deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-0915
Published: 2007-02-14
Description: Distributed SLS daemon (SLSd) on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges via a crafted RPC request.
CVSS Score: 10.0 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=474; http://osvdb.org/33186; http://secunia.com/advisories/24169
CVE: CVE-2007-0916
Published: 2007-02-14
Description: Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/33198; http://secunia.com/advisories/24173; http://www.securityfocus.com/bid/22546
CVE: CVE-2007-0917
Published: 2007-02-14
Description: The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets.
CVSS Score: 6.4 (MEDIUM)
References: http://osvdb.org/33052; http://secunia.com/advisories/24142; http://www.cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtml
CVE: CVE-2007-0918
Published: 2007-02-14
Description: The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature.
CVSS Score: 7.1 (HIGH)
References: http://osvdb.org/33053; http://secunia.com/advisories/24142; http://www.cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtml
CVE: CVE-2007-0919
Published: 2007-02-14
Description: Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory immediately above the web root via a ..%00 sequence in the URI.
CVSS Score: 7.8 (HIGH)
References: http://attrition.org/pipermail/vim/2007-February/001315.html; http://osvdb.org/33513; http://securityreason.com/securityalert/2248
CVE: CVE-2007-0920
Published: 2007-02-14
Description: SQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35678; http://www.securityfocus.com/bid/22532; http://www.vupen.com/english/advisories/2007/0600
CVE: CVE-2007-0921
Published: 2007-02-14
Description: Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string to the top-level URI.
CVSS Score: 9.4 (HIGH)
References: http://osvdb.org/33713; http://securityreason.com/securityalert/2247; http://www.securityfocus.com/archive/1/459794/100/0/threaded
CVE: CVE-2007-0922
Published: 2007-02-14
Description: Cross-site scripting (XSS) vulnerability in buscador/buscador.htm in Portal Search allows remote attackers to inject arbitrary web script or HTML via the query string.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/33714; http://securityreason.com/securityalert/2247; http://www.securityfocus.com/archive/1/459794/100/0/threaded
CVE: CVE-2007-0923
Published: 2007-02-14
Description: buscador/buscador.htm in Portal Search allows remote attackers to obtain sensitive information (business logic) via a query string composed of a search for certain characters.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/33715; http://securityreason.com/securityalert/2247; http://www.securityfocus.com/archive/1/459794/100/0/threaded
CVE: CVE-2007-0924
Published: 2007-02-14
Description: Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions via a direct request to phpPollAdmin.php3.  NOTE: this issue might subsume CVE-2006-3764.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33694; http://securityreason.com/securityalert/2242; http://www.securityfocus.com/archive/1/459789/100/0/threaded
CVE: CVE-2007-0925
Published: 2007-02-14
Description: Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inject arbitrary web script or HTML via the q parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/33717; http://securityreason.com/securityalert/2241; http://www.securityfocus.com/archive/1/459848/100/0/threaded
CVE: CVE-2007-0926
Published: 2007-02-14
Description: The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql['pass'] and $gbpass variables.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33710; http://securityreason.com/securityalert/2246; http://www.securityfocus.com/archive/1/459799/100/0/threaded
CVE: CVE-2007-0927
Published: 2007-02-14
Description: Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce header.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24130; http://www.osvdb.org/33180; http://www.securityfocus.com/archive/1/460346/100/0/threaded
CVE: CVE-2007-0928
Published: 2007-02-14
Description: Virtual Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an encoded password via a direct request for pwd.txt.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/33183; http://secunia.com/advisories/24125; http://securityreason.com/securityalert/2240
CVE: CVE-2007-0929
Published: 2007-02-14
Description: Directory traversal vulnerability in php rrd browser before 0.2.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://attrition.org/pipermail/vim/2007-February/001307.html; http://osvdb.org/33693; http://securityreason.com/securityalert/2245
CVE: CVE-2007-0930
Published: 2007-02-14
Description: Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unknown vectors involving the use of PHP's extract function.
