deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-4358
Published: 2007-08-15
Description: Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service (application crash) via a JOIN packet (aka connection packet) containing 0x69 in the ninth byte, which triggers a "double-delete" of trace data, a different vulnerability than CVE-2005-1643.
CVSS Score: 4.3 (MEDIUM)
References: http://aluigi.altervista.org/adv/zoidboom2-adv.txt; http://aluigi.org/poc/zoidboom2.zip; http://secunia.com/advisories/26451
CVE: CVE-2007-4359
Published: 2007-08-15
Description: Multiple SQL injection vulnerabilities in SkilMatch Staffing Systems JobLister3 allow remote attackers to execute arbitrary SQL commands via (1) the search form or (2) the jobid parameter to index.php in a showbyID action.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36416; http://secunia.com/advisories/26440; http://securityreason.com/securityalert/3013
CVE: CVE-2007-4360
Published: 2007-08-15
Description: Unspecified vulnerability in Dell Remote Access Card 4 (DRAC4) with firmware 1.50 Build 02.16 allows remote attackers to cause a denial of service (SSH daemon crash) via certain network traffic, as demonstrated by an "nmap -O" scan with nmap 4.03, possibly related to a Mocana (Mocanada) SSH vulnerability.
CVSS Score: 4.3 (MEDIUM)
References: ftp://ftp.us.dell.com/sysman/readme_160_A00.txt; http://secunia.com/advisories/26428; http://www.securityfocus.com/archive/1/476301/100/0/threaded
CVE: CVE-2007-4361
Published: 2007-08-15
Description: NETGEAR (formerly Infrant) ReadyNAS RAIDiator before 4.00b2-p2-T1 beta creates a default SSH root password derived from the hardware serial number, which makes it easier for remote attackers to guess the password and obtain login access.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/26442; http://securityreason.com/securityalert/3017; http://www.infrant.com/forum/viewtopic.php?t=12249
CVE: CVE-2007-4362
Published: 2007-08-15
Description: SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36420; http://secunia.com/advisories/26446; http://www.securityfocus.com/bid/25292
CVE: CVE-2007-4363
Published: 2007-08-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in the nodereference module in Drupal Content Construction Kit (CCK) before 4.7.x-1.6, and 5.x before 5.x-1.6 ,allow remote attackers to inject arbitrary web script or HTML via nodereference fields, when using (1) the plain formatter or (2) the autocomplete text field widget without Views.module.
CVSS Score: 4.3 (MEDIUM)
References: http://drupal.org/node/166992; http://drupal.org/node/166994; http://drupal.org/node/166998
CVE: CVE-2007-4364
Published: 2007-08-15
Description: Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface (JNDI), related to (1) a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain "unexpected / strange response" from an LDAP server, and (2) a reauthentication attempt that throws an exception, which allows remote attackers to trigger use of a cached authentication decision.  NOTE: authentication can be bypassed by using vector 1 followed by vector 2, and possibly can be bypassed by using a single vector.
CVSS Score: 8.5 (HIGH)
CWE: CWE-287
References: http://osvdb.org/39548; http://secunia.com/advisories/26445; http://sourceforge.net/project/shownotes.php?release_id=531870
CVE: CVE-2007-4365
Published: 2007-08-15
Description: Cross-site scripting (XSS) vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a set_lang cookie to an unspecified component.  NOTE: this may overlap CVE-2007-1965.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36479; http://securityreason.com/securityalert/3021; http://www.i-s-o.org/security.txt
CVE: CVE-2007-4366
Published: 2007-08-15
Description: WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type header.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/3015; http://www.securityfocus.com/archive/1/476270/100/0/threaded; http://www.securityfocus.com/bid/25300
CVE: CVE-2007-4278
Published: 2007-08-15
Description: Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number that requires more than 8 bytes to represent in ASCII, which triggers the overflow in an sprintf function call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://downloads.esri.com/support/downloads/other_/ArcSDE-92sp3-issues.htm; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=577; http://secunia.com/advisories/26452
CVE: CVE-2007-4367
Published: 2007-08-15
Description: Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."
