deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-5775
Published: 2007-11-01
Description: Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024.  NOTE: as of 20071029, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://research.eeye.com/html/advisories/upcoming/20071024.html; http://www.securityfocus.com/bid/26210; http://research.eeye.com/html/advisories/upcoming/20071024.html
CVE: CVE-2007-5776
Published: 2007-11-01
Description: Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote attackers to read arbitrary files via encoded backslash sequences in the d parameter, as demonstrated by a "%5c../../%5c" sequence.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/43628; http://securityreason.com/securityalert/3330; http://www.securityfocus.com/archive/1/482788/100/0/threaded
CVE: CVE-2007-5777
Published: 2007-11-01
Description: Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a base64-encoded password via a direct request for igallery.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/43629; http://securityreason.com/securityalert/3330; http://www.securityfocus.com/archive/1/482788/100/0/threaded
CVE: CVE-2007-5778
Published: 2007-11-01
Description: Mobile Spy (1) stores login credentials in cleartext under the RetinaxStudios registry key, and (2) sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: http://osvdb.org/43625; http://osvdb.org/43626; http://securityreason.com/securityalert/3333
CVE: CVE-2007-5779
Published: 2007-11-01
Description: Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player (GOM Player) 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/27418; http://www.gomplayer.com/forum/viewtopic.html?t=1013; http://www.securityfocus.com/bid/26236
CVE: CVE-2007-5780
Published: 2007-11-01
Description: PHP remote file inclusion vulnerability in pub/pub08_comments.php in teatro 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/482910/100/0/threaded; http://www.securityfocus.com/bid/26231; http://www.vupen.com/english/advisories/2007/3637
CVE: CVE-2007-5781
Published: 2007-11-01
Description: PHP remote file inclusion vulnerability in inc/sige_init.php in Sige 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the SYS_PATH parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/27413; http://www.securityfocus.com/bid/26230; http://www.vupen.com/english/advisories/2007/3638
CVE: CVE-2007-5782
Published: 2007-11-01
Description: Directory traversal vulnerability in dl.php in FireConfig 0.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/26222; http://www.vupen.com/english/advisories/2007/3641; https://exchange.xforce.ibmcloud.com/vulnerabilities/38124
CVE: CVE-2007-5783
Published: 2007-11-01
Description: SQL injection vulnerability in emc.asp in emagiC CMS.Net 4.0 allows remote attackers to execute arbitrary SQL commands via the pageId parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/26229; http://www.vupen.com/english/advisories/2007/3642; https://exchange.xforce.ibmcloud.com/vulnerabilities/38119
CVE: CVE-2007-5784
Published: 2007-11-01
Description: PHP remote file inclusion vulnerability in index.php in CaupoShop Pro 2.x allows remote attackers to execute arbitrary PHP code via a URL in the action parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://www.securityfocus.com/bid/26239; http://www.vupen.com/english/advisories/2007/3643; https://exchange.xforce.ibmcloud.com/vulnerabilities/38122
CVE: CVE-2007-5785
Published: 2007-11-01
Description: SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/27443; http://www.securityfocus.com/bid/26225; http://www.vupen.com/english/advisories/2007/3644
CVE: CVE-2007-5786
Published: 2007-11-01
Description: Multiple PHP remote file inclusion vulnerabilities in GoSamba 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) HTML_oben.php, (2) inc_freigabe.php, (3) inc_freigabe1.php, or (4) inc_freigabe3.php in include/; (5) inc_group.php; (6) inc_manager.php; (7) inc_newgroup.php; (8) inc_smb_conf.php; (9) inc_user.php; or (10) main.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/26223; http://www.vupen.com/english/advisories/2007/3646; https://exchange.xforce.ibmcloud.com/vulnerabilities/38123
CVE: CVE-2007-5787
Published: 2007-11-01
Description: Micro Login System 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a password via a direct request for userpwd.txt.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/40641; http://secunia.com/advisories/27422; http://securityreason.com/securityalert/3328
CVE: CVE-2007-5788
Published: 2007-11-01
Description: Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service (device crash) via a crafted SIP INVITE message.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: http://osvdb.org/40187; http://secunia.com/advisories/27401; http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=361
CVE: CVE-2007-5789
Published: 2007-11-01
Description: The Grandstream HT-488 0.1 allows remote attackers to cause a denial of service (device crash) via a flood of fragmented packets to port 5060.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/40186; http://secunia.com/advisories/27401; http://www.securityfocus.com/bid/26349
CVE: CVE-2007-5790
Published: 2007-11-01
Description: The Globe7 soft phone client 7.3 uses weak cryptography (reversed sequence of binary values) for the password, which might allow local users to obtain sensitive information.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://secunia.com/advisories/27400; http://www.securityfocus.com/bid/26195; http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=364
CVE: CVE-2007-5791
Published: 2007-11-01
Description: The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legitimate server, which allows remote attackers to send spoofed INVITE messages, as demonstrated by a flood of messages triggering a denial of service, and by phone calls with malicious content.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://osvdb.org/38524; http://osvdb.org/38525; http://secunia.com/advisories/27380
CVE: CVE-2007-5792
Published: 2007-11-01
Description: The Vonage Motorola Phone Adapter VT 2142-VD does not encrypt RTP packets, which might allow remote attackers to eavesdrop by sniffing the network and reconstructing the RTP session.
