deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-3357
Published: 2007-06-22
Description: NetClassifieds Premium Edition does not use encryption for (1) stored passwords or (2) sensitive data, which might allow attackers to obtain information via certain vectors.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/38563; http://securityreason.com/securityalert/2824; http://www.securityfocus.com/archive/1/471944/100/0/threaded
CVE: CVE-2007-3358
Published: 2007-06-22
Description: PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _SERWEB[serwebdir] parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36324; http://secunia.com/advisories/25680; http://www.securityfocus.com/bid/24581
CVE: CVE-2007-3359
Published: 2007-06-22
Description: Multiple PHP remote file inclusion vulnerabilities in SerWeb 0.9.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _SERWEB[serwebdir] parameter to (1) html/load_apu.php or (2) html/mail_prepend.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36325; http://osvdb.org/36326; http://secunia.com/advisories/25680
CVE: CVE-2007-3360
Published: 2007-06-22
Description: hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/37479; http://secunia.com/advisories/25759; http://secunia.com/advisories/34870
CVE: CVE-2007-3361
Published: 2007-06-22
Description: The Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to cause a denial of service (device crash) via a SIP message with a malformed header.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/37498; http://secunia.com/advisories/25782; http://www.securityfocus.com/bid/24536
CVE: CVE-2007-3362
Published: 2007-06-22
Description: ageet AGEphone before 1.6.2, running on Windows Mobile 5 on the HTC HyTN Pocket PC device, allows remote attackers to (1) cause a denial of service (call disruption and device hang) via a SIP message with a malformed header and (2) cause a denial of service (call disruption, false ring indication, and device outage) via a SIP message with a malformed SDP delimiter.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/37729; http://secunia.com/advisories/25781; http://www.ageet.com/us/agephone/help/index.htm#vers
CVE: CVE-2007-3363
Published: 2007-06-22
Description: Multiple unspecified vulnerabilities in ageet AGEphone before 1.6.3 allow remote attackers to have an unknown impact via malformed SIP packets.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/37730; http://secunia.com/advisories/25781; http://www.ageet.com/us/agephone/help/index.htm#vers
CVE: CVE-2007-3364
Published: 2007-06-22
Description: Cross-site scripting (XSS) vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote attackers to inject arbitrary web script or HTML via the body content.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36340; http://osvdb.org/37506; http://securityreason.com/securityalert/2823
CVE: CVE-2007-3365
Published: 2007-06-22
Description: MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information (script source code) via a modified extension, as demonstrated by post.mscgI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-178
References: http://osvdb.org/37505; http://secunia.com/advisories/25754; http://securityreason.com/securityalert/2827
CVE: CVE-2007-3366
Published: 2007-06-22
Description: Cross-site scripting (XSS) vulnerability in Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to inject arbitrary web script or HTML via the URI.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/35860; http://secunia.com/advisories/25722; http://www.securityfocus.com/bid/24586
CVE: CVE-2007-3367
Published: 2007-06-22
Description: Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to obtain sensitive information via a direct request, which reveals the path in an error message.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/35861; http://secunia.com/advisories/25722; http://www.securityfocus.com/bid/24586
CVE: CVE-2007-3368
Published: 2007-06-22
Description: Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service (device reboot) via a malformed CGI parameter.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/37611; http://www.polycom.com/common/documents/support/downloads/voice/soundpoint_ip_soundstation_ip_sip_2.1.1_release_notes.pdf; http://www.securityfocus.com/bid/24547
CVE: CVE-2007-3369
Published: 2007-06-22
Description: Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service (device hang or reboot) via an INVITE message with a long Via header.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://knowledgebase.polycom.com/KanisaPlatform/Publishing/927/11898_f.SAL_PUBLIC_1_2.html; http://osvdb.org/37610; http://secunia.com/advisories/25780
CVE: CVE-2007-3370
Published: 2007-06-22
Description: Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL in (1) the sunPath parameter to include.php or (2) the dir parameter to skin/board/default/doctype.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36281; http://osvdb.org/36282; http://www.securityfocus.com/bid/24588
CVE: CVE-2007-3371
Published: 2007-06-22
Description: PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to execute arbitrary PHP code via a URL in the _POWL[installPath] parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36368; http://www.securityfocus.com/bid/24589; http://www.vupen.com/english/advisories/2007/2306
CVE: CVE-2007-3372
Published: 2007-06-22
Description: The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via empty TXT data over D-Bus, which triggers an assert error.