CVSS Score: 9.3 (HIGH)
CWE: CWE-763
References: http://lists.opensuse.org/opensuse-security-announce/2007-08/msg00006.html; http://secunia.com/advisories/26477; http://secunia.com/advisories/26545
CVE: CVE-2007-4368
Published: 2007-08-15
Description: SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter in a GenerateMainFrame command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/36478; http://securityreason.com/securityalert/3012; http://www.securityfocus.com/archive/1/476475/100/0/threaded
CVE: CVE-2007-4369
Published: 2007-08-15
Description: Directory traversal vulnerability in go/_files in SOTEeSKLEP before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/26472; http://www.securityfocus.com/archive/1/476268/100/0/threaded; http://www.securityfocus.com/archive/1/476445/100/0/threaded
CVE: CVE-2007-4370
Published: 2007-08-15
Description: Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbitrary code via a long string to UDP port 26000.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/39601; http://www.securityfocus.com/bid/25297; https://exchange.xforce.ibmcloud.com/vulnerabilities/35991
CVE: CVE-2007-4371
Published: 2007-08-15
Description: Unrestricted file upload vulnerability in admin/pages/blog-add.php in Neuron Blog 1.1 allows remote attackers to upload and execute arbitrary PHP files in uploads/.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/39602; http://securityreason.com/securityalert/3016; http://www.securityfocus.com/archive/1/476281/100/0/threaded
CVE: CVE-2007-4091
Published: 2007-08-16
Description: Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function.
CVSS Score: 6.8 (MEDIUM)
References: http://article.gmane.org/gmane.linux.debian.devel.bugs.general/291908; http://c-skills.blogspot.com/2007/08/cve-2007-4091.html; http://secunia.com/advisories/26493
CVE: CVE-2007-4372
Published: 2007-08-16
Description: Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors.  NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/46400; http://wslabi.com/wabisabilabi/showBidInfo.do?code=ZD-00000078; http://osvdb.org/46400
CVE: CVE-2007-4373
Published: 2007-08-16
Description: The server in Babo Violent 2 2.08.00 and earlier does not properly implement password protection, which might allow remote attackers to bypass authentication by reconnecting after a connection closes.
CVSS Score: 6.8 (MEDIUM)
References: http://aluigi.altervista.org/adv/bv2x-adv.txt; http://securityreason.com/securityalert/3024; http://www.securityfocus.com/archive/1/476520/100/0/threaded
CVE: CVE-2007-4374
Published: 2007-08-16
Description: Babo Violent 2 2.08.00 does not validate the sender field of a chat message composed by a client, which allows remote authenticated users to spoof messages.
CVSS Score: 4.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/bv2x-adv.txt; http://securityreason.com/securityalert/3024; http://www.securityfocus.com/archive/1/476520/100/0/threaded
CVE: CVE-2007-4375
Published: 2007-08-16
Description: The administrative interface (aka DkService.exe) in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to (1) obtain sensitive information (process memory contents), as demonstrated by an attack that obtains module base addresses to defeat Address Space Layout Randomization (ASLR); or (2) cause a denial of service (application crash) via an out-of-bounds address.
CVSS Score: 5.8 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065245.html; http://osvdb.org/39546; http://osvdb.org/39547
CVE: CVE-2007-4376
Published: 2007-08-16
Description: Unrestricted file upload vulnerability in banner-upload.php in Szymon Kosok Best Top List allows remote attackers to upload and execute arbitrary PHP files in banners/.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/46401; http://securityreason.com/securityalert/3019; http://www.securityfocus.com/archive/1/476258/100/100/threaded
CVE: CVE-2007-4377
Published: 2007-08-16
Description: Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command.  NOTE: this might overlap CVE-2007-4372.
CVSS Score: 6.0 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]4684&w=2; http://secunia.com/advisories/26464; http://www.securityfocus.com/bid/25318
CVE: CVE-2007-4378
Published: 2007-08-16
Description: Multiple format string vulnerabilities in Babo Violent 2 2.08.00 and earlier allow remote attackers to execute arbitrary code via format string specifiers in (1) a message or (2) certain data associated with an admin login.
CVSS Score: 6.8 (MEDIUM)
References: http://aluigi.altervista.org/adv/bv2x-adv.txt; http://secunia.com/advisories/26453; http://securityreason.com/securityalert/3024
CVE: CVE-2007-4379
Published: 2007-08-16
Description: Babo Violent 2 2.08.00 and earlier allows remote attackers to cause a denial of service (application crash) via (1) a value greater than 0x27 for the (a) 0xca, (b) 0xcb, (c) 0xcc, (d) 0xce, (e) 0xcf, or (f) 0xd0 data ID; (2) a nonexistent map name; or (3) a UDP packet that specifies a large data size.
CVSS Score: 4.3 (MEDIUM)
References: http://aluigi.altervista.org/adv/bv2x-adv.txt; http://secunia.com/advisories/26453; http://securityreason.com/securityalert/3024
CVE: CVE-2007-4380
Published: 2007-08-16
Description: Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 (6.8.378) allows local users to gain local System privileges via the Log File Viewer.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/26435; http://securityresponse.symantec.com/avcenter/security/Content/2007.08.13.html; http://www.irmplc.com/index.php/111-Vendor-Alerts
CVE: CVE-2007-4381
Published: 2007-08-17
Description: Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.