CVSS Score: 7.5 (HIGH)
References: http://sourceforge.net/forum/forum.php?forum_id=660919; http://www.securityfocus.com/bid/22388; http://www.vupen.com/english/advisories/2007/0559
CVE: CVE-2007-0931
Published: 2007-02-14
Description: Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via long credential strings.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052380.html; http://osvdb.org/33184; http://secunia.com/advisories/24144
CVE: CVE-2007-0932
Published: 2007-02-14
Description: The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052382.html; http://osvdb.org/33185; http://secunia.com/advisories/24144
CVE: CVE-2006-7011
Published: 2007-02-15
Description: PHP remote file inclusion vulnerability in adminips.php in Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via a URL in the banned_file parameter.  NOTE: CVE disputes this vulnerability because banned_file is set to a constant value
CVSS Score: 7.5 (HIGH)
References: http://www.attrition.org/pipermail/vim/2007-February/001321.html; http://www.securityfocus.com/archive/1/437411/30/4320/threaded; http://www.securityfocus.com/bid/18480
CVE: CVE-2006-7012
Published: 2007-02-15
Description: scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of a show_text action.
CVSS Score: 10.0 (HIGH)
References: http://advisories.echo.or.id/adv/adv32-K-159-2006.txt; http://securityreason.com/securityalert/2257; http://www.securityfocus.com/archive/1/435861/30/4710/threaded
CVE: CVE-2006-7013
Published: 2007-02-15
Description: QueryString.php in Simple Machines Forum (SMF) 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more reliable sources for the IP address.  NOTE: the original researcher claims that the vendor has disputed this issue
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2256; http://www.securityfocus.com/archive/1/435686/30/4740/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/27082
CVE: CVE-2006-7014
Published: 2007-02-15
Description: admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain privileges via a direct request.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20499; http://securityreason.com/securityalert/2255; http://www.securityfocus.com/archive/1/436259/30/4620/threaded
CVE: CVE-2006-7015
Published: 2007-02-15
Description: PHP remote file inclusion vulnerability in admin.jobline.php in Jobline 1.1.1 allows remote attackers to execute arbitrary code via a URL in the mosConfig_absolute_path parameter.  NOTE: CVE disputes this issue because the script is protected against direct requests
CVSS Score: 10.0 (HIGH)
References: http://securityreason.com/securityalert/2254; http://www.attrition.org/pipermail/vim/2007-February/001325.html; http://www.securityfocus.com/archive/1/436990/30/4440/threaded
CVE: CVE-2006-7016
Published: 2007-02-15
Description: phpjobboard allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin.php with adminop=job-edit.
CVSS Score: 7.5 (HIGH)
References: http://attrition.org/pipermail/vim/2006-June/000873.html; http://securityreason.com/securityalert/2253; http://www.osvdb.org/26561
CVE: CVE-2006-7017
Published: 2007-02-15
Description: Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the admin_template_path parameter to admin/ scripts (1) app_change_email.php, (2) app_change_pwd.php, (3) app_mod_rewrite.php, (4) app_page_caching.php, (5) app_setup.php, (6) cat_add.php, (7) cat_delete.php, (8) cat_edit.php, (9) cat_path_update.php, (10) cat_search.php, (11) cat_struc.php, (12) cat_view.php, (13) cat_view_hidden.php, (14) cat_view_hierarchy.php, (15) cat_view_registered_only.php, (16) checkurl_web.php, (17) db_alter.php, (18) db_alter_change.php, (19) db_backup.php, (20) db_export.php, (21) db_import.php, (22) editor_add.php, (23) editor_delete.php, (24) editor_validate.php, (25) head.php, (26) index.php, (27) inv_config.php, (28) inv_config_payment.php, (29) inv_create.php, (30) inv_delete.php, (31) inv_edit.php, (32) inv_markpaid.php, (33) inv_markunpaid.php, (34) inv_overdue.php, (35) inv_paid.php, (36) inv_send.php, (37) inv_unpaid.php, (38) lang_modify.php, (39) link_add.php, (40) link_bad.php, (41) link_bad_delete.php, (42) link_checkurl.php, (43) link_delete.php, (44) link_duplicate.php, (45) link_edit.php, (46) link_premium_listing.php, (47) link_premium_sponsored.php, (48) link_search.php, (49) link_sponsored_listing.php, (50) link_validate.php, (51) link_validate_edit.php, (52) link_view.php, (53) log_search.php, (54) mail_modify.php, (55) menu.php, (56) message_create.php, (57) message_delete.php, (58) message_edit.php, (59) message_send.php, (60) message_subscriber.php, (61) message_view.php, (62) review_validate.php, (63) review_validate_edit.php, (64) summary.php, (65) template_active.php, (66) template_add_custom.php, (67) template_delete.php, (68) template_delete_file.php, (69) template_duplicate.php, (70) template_export.php, (71) template_import.php, (72) template_manager.php, (73) template_modify.php, (74) template_modify_file.php, (75) template_rename.php, (76) user_add.php, (77) user_delete.php, (78) user_edit.php, (79) user_search.php, and (80) whos.php.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2006-06/0318.html; http://secunia.com/advisories/18752; http://securityreason.com/securityalert/2252
