.php.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36930; http://secunia.com/advisories/25538; http://sourceforge.net/project/shownotes.php?release_id=512860&group_id=167016
CVE: CVE-2007-3068
Published: 2007-06-06
Description: Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF playlist containing a long filename.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36956; http://secunia.com/advisories/25508; http://www.securityfocus.com/bid/24278
CVE: CVE-2007-0067
Published: 2007-06-06
Description: Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a denial of service (daemon crash) via requests for URLs that reference certain files.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/35766; http://secunia.com/advisories/25542; http://www-1.ibm.com/support/docview.wss?uid=swg21257251
CVE: CVE-2007-2419
Published: 2007-06-06
Description: Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the (1) the second parameter to the DownloadAndExecute method and (2) third parameter to the AddFileEx method, a different vulnerability than CVE-2007-0328.
CVSS Score: 10.0 (HIGH)
References: http://dvlabs.tippingpoint.com/advisory/TPTI-07-09; http://osvdb.org/36983; http://secunia.com/advisories/25509
CVE: CVE-2007-2514
Published: 2007-06-06
Description: Stack-based buffer overflow in XferWan.exe as used in multiple products including (1) Symantec Discovery 6.5, (2) Numara Asset Manager 8.0, and (3) Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation duplicate of CVE-2007-1173.
CVSS Score: 9.3 (HIGH)
References: http://dvlabs.tippingpoint.com/advisory/TPTI-07-10; http://osvdb.org/42059; http://securityreason.com/securityalert/2785
CVE: CVE-2007-3069
Published: 2007-06-06
Description: xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence.
CVSS Score: 4.6 (MEDIUM)
References: http://osvdb.org/36586; http://secunia.com/advisories/25531; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102834-1
CVE: CVE-2007-3070
Published: 2007-06-06
Description: Cross-site scripting (XSS) vulnerability in index.php in BDigital Web Solutions WebStudio allows remote attackers to inject arbitrary web script or HTML via the pageid parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36350; http://secunia.com/advisories/25502; http://securityreason.com/securityalert/2772
CVE: CVE-2007-3071
Published: 2007-06-06
Description: Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSellerate SDK allows user-assisted remote attackers to execute arbitrary code via a long first argument.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/38803; http://www.securityfocus.com/bid/24300; http://www.shinnai.altervista.org/exploits/esellerate.html
CVE: CVE-2007-3072
Published: 2007-06-06
Description: Directory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on Windows allows remote attackers to read arbitrary files via ..%5C (dot dot encoded backslash) sequences in a resource:// URI.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: http://ha.ckers.org/blog/20070516/read-firefox-settings-poc/; http://ha.ckers.org/blog/20070516/read-firefox-settings-poc/#comment-35888; http://larholm.com/2007/05/25/firefox-0day-local-file-reading/
CVE: CVE-2007-3073
Published: 2007-06-06
Description: Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers to read arbitrary files via ..%2F (dot dot encoded slash) sequences in a resource:// URI.
CVSS Score: 7.8 (HIGH)
References: http://ha.ckers.org/blog/20070516/read-firefox-settings-poc/; http://larholm.com/2007/05/25/firefox-0day-local-file-reading/; http://larholm.com/2007/06/04/unpatched-input-validation-flaw-in-firefox-2004/
CVE: CVE-2007-3074
Published: 2007-06-06
Description: Mozilla Firefox 2.0.0.4 and earlier allows remote attackers to read files in the local Firefox installation directory via a resource:// URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://ha.ckers.org/blog/20070516/read-firefox-settings-poc/; http://larholm.com/2007/05/25/firefox-0day-local-file-reading/; http://larholm.com/2007/06/04/unpatched-input-validation-flaw-in-firefox-2004/