CVSS Score: 2.1 (LOW)
References: http://avahi.org/changeset/1482; http://avahi.org/milestone/Avahi%200.6.20; http://osvdb.org/37507
CVE: CVE-2007-2399
Published: 2007-06-25
Description: WebKit in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1 performs an "invalid type conversion", which allows remote attackers to execute arbitrary code via unspecified frame sets that trigger memory corruption.
CVSS Score: 9.3 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305759; http://docs.info.apple.com/article.html?artnum=306173; http://lists.apple.com/archives/Security-announce/2007/Jun/msg00003.html
CVE: CVE-2007-2400
Published: 2007-06-25
Description: Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain and conduct cross-site scripting (XSS) attacks via vectors related to page updating and HTTP redirects.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-362
References: http://docs.info.apple.com/article.html?artnum=306173; http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.html; http://osvdb.org/36452
CVE: CVE-2007-2401
Published: 2007-06-25
Description: CRLF injection vulnerability in WebCore in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1, allows remote attackers to inject arbitrary HTTP headers via LF characters in an XMLHttpRequest request, which are not filtered when serializing headers via the setRequestHeader function.  NOTE: this issue can be leveraged for cross-site scripting (XSS) attacks.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://docs.info.apple.com/article.html?artnum=305759; http://docs.info.apple.com/article.html?artnum=306173; http://lists.apple.com/archives/Security-announce/2007/Jun/msg00003.html
CVE: CVE-2007-3373
Published: 2007-06-25
Description: daemon.c in cman (redhat-cluster-suite) before 20070622 does not clear a buffer for reading requests, which might allow local users to obtain sensitive information from previous requests.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/45381; https://exchange.xforce.ibmcloud.com/vulnerabilities/35152; https://www.redhat.com/archives/cluster-devel/2007-June/msg00130.html
CVE: CVE-2007-3374
Published: 2007-06-25
Description: Buffer overflow in cluster/cman/daemon/daemon.c in cman (redhat-cluster-suite) before 20070622 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via long client messages.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/37497; http://secunia.com/advisories/25799; http://secunia.com/advisories/25818
CVE: CVE-2007-3375
Published: 2007-06-25
Description: Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/25826; http://vuln.sg/lhaca121-en.html; http://www.kb.cert.org/vuls/id/871497
CVE: CVE-2007-3376
Published: 2007-06-25
Description: Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long value in the title HTML tag, which triggers the overflow when the user adds the page as a bookmark.
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6602&w=2; http://osvdb.org/40882; http://www.securityfocus.com/archive/1/472209
CVE: CVE-2007-3377
Published: 2007-06-25
Description: Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin.
CVSS Score: 4.3 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc; http://osvdb.org/37053; http://rt.cpan.org/Public/Bug/Display.html?id=23961
CVE: CVE-2007-3389
Published: 2007-06-26
Description: Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/37643; http://secunia.com/advisories/25833; http://secunia.com/advisories/25987
CVE: CVE-2007-3390
Published: 2007-06-26
Description: Wireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote attackers to cause a denial of service (crash) via crafted iSeries capture files that trigger a SIGTRAP.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/37642; http://secunia.com/advisories/25833; http://secunia.com/advisories/25877
CVE: CVE-2007-3391
Published: 2007-06-26
Description: Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://osvdb.org/37641; http://secunia.com/advisories/25833; http://secunia.com/advisories/25987
CVE: CVE-2007-3392
Published: 2007-06-26
Description: Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1582; http://secunia.com/advisories/25833; http://secunia.com/advisories/25877
CVE: CVE-2007-3393
Published: 2007-06-26
Description: Off-by-one error in the DHCP/BOOTP dissector in Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via crafted DHCP-over-DOCSIS packets.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/37639; http://secunia.com/advisories/22588/; http://secunia.com/advisories/25833
CVE: CVE-2007-2520
Published: 2007-06-26
Description: SQL injection vulnerability in admin.php in MyNews 0.10, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authacc cookie.