CVSS Score: 9.3 (HIGH)
References: http://dev2dev.bea.com/pub/advisory/248; http://docs.info.apple.com/article.html?artnum=307177; http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
CVE: CVE-2007-4382
Published: 2007-08-17
Description: CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type header.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/3027; http://www.securityfocus.com/archive/1/476259/100/100/threaded; http://www.securityfocus.com/bid/25299
CVE: CVE-2007-4383
Published: 2007-08-17
Description: PHP remote file inclusion vulnerability in tracking.php in Trackeur 1 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter.  NOTE: CVE and a third party dispute this vulnerability because header is defined before use.  The researcher is known to be unreliable
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/archive/1/476671/100/0/threaded; http://www.securityfocus.com/archive/1/476757/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/36046
CVE: CVE-2007-4384
Published: 2007-08-17
Description: Multiple PHP remote file inclusion vulnerabilities in depouilg.php3 in Stephane Pineau VOTE 1c allow remote attackers to execute arbitrary PHP code via a URL in the (1) NomVote and (2) FilePalHex parameters.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/archive/1/476672/100/0/threaded; http://www.securityfocus.com/bid/25335; https://exchange.xforce.ibmcloud.com/vulnerabilities/36047
CVE: CVE-2007-4385
Published: 2007-08-17
Description: OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests.  NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines.
CVSS Score: 6.8 (MEDIUM)
References: http://o0o.nu/~meder/o0o_bypassing_servlet_input_validation_filters.txt; http://osvdb.org/39544; http://secunia.com/advisories/26441
CVE: CVE-2007-4386
Published: 2007-08-17
Description: SQL injection vulnerability in search.php in GetMyOwnArcade allows remote attackers to execute arbitrary SQL commands via the query parameter.
CVSS Score: 6.0 (MEDIUM)
References: http://secunia.com/advisories/26502; http://www.osvdb.org/36510; http://www.securityfocus.com/bid/25345
CVE: CVE-2007-4387
Published: 2007-08-17
Description: Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/37667; http://secunia.com/advisories/26496; http://securityreason.com/securityalert/3026
CVE: CVE-2007-4388
Published: 2007-08-17
Description: 2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default.
CVSS Score: 10.0 (HIGH)
References: http://securityreason.com/securityalert/3026; http://www.securityfocus.com/archive/1/476595/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/36043
CVE: CVE-2007-4389
Published: 2007-08-17
Description: Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters.
CVSS Score: 7.8 (HIGH)
References: http://securityreason.com/securityalert/3026; http://www.hakim.ws/2wire/demodns.html; http://www.securityfocus.com/archive/1/476595/100/0/threaded
CVE: CVE-2007-4390
Published: 2007-08-17
Description: The Command Line Interface (CLI), aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://osvdb.org/39398; http://secunia.com/advisories/26495; http://securityreason.com/securityalert/3025
CVE: CVE-2007-4391
Published: 2007-08-17
Description: Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (application crash) via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the attacker's peer Yahoo! Messenger application when this request is accepted.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20, CWE-119
References: http://osvdb.org/38221; http://secunia.com/advisories/26501; http://www.avertlabs.com/research/blog/index.php/2007/08/15/more-on-the-yahoo-messenger-webcam-0day/
CVE: CVE-2007-4392
Published: 2007-08-17
Description: Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.
CVSS Score: 4.3 (MEDIUM)
References: http://morph3us.org/advisories/20070730-winamp-5.35.txt; http://securityreason.com/securityalert/3040; http://www.securityfocus.com/archive/1/475161/100/200/threaded
CVE: CVE-2007-4393
Published: 2007-08-17
Description: The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk partitions.
CVSS Score: 4.6 (MEDIUM)
References: http://osvdb.org/46403; http://secunia.com/advisories/26395; http://www.novell.com/linux/security/advisories/2007_16_sr.html
CVE: CVE-2007-4394
Published: 2007-08-17
Description: Unspecified vulnerability in a "core clean" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.1 and Enterprise Server 9 and 10 before 20070810 allows local users to delete of arbitrary files via unknown vectors.
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/46404; http://secunia.com/advisories/26395; http://www.novell.com/linux/security/advisories/2007_16_sr.html
CVE: CVE-2007-4395
Published: 2007-08-17
Description: Multiple unspecified vulnerabilities in the Role Based Access Control (RBAC) functionality in Sun Solaris 8 allow remote attackers who know the password for a role to gain privileges via that role.
