deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-6053
Published: 2007-11-20
Description: IBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an unknown impact involving "memory corruption." NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www-1.ibm.com/support/docview.wss?uid=swg1IZ04039; http://www-1.ibm.com/support/docview.wss?uid=swg21255607; http://www.securityfocus.com/bid/26450
CVE: CVE-2007-6054
Published: 2007-11-20
Description: Cross-site scripting (XSS) vulnerability in the login page in the management interface in the Aruba 800 Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the /screens URI, related to the url variable.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://arubanetworks.com/support/alerts/aid-070907b.asc; http://osvdb.org/45301; http://securityreason.com/securityalert/3380
CVE: CVE-2007-6055
Published: 2007-11-20
Description: Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter.  NOTE: this issue reportedly exists because of a regression that followed a fix at an unspecified earlier date.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/38702; http://secunia.com/advisories/27537; http://secunia.com/advisories/34714
CVE: CVE-2007-6056
Published: 2007-11-20
Description: frame.html in Aida-Web (Aida Web) allows remote attackers to bypass a protection mechanism and obtain comment and task details via modified values to the (1) Mehr and (2) SUPER parameters.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/45300; http://securityreason.com/securityalert/3385; http://www.securityfocus.com/archive/1/483749/100/0/threaded
CVE: CVE-2007-6057
Published: 2007-11-20
Description: PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3691&w=2; http://osvdb.org/38733; http://secunia.com/advisories/27723
CVE: CVE-2007-6058
Published: 2007-11-20
Description: Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) codes action in the profile-codes module, (2) videos action in the video-codes module, or (3) games action in the arcade-games module.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://advisories.echo.or.id/adv/adv84-K-159-2007.txt; http://secunia.com/advisories/27730; http://www.securityfocus.com/archive/1/483889/100/0/threaded
CVE: CVE-2007-6059
Published: 2007-11-20
Description: Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as username and password, and the domain portion of this address yields a Java UnknownHostException error, which allows remote attackers to cause a denial of service (connection pool exhaustion) via a large number of requests, resulting in a SQLNestedException.  NOTE: Sun disputes this issue, stating "The report makes references to source code and files that do not exist in the mentioned products.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/bugtraq/2007-11/0239.html; http://osvdb.org/45299; http://archives.neohapsis.com/archives/bugtraq/2007-11/0239.html
CVE: CVE-2007-6060
Published: 2007-11-20
Description: AhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a filename string at a location indicated by the "Filename length" field in a ZIP header, which allows remote attackers to cause a denial of service (machine crash) and possibly execute arbitrary code via a ZIP file in which this field's value is larger than the actual number of bytes in the filename.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://global.ahnlab.com/global/notice_view.ESD?fmethod=view&press_seq=803&printNum=2; http://osvdb.org/42352; http://secunia.com/advisories/27757
CVE: CVE-2007-6061
Published: 2007-11-20
Description: Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run.  NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-59
References: http://bugs.gentoo.org/show_bug.cgi?id=199751; http://secunia.com/advisories/27841; http://secunia.com/advisories/29206
CVE: CVE-2007-6062
Published: 2007-11-20
Description: irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service (crash) via a JOIN command without a channel argument.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://arthur.barton.de/pipermail/ngircd-ml/2007-July/000292.html; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=451875; http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=10%3Bfilename=90-remote-vulnerability.dpatch%3Batt=1%3Bbug=451875
CVE: CVE-2007-6063
Published: 2007-11-21
Description: Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-119
References: http://bugzilla.kernel.org/show_bug.cgi?id=9416; http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html
CVE: CVE-2007-6077
Published: 2007-11-21
Description: The session fixation protection mechanism in cgi_process.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookie_only attribute from the DEFAULT_SESSION_OPTIONS constant, which effectively causes cookie_only to be applied only to the first instantiation of CgiRequest, which allows remote attackers to conduct session fixation attacks.  NOTE: this is due to an incomplete fix for CVE-2007-5380.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-362
References: http://dev.rubyonrails.org/changeset/8177; http://dev.rubyonrails.org/ticket/10048; http://docs.info.apple.com/article.html?artnum=307179
CVE: CVE-2007-5499
Published: 2007-11-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Notes: none
CVE: CVE-2007-5612
Published: 2007-11-21
Description: CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service (CPU consumption, connection slot exhaustion, and daemon crash) via a large number of idle connections.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/27752; http://securitytracker.com/id?1018985; http://www.kb.cert.org/vuls/id/512193
CVE: CVE-2007-6078
Published: 2007-11-21