CVE: CVE-2006-7018
Published: 2007-02-15
Description: phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via a crafted argument to the nome_evento parameter to phpwcms_code_snippets/mail_file_form.php and (2) sample_ext_php/mail_file_form.php, which is processed by the render_PHPcode function.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19866; http://www.phpwcms.de/forum/viewtopic.php?t=10958; http://www.vupen.com/english/advisories/2006/1556
CVE: CVE-2006-7019
Published: 2007-02-15
Description: phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via crafted arguments to the (1) text_evento and (2) email_eventonome_evento parameters to phpwcms_code_snippets/mail_file_form.php and sample_ext_php/mail_file_form.php, which is processed by the render_PHPcode function.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19866; http://www.phpwcms.de/forum/viewtopic.php?t=10958; http://www.vupen.com/english/advisories/2006/1556
CVE: CVE-2006-7020
Published: 2007-02-15
Description: CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.php in phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to modify HTTP headers and send spam e-mail via a spoofed HTTP Referer (HTTP_REFERER).
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/19866; http://www.phpwcms.de/forum/viewtopic.php?t=10958; http://www.vupen.com/english/advisories/2006/1556
CVE: CVE-2006-7021
Published: 2007-02-15
Description: PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the _PX_config[manager_path] parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.hamid.ir/security/plume.txt; http://www.securiteam.com/unixfocus/5KP031FJ5A.html; http://www.securityfocus.com/bid/18750
CVE: CVE-2006-7022
Published: 2007-02-15
Description: The Tools module in fx-APP 0.0.8.1 allows remote attackers to misrepresent the contents of a web page via an arbitrary URL in the url parameter to a showhtml action for index.php, which causes the URL to be displayed within an iframe.
CVSS Score: 10.0 (HIGH)
References: http://securityreason.com/securityalert/2251; http://www.securityfocus.com/archive/1/436691/30/4500/threaded; http://www.securityfocus.com/bid/18361
CVE: CVE-2006-7023
Published: 2007-02-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in fx-APP 0.0.8.1 allow remote attackers to inject arbitrary HTML or web script via (1) the search box, and the (2) url, (3) website, (4) comment, and (5) signature fields in the profile, and possibly (6) a menu item.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/2251; http://www.securityfocus.com/archive/1/436691/30/4500/threaded; http://www.securityfocus.com/archive/1/469825/100/100/threaded
CVE: CVE-2006-7024
Published: 2007-02-15
Description: Multiple PHP remote file inclusion vulnerabilities in Harpia CMS 1.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) func_prog parameter to (a) preload.php and (b) index.php; (2) header_prog parameter to (c) missing.php and (d) email.php, (e) files.php, (f) headlines.php, (g) search.php, (h) topics.php, and (i) users.php in _mods/; (3) theme_root parameter to (j) footer.php, (k) header.php, (l) pfooter.php, and (m) pheader.php in _inc; (4) mod_root parameter to _inc/header.php; and the (5) mod_dir and (6) php_ext parameters to (n) _inc/web_statsConfig.php.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/18614; https://exchange.xforce.ibmcloud.com/vulnerabilities/27308; https://www.exploit-db.com/exploits/1943
CVE: CVE-2007-0949
Published: 2007-02-15
Description: Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/33187; http://secunia.com/advisories/23999; http://www.securityfocus.com/bid/22553
CVE: CVE-2007-0950
Published: 2007-02-15
Description: Cross-site scripting (XSS) vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/33720; http://securityreason.com/securityalert/2250; http://www.securityfocus.com/archive/1/459979/100/0/threaded
CVE: CVE-2007-0951
Published: 2007-02-15
Description: SQL injection vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33721; http://securityreason.com/securityalert/2250; http://www.securityfocus.com/archive/1/459979/100/0/threaded
CVE: CVE-2007-0952