CVSS Score: 7.6 (HIGH)
References: http://osvdb.org/36614; http://secunia.com/advisories/26494; http://sunsolve.sun.com/search/document.do?assetkey=1-26-103029-1
CVE: CVE-2007-4270
Published: 2007-08-18
Description: Multiple race conditions in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain root privileges via a symlink attack on certain files.
CVSS Score: 6.9 (MEDIUM)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=578; http://secunia.com/advisories/26471; http://securitytracker.com/id?1018581
CVE: CVE-2007-4271
Published: 2007-08-18
Description: Directory traversal vulnerability in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary files via a .. (dot dot) in an unspecified environment variable, which is appended to "/tmp/" and used as a log file.  NOTE: this issue might be related to symlink following.
CVSS Score: 2.1 (LOW)
CWE: CWE-22
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=579; http://secunia.com/advisories/26471; http://securitytracker.com/id?1018581
CVE: CVE-2007-4272
Published: 2007-08-18
Description: Multiple vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to create arbitrary files via (1) unspecified vectors where an attacker's umask is honored, (2) /etc/ld.so.preload, (3) certain "cron data file locations", and other unspecified vectors possibly involving the (4) OSSEMEMDBG or (5) TRC_LOG_FILE environment variable in db2licd (db2licm).
CVSS Score: 1.9 (LOW)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=580; http://secunia.com/advisories/26471; http://securitytracker.com/id?1018581
CVE: CVE-2007-4273
Published: 2007-08-18
Description: IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary directories and execute arbitrary code via a "crafted localized message file" that enables a format string attack, possibly involving the (1) OSSEMEMDBG or (2) TRC_LOG_FILE environment variable in db2licd (db2licm).
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-134
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=581; http://secunia.com/advisories/26471; http://securitytracker.com/id?1018581
CVE: CVE-2007-4275
Published: 2007-08-18
Description: Multiple untrusted search path vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain privileges via certain vectors related to (1) DB2 instance or FMP startup on Linux and Solaris; (2) exec of executables while running as root on non-Windows systems, as demonstrated by AIX; and unspecified vectors involving (3) db2licm and (4) db2pd.
CVSS Score: 6.9 (MEDIUM)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=582; http://secunia.com/advisories/26471; http://securitytracker.com/id?1018581
CVE: CVE-2007-4276
Published: 2007-08-18
Description: Stack-based buffer overflow in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows attackers to execute arbitrary code via a long DASPROF and possibly other environment variables, which are copied into the buildDasPaths buffer.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=583; http://secunia.com/advisories/26471; http://securitytracker.com/id?1018581
CVE: CVE-2007-4396
Published: 2007-08-18
Description: Multiple CRLF injection vulnerabilities in (1) ixmmsa.pl 0.3, (2) l33tmusic.pl 2.00, (3) mpg123.pl 0.01, (4) ogg123.pl 0.01, (5) xmms.pl 2.0, (6) xmms2.pl 1.1.3, and (7) xmmsinfo.pl 1.1.1.1 scripts for irssi before 0.8.11 allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
CVSS Score: 9.3 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065227.html; http://osvdb.org/39568; http://secunia.com/advisories/26483
CVE: CVE-2007-4397
Published: 2007-08-18
Description: Multiple CRLF injection vulnerabilities in (1) xmms-thing 1.0, (2) XMMS Remote Control Script 1.07, (3) Disrok 1.0, (4) a2x 0.0.1, (5) Another xmms-info script 1.0, (6) XChat-XMMS 0.8.1, and other unspecified scripts for XChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065227.html; http://osvdb.org/39574; http://osvdb.org/39575
CVE: CVE-2007-4398
Published: 2007-08-18
Description: Multiple CRLF injection vulnerabilities in the (1) now-playing.rb and (2) xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
CVSS Score: 6.8 (MEDIUM)
References: http://git.sv.gnu.org/gitweb/?p=weechat/scripts.git%3Ba=commit%3Bh=7429c29a2fab6d7493c0188b5f631a7c2ae1533d; http://git.sv.gnu.org/gitweb/?p=weechat/scripts.git%3Ba=commit%3Bh=76f7f7b502352ba2b823e3388a2ca88840fd1945; http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065227.html
CVE: CVE-2007-4399
Published: 2007-08-18
Description: CRLF injection vulnerability in the xmms.bx 1.0 script for BitchX allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065227.html; http://osvdb.org/37481; http://secunia.com/advisories/26489