Description: Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) nc_top.asp; (2) inc_bookmarks.asp, possibly involving a parameter passed from cp_main.asp; (3) inc_profile_functions.asp; or (4) inc_SUBSCRIPTIONS.asp; or the (5) Avatar_URL, (6) LINK1, or (7) LINK2 parameter to cp_main.asp in an EditIt action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.kb.cert.org/vuls/id/315107; http://www.securityfocus.com/bid/26504; https://exchange.xforce.ibmcloud.com/vulnerabilities/38595
CVE: CVE-2007-6079
Published: 2007-11-21
Description: Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the xoopsOption[pagetype] parameter to the default URI for modules/news/.  NOTE: this can be leveraged by using legitimate product functionality to upload a file that contains the code, then including that file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/26505; http://www.vupen.com/english/advisories/2007/3962; https://exchange.xforce.ibmcloud.com/vulnerabilities/38592
CVE: CVE-2007-6080
Published: 2007-11-21
Description: SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the bid parameter.  NOTE: it was later reported that 1.0.13 is also affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/26505; http://www.securityfocus.com/bid/31941; http://www.securityfocus.com/bid/31941/exploit
CVE: CVE-2007-6081
Published: 2007-11-21
Description: AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://forums.adventnet.com/viewtopic.php?t=247521; http://osvdb.org/42423; http://secunia.com/advisories/27833
CVE: CVE-2007-6082
Published: 2007-11-22
Description: Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject arbitrary PHP code via the filecontents parameter, which can be executed by accessing includes/news.php.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://securityreason.com/securityalert/3388; http://www.r57.li/exploit.txt; http://www.securityfocus.com/archive/1/483867/100/0/threaded
CVE: CVE-2007-6083
Published: 2007-11-22
Description: SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38732; http://secunia.com/advisories/27709; http://www.aeroxteam.fr/advisory-IceBB-1.0rc6.txt
CVE: CVE-2007-6084
Published: 2007-11-22
Description: SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/26485; https://exchange.xforce.ibmcloud.com/vulnerabilities/38554; https://www.exploit-db.com/exploits/4633
CVE: CVE-2007-6085
Published: 2007-11-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the (1) vedipm or (2) live_chat module.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/483907/100/0/threaded; http://www.securityfocus.com/bid/26484; https://exchange.xforce.ibmcloud.com/vulnerabilities/38556
CVE: CVE-2007-6086
Published: 2007-11-22
Description: Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the module parameter.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/483907/100/0/threaded; http://www.securityfocus.com/bid/26484; https://exchange.xforce.ibmcloud.com/vulnerabilities/38557
CVE: CVE-2007-6087
Published: 2007-11-22
Description: Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the admin password via certain parameters to the changepass module.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/archive/1/483907/100/0/threaded; http://www.securityfocus.com/bid/26484; https://exchange.xforce.ibmcloud.com/vulnerabilities/38558
CVE: CVE-2007-6088
Published: 2007-11-22
Description: PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBBViet 02.03.07 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/38734; http://secunia.com/advisories/27698; http://www.securityfocus.com/bid/26482
CVE: CVE-2007-6089
Published: 2007-11-22
Description: PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote attackers to execute arbitrary PHP code via a URL in the action parameter.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/38743; http://secunia.com/advisories/27722; http://www.securityfocus.com/bid/26480
CVE: CVE-2007-6090
Published: 2007-11-22
Description: Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://downloads.securityfocus.com/vulnerabilities/exploits/26458.txt; http://www.securityfocus.com/bid/26458; http://downloads.securityfocus.com/vulnerabilities/exploits/26458.txt
CVE: CVE-2007-6091
Published: 2007-11-22
Description: Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38740; http://osvdb.org/38741; http://secunia.com/advisories/27713
CVE: CVE-2007-6092
Published: 2007-11-22
Description: Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors.  NOTE: it is not clear whether this issue crosses privilege boundaries.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/42175; http://secunia.com/advisories/27688; http://www.ingate.com/relnote-460.php
CVE: CVE-2007-6093
Published: 2007-11-22
Description: The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service (kernel crash) via an RTCP index that is "much more than expected."
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://osvdb.org/42174; http://secunia.com/advisories/27688; http://www.ingate.com/relnote-460.php
CVE: CVE-2007-6094
Published: 2007-11-22
Description: The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service (module crash) via an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy (PFS).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/42173; http://secunia.com/advisories/27688; http://www.ingate.com/relnote-460.php
CVE: CVE-2007-6095
Published: 2007-11-22
Description: The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/42172; http://secunia.com/advisories/27688; http://www.ingate.com/relnote-460.php
CVE: CVE-2007-6096
Published: 2007-11-22
Description: Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow attackers to read these passwords via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://osvdb.org/42171; http://secunia.com/advisories/27688; http://www.ingate.com/relnote-460.php
CVE: CVE-2007-6097
Published: 2007-11-22
Description: Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and remote attack vectors, related to ICMP packets that are "incorrectly accepted."