CVSS Score: 7.1 (HIGH)
CWE: CWE-310
References: http://www.securityfocus.com/bid/26129; http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=359; https://exchange.xforce.ibmcloud.com/vulnerabilities/37418
CVE: CVE-2007-5793
Published: 2007-11-01
Description: Stonesoft StoneGate IPS before 4.0 does not properly decode Fullwidth/Halfwidth Unicode encoded data, which makes it easier for remote attackers to scan or penetrate systems and avoid detection.
CVSS Score: 7.1 (HIGH)
References: http://osvdb.org/40627; http://secunia.com/advisories/27455; http://www.kb.cert.org/vuls/id/739224
CVE: CVE-2007-4829
Published: 2007-11-02
Description: Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/40410; http://rt.cpan.org/Public/Bug/Display.html?id=29517; http://rt.cpan.org/Public/Bug/Display.html?id=30380
CVE: CVE-2007-5197
Published: 2007-11-02
Description: Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://bugs.gentoo.org/attachment.cgi?id=134361&action=view; http://bugs.gentoo.org/show_bug.cgi?id=197067; http://secunia.com/advisories/27439
CVE: CVE-2007-5660
Published: 2007-11-02
Description: Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and InstallShield 2008 allows remote attackers to execute arbitrary code via an unspecified "unsafe method," possibly involving a buffer overflow.
CVSS Score: 9.3 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=618; http://osvdb.org/38347; http://secunia.com/advisories/27475
CVE: CVE-2007-5795
Published: 2007-11-02
Description: The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration.
CVSS Score: 6.3 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008; http://bugs.gentoo.org/show_bug.cgi?id=197958; http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lisp/files.el?r1=1.896.2.28&r2=1.896.2.29
CVE: CVE-2007-5767
Published: 2007-11-02
Description: Heap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager 3.8 before Update 1.5 allows remote attackers to execute arbitrary code via a validation request in which the Novell tree name is not properly delimited with a wide-character backslash or NULL character.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://download.novell.com/Download?buildid=AuOWp2Xsvmc~; http://secunia.com/advisories/27468; http://securitytracker.com/id?1018882
CVE: CVE-2007-5796
Published: 2007-11-03
Description: Cross-site scripting (XSS) vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/27452; http://www.bluecoat.com/support/securityadvisories/advisory_cross-site_scripting_vulnerability; http://www.securitytracker.com/id?1018888
CVE: CVE-2007-5797
Published: 2007-11-03
Description: SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://osvdb.org/38662; http://secunia.com/advisories/27478; http://secunia.com/advisories/27482
CVE: CVE-2007-5798
Published: 2007-11-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to inject arbitrary web script or HTML via the (1) keyField, (2) nameField, (3) valueField, and (4) frameReturn parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/41618; http://secunia.com/advisories/27448; http://www-1.ibm.com/support/docview.wss?uid=swg1PK50245
CVE: CVE-2007-5799
Published: 2007-11-03
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to perform some actions as WAS UDDI users via the (1) keyField, (2) nameField, (3) valueField, and (4) frameReturn parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/41619; http://secunia.com/advisories/27448; http://www-1.ibm.com/support/docview.wss?uid=swg1PK50245
CVE: CVE-2007-5800
Published: 2007-11-03
Description: Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to execute arbitrary PHP code via a URL in the bkpwp_plugin_path parameter to (1) plugins/BackUp/Archive.php; and (2) Predicate.php, (3) Writer.php, (4) Reader.php, and other unspecified scripts under plugins/BackUp/Archive/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/38476; http://osvdb.org/38477; http://osvdb.org/38478
CVE: CVE-2007-5801
Published: 2007-11-03
Description: Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/42035; http://secunia.com/advisories/27426; http://sourceforge.net/project/shownotes.php?release_id=549763
CVE: CVE-2007-5802
Published: 2007-11-03
Description: Directory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.  NOTE: this can be leveraged to obtain the path by including a local PHP script with a duplicate function declaration.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://osvdb.org/38371; http://secunia.com/advisories/27466; http://securityreason.com/securityalert/3335
CVE: CVE-2007-4217
Published: 2007-11-05
Description: Stack-based buffer overflow in the domacro function in ftp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long parameter to a macro, as demonstrated by executing a macro via the '$' command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: ftp://aix.software.ibm.com/aix/efixes/security/ftp_ifix.tar; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=616; http://secunia.com/advisories/27437
CVE: CVE-2007-4513
Published: 2007-11-05
Description: Multiple stack-based buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via a long argument to the (1) "-p" option to lqueryvg or (2) the "-V" option to lquerypv.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: ftp://aix.software.ibm.com/aix/efixes/security/lquerypv_ifix.tar; ftp://aix.software.ibm.com/aix/efixes/security/lqueryvg_ifix.tar; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=614
CVE: CVE-2007-4621
Published: 2007-11-05
Description: Buffer overflow in crontab in IBM AIX 5.2 allows local users to gain privileges via long command line arguments.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: ftp://aix.software.ibm.com/aix/efixes/security/crontab_ifix.tar; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=612; http://secunia.com/advisories/27437
CVE: CVE-2007-4622
Published: 2007-11-05
Description: Integer underflow in the dns_name_fromtext function in (1) libdns_nonsecure.a and (2) libdns_secure.a in IBM AIX 5.2 allows local users to gain privileges via a crafted "-y" (TSIG key) command line argument to dig.