Published: 2007-02-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Virtual Calendar allow remote attackers to inject arbitrary web script or HTML via the (1) t and (2) yr parameters, and the (3) sho parameter when the m parameter is outside the intended range.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/33182; http://secunia.com/advisories/24125; http://www.securityfocus.com/bid/22536
CVE: CVE-2007-0953
Published: 2007-02-15
Description: Cross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://kb.atmail.com/?p=410; http://lostmon.blogspot.com/2007/02/mail-searchpl-keywords-variable-cross.html; http://osvdb.org/33193
CVE: CVE-2007-0954
Published: 2007-02-15
Description: MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://mohachat.sourceforge.net/download/release_notes/#0.1b8; http://osvdb.org/31934; http://www.vupen.com/english/advisories/2007/0599
CVE: CVE-2007-0955
Published: 2007-02-15
Description: The NTLM_UnPack_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cause a denial of service (application crash) via certain base64-encoded data following an AUTHENTICATE NTLM command to the imap port (143/tcp), which results in an out-of-bounds read.
CVSS Score: 7.8 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0321.html; http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0333.html; http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052427.html
CVE: CVE-2007-0958
Published: 2007-02-15
Description: Linux kernel 2.6.x before 2.6.20 allows local users to read unreadable binaries by using the interpreter (PT_INTERP) functionality and triggering a core dump, a variant of CVE-2004-1073.
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/35930; http://rhn.redhat.com/errata/RHSA-2007-0488.html; http://secunia.com/advisories/24482
CVE: CVE-2007-0324
Published: 2007-02-15
Description: Multiple buffer overflows in the LizardTech DjVu Browser Plug-in before 6.1.1 allow remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33199; http://secunia.com/advisories/24149; http://securityreason.com/securityalert/2259
CVE: CVE-2007-0651
Published: 2007-02-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/33188; http://osvdb.org/33189; http://osvdb.org/33190
CVE: CVE-2007-0652
Published: 2007-02-15
Description: Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag.
CVSS Score: 5.1 (MEDIUM)
References: http://osvdb.org/33191; http://secunia.com/advisories/23998; http://secunia.com/secunia_research/2007-38/advisory/
CVE: CVE-2007-0859
Published: 2007-02-16
Description: The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attackers with physical access to obtain sensitive information (memory contents) by doing (1) text searches or (2) paste operations after pressing certain keyboard shortcut keys.
CVSS Score: 2.1 (LOW)
References: http://discussion.treocentral.com/showthread.php?p=1199445&posted=1#post1199445; http://osvdb.org/33724; http://securityreason.com/securityalert/2260
CVE: CVE-2007-0959
Published: 2007-02-16
Description: Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service (device reboot) via malformed TCP packets.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/33062; http://secunia.com/advisories/24160; http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml
CVE: CVE-2007-0960
Published: 2007-02-16
Description: Unspecified vulnerability in Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to use the LOCAL authentication method, allows remote authenticated users to gain privileges via unspecified vectors.
CVSS Score: 9.0 (HIGH)
References: http://osvdb.org/33063; http://secunia.com/advisories/24160; http://secunia.com/advisories/24179
CVE: CVE-2007-0961
Published: 2007-02-16
Description: Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before 7.1(2.5), and the FWSM 3.x before 3.1(3.24), when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed SIP packets.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/33054; http://secunia.com/advisories/24160; http://secunia.com/advisories/24179
CVE: CVE-2007-0962
Published: 2007-02-16
Description: Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/33055; http://secunia.com/advisories/24160; http://secunia.com/advisories/24180
CVE: CVE-2007-0963
Published: 2007-02-16
Description: Unspecified vulnerability in Cisco Firewall Services Module (FWSM) 3.x before 3.1(3.3), when set to log at the "debug" level, allows remote attackers to cause a denial of service (device reboot) by sending packets that are not of a particular protocol such as TCP or UDP, which triggers the reboot during generation of Syslog message 710006.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/24172; http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml; http://www.securityfocus.com/bid/22561