CVSS Score: 10.0 (HIGH)
References: http://www.ingate.com/relnote-460.php; http://www.securityfocus.com/bid/26486; http://www.ingate.com/relnote-460.php
CVE: CVE-2007-6098
Published: 2007-11-22
Description: Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical access to guess valid login credentials while avoiding detection.
CVSS Score: 7.5 (HIGH)
References: http://www.ingate.com/relnote-460.php; http://www.securityfocus.com/bid/26486; http://www.ingate.com/relnote-460.php
CVE: CVE-2007-6099
Published: 2007-11-22
Description: Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave "media pinholes" open upon a restart of the SIP module, which might make it easier for remote attackers to conduct unauthorized activities.
CVSS Score: 10.0 (HIGH)
References: http://www.ingate.com/relnote-460.php; http://www.ingate.com/relnote-460.php
CVE: CVE-2007-6100
Published: 2007-11-23
Description: Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated with the cookie auth_type, allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter to index.php, a different vulnerability than CVE-2005-0992.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html; http://secunia.com/advisories/27748; http://secunia.com/advisories/29323
CVE: CVE-2007-6101
Published: 2007-11-23
Description: Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list ranges in unspecified IMAP commands, and possibly (2) a blank string in unspecified messages.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/42399; http://osvdb.org/42400; http://secunia.com/advisories/27736
CVE: CVE-2007-6102
Published: 2007-11-23
Description: Cross-site scripting (XSS) vulnerability in Feed to JavaScript (Feed2JS) 1.91 allows remote attackers to inject arbitrary web script or HTML via a URL in a feed.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://eduforge.org/forum/forum.php?forum_id=1227; http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/38870
CVE: CVE-2007-6103
Published: 2007-11-23
Description: I Hear U (IHU) 0.5.6 and earlier allows remote attackers to cause (1) a denial of service (infinite loop) via a packet that contains zero in the size field in its header, which is improperly handled by the Receiver::processPacket function; and (2) a denial of service (daemon crash) via an (a) IHU_INFO_INIT or a (b) IHU_INFO_RING packet that does not specify the mode, which is improperly handled by the Player::ring function in Player.cpp.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/ihudos-adv.txt; http://osvdb.org/42395; http://osvdb.org/42396
CVE: CVE-2007-6104
Published: 2007-11-23
Description: Cross-site scripting (XSS) vulnerability in the Instant Web Publishing feature in FileMaker Pro 7 and 8, Server 7 and 8, and Developer 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/38874; http://secunia.com/advisories/27750
CVE: CVE-2007-6105
Published: 2007-11-23
Description: Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) language_file parameter to (a) comments-display-tpl.php and (b) addons/separate-comments-mod/my-comments-display-tpl.php and the (2) config[comments_form_tpl] parameter to comments-display-tpl.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/38815; http://osvdb.org/38816; http://secunia.com/advisories/27767
CVE: CVE-2007-6106
Published: 2007-11-23
Description: SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://advisories.echo.or.id/adv/adv85-K-159-2007.txt; http://secunia.com/advisories/27766; http://www.securityfocus.com/archive/1/484056/100/0/threaded
CVE: CVE-2007-6110
Published: 2007-11-23
Description: Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453278; http://secunia.com/advisories/27850; http://secunia.com/advisories/27890
CVE: CVE-2007-6111
Published: 2007-11-23
Description: Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified vectors to the NCP dissector.
CVSS Score: 7.1 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=199958; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html; http://secunia.com/advisories/27777
CVE: CVE-2007-6112
Published: 2007-11-23
Description: Buffer overflow in the PPP dissector Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=199958; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html; http://secunia.com/advisories/27777
CVE: CVE-2007-6113
Published: 2007-11-23
Description: Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service (long loop) via a malformed DNP3 packet.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://bugs.gentoo.org/show_bug.cgi?id=199958; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html; http://secunia.com/advisories/27777
CVE: CVE-2007-6114
Published: 2007-11-23
Description: Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=199958; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html; http://secunia.com/advisories/27777
CVE: CVE-2007-6115
Published: 2007-11-23
Description: Buffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6, when running on unspecified platforms, allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=199958; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html; http://secunia.com/advisories/27777
CVE: CVE-2007-6116
Published: 2007-11-23
Description: The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite loop or crash) via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=199958; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html; http://secunia.com/advisories/27777
CVE: CVE-2007-6117
Published: 2007-11-23
Description: Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted chunked messages.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=199958; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html; http://secunia.com/advisories/27777