CVSS Score: 6.8 (MEDIUM)
References: http://securityreason.com/securityalert/2834; http://www.netvigilance.com/advisory0025; http://www.osvdb.org/34274
CVE: CVE-2007-3182
Published: 2007-06-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in Calendarix 0.7.20070307, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) year and (2) month parameters to calendar.php, and the (3) leftfooter parameter to cal_footer.inc.php.  NOTE: the ycyear parameter to yearcal.php is already covered by CVE-2006-1835.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/35695; http://osvdb.org/35696; http://secunia.com/advisories/25795
CVE: CVE-2007-3183
Published: 2007-06-26
Description: Multiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters to calendar.php and the (3) search string to cal_search.php.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/35694; http://secunia.com/advisories/25795; http://securityreason.com/securityalert/2837
CVE: CVE-2007-3259
Published: 2007-06-26
Description: Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via (1) an invalid month[] parameter to calendar.php, (2) an invalid catview[] parameter to cal_week.php in a week operation, (3) an invalid ycyear[] parameter to yearcal.php, or (4) a direct request to cal_functions.inc.php, which reveals the installation path in various error messages.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/35697; http://osvdb.org/35698; http://osvdb.org/35699
CVE: CVE-2007-3394
Published: 2007-06-26
Description: Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the (1) artid parameter to mod.php in a viewarticle action (publisher mod) and the (2) bid parameter to banners.php in a click action.  NOTE: the mod.php viewdisk and viewlink vectors are already covered by CVE-2006-6873.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38227; http://osvdb.org/38228; http://securityreason.com/securityalert/2839
CVE: CVE-2007-3395
Published: 2007-06-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-2836.  Reason: This candidate is a duplicate of CVE-2007-2836.  Notes: All CVE users should reference CVE-2007-2836 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-3396
Published: 2007-06-26
Description: Cross-site scripting (XSS) vulnerability in index.wkf in KeyFocus (KF) web server 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the opsubmenu parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36331; http://secunia.com/advisories/25828; http://securityreason.com/securityalert/2840
CVE: CVE-2007-3397
Published: 2007-06-26
Description: The web container in IBM WebSphere Application Server (WAS) before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed connection error, which might allow remote attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/41644; http://secunia.com/advisories/25817; http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24015854
CVE: CVE-2007-3398
Published: 2007-06-26
Description: LiteWEB 2.7 allows remote attackers to cause a denial of service (hang) via a large number of requests for nonexistent pages.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/39010; http://securityreason.com/securityalert/2835; http://www.securityfocus.com/archive/1/472202/100/0/threaded
CVE: CVE-2007-3399
Published: 2007-06-26
Description: SQL injection vulnerability in include/get_userdata.php in Power Phlogger (PPhlogger) 2.2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38229; http://osvdb.org/38944; http://securityreason.com/securityalert/2833
CVE: CVE-2007-3400
Published: 2007-06-26
Description: The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://osvdb.org/37674; http://secunia.com/advisories/25825; http://www.securityfocus.com/bid/24613
CVE: CVE-2007-3401
Published: 2007-06-26
Description: PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrary PHP code via a URL in the tfooter parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36291; http://secunia.com/advisories/25837; http://www.securityfocus.com/bid/24624
CVE: CVE-2007-3402
Published: 2007-06-26
Description: SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via the news_id parameter in a pagetool_news action.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38225; http://www.securityfocus.com/archive/1/488724/100/0/threaded; http://www.securityfocus.com/archive/1/488742/100/0/threaded
CVE: CVE-2007-3403
Published: 2007-06-26
Description: Unrestricted file upload vulnerability in upload.php in dreamLog (aka dreamblog) 0.5 allows remote attackers to upload and execute arbitrary PHP code in uploads/images/ via the uploadedFile[] parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/45385; http://www.securityfocus.com/bid/24639; http://www.vupen.com/english/advisories/2007/2326
CVE: CVE-2007-3404
Published: 2007-06-26
Description: Directory traversal vulnerability in ShowImage.php in SiteDepth CMS 3.44 allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/38603; http://www.securityfocus.com/bid/24635; http://www.vupen.com/english/advisories/2007/2325
CVE: CVE-2007-3405
Published: 2007-06-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in defter_yaz.asp in Lebisoft zdefter 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) ad and (2) konu parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/37529; http://secunia.com/advisories/25779; http://www.securityfocus.com/bid/24620
CVE: CVE-2007-0773
Published: 2007-06-26
Description: The Linux kernel before 2.6.9-42.0.8 in Red Hat 4.4 allows local users to cause a denial of service (kernel OOPS from null dereference) via fput in a 32-bit ioctl on 64-bit x86 systems, an incomplete fix of CVE-2005-3044.1.
CVSS Score: 4.6 (MEDIUM)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=243252; http://osvdb.org/37128; http://rhn.redhat.com/errata/RHSA-2007-0488.html
CVE: CVE-2007-2951
Published: 2007-06-26
Description: The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an (1) irc:// or (2) irc6:// URI.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/37604; http://secunia.com/advisories/25740; http://secunia.com/advisories/26813
CVE: CVE-2007-3104
Published: 2007-06-26
Description: The sysfs_readdir function in the Linux kernel 2.6, as used in Red Hat Enterprise Linux (RHEL) 4.5 and other distributions, allows users to cause a denial of service (kernel OOPS) by dereferencing a null pointer to an inode in a dentry.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=242558; http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html; http://osvdb.org/37115
CVE: CVE-2007-3406
Published: 2007-06-26
Description: Multiple absolute path traversal vulnerabilities in Microsoft Internet Explorer 6 on Windows XP SP2 allow remote attackers to access arbitrary local files via the file: URI in the (1) src attribute of a (a) bgsound, (b) input, (c) EMBED, (d) img, or (e) script tag; (2) data attribute of an object tag; (3) value attribute of a param tag; (4) background attribute of a body tag; or (5) the background:url attribute declared in the BODY parameter of a STYLE tag.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/45435; http://www.securityfocus.com/bid/22621; http://www.xdisclose.com/XD100099.txt
CVE: CVE-2007-3407
Published: 2007-06-26
Description: Sergey Lyubka Simple HTTPD (shttpd) 1.38 allows remote attackers to obtain sensitive information (script source code) via a URL with a trailing encoded space (%20).
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/37732; http://secunia.com/advisories/25809; http://securityreason.com/securityalert/2832
CVE: CVE-2007-3408
Published: 2007-06-26
Description: Multiple unspecified vulnerabilities in Dia before 0.96.1-6 have unspecified attack vectors and impact, probably involving the use of vulnerable FreeType libraries that contain CVE-2007-2754 and/or CVE-2007-1351.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/25810; http://sourceforge.net/forum/forum.php?forum_id=709959; http://www.vupen.com/english/advisories/2007/2328
CVE: CVE-2007-3409
Published: 2007-06-26
Description: Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674, CWE-674
References: ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc; http://osvdb.org/37054; http://rt.cpan.org/Public/Bug/Display.html?id=27285
CVE: CVE-2007-2442
Published: 2007-06-26
Description: The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.
CVSS Score: 10.0 (HIGH)
CWE: CWE-824
References: ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc; http://docs.info.apple.com/article.html?artnum=306172; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427
CVE: CVE-2007-2443
Published: 2007-06-26
Description: Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.
CVSS Score: 8.3 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc; http://docs.info.apple.com/article.html?artnum=306172; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427