CVSS Score: 7.2 (HIGH)
CWE: CWE-189
References: ftp://aix.software.ibm.com/aix/efixes/security/dig_ifix.tar; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=613; http://secunia.com/advisories/27437
CVE: CVE-2007-4623
Published: 2007-11-05
Description: Stack-based buffer overflow in the sendrmt function in bellmail in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via a long parameter to the m command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: ftp://aix.software.ibm.com/aix/efixes/security/bellmail_ifix.tar; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=617; http://secunia.com/advisories/27437
CVE: CVE-2007-0011
Published: 2007-11-05
Description: The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or browser cache.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/45288; http://secunia.com/advisories/26143; http://securitytracker.com/id?1018435
CVE: CVE-2007-5804
Published: 2007-11-05
Description: cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument.
CVSS Score: 6.9 (MEDIUM)
References: ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611; http://secunia.com/advisories/27437
CVE: CVE-2007-5805
Published: 2007-11-05
Description: cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument.  NOTE: this issue is due to an incomplete fix for CVE-2007-5804.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611; http://secunia.com/advisories/27437
CVE: CVE-2007-5806
Published: 2007-11-05
Description: Cross-site scripting (XSS) vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the (1) mailing or (2) forum component, as demonstrated using the style and onmouseover HTML attributes.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://downloads.sourceforge.net/ilias/ilias.3.8.3.security.patch.zip; http://osvdb.org/38328; http://secunia.com/advisories/27457
CVE: CVE-2007-5807
Published: 2007-11-05
Description: Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/40230; http://www.securityfocus.com/bid/26247; http://osvdb.org/40230
CVE: CVE-2007-5808
Published: 2007-11-05
Description: Unspecified vulnerability in the Groupmax Collaboration - Schedule component in Hitachi Groupmax Collaboration Portal 07-30 through 07-30-/F and 07-32 through 07-32-/C, uCosminexus Collaboration Portal 06-30 through 06-30-/F and 06-32 through 06-32-/C, and Groupmax Collaboration Web Client - Mail/Schedule 07-30 through 07-30-/F and 07-32 through 07-32-/B might allow remote attackers to obtain sensitive information via unspecified vectors related to schedule portlets.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/42025; http://secunia.com/advisories/27451; http://www.hitachi-support.com/security_e/vuls_e/HS07-036_e/index-e.html
CVE: CVE-2007-5809
Published: 2007-11-05
Description: Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/42027; http://secunia.com/advisories/27421; http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html
CVE: CVE-2007-5810
Published: 2007-11-05
Description: Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/42026; http://secunia.com/advisories/27421; http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html
CVE: CVE-2007-5811
Published: 2007-11-05
Description: Directory traversal vulnerability in PageTraiteDownload.php in phpMyConferences 8.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter.  NOTE: this issue is disputed for 8.0.2 by a reliable third party, who notes that the PHP code is syntactically incorrect and cannot be executed
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/39018; http://www.attrition.org/pipermail/vim/2007-October/001844.html; http://www.attrition.org/pipermail/vim/2007-October/001845.html
CVE: CVE-2007-5812
Published: 2007-11-05
Description: Directory traversal vulnerability in modules/Builder/DownloadModule.php in ModuleBuilder 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/38186; https://www.exploit-db.com/exploits/4591; https://exchange.xforce.ibmcloud.com/vulnerabilities/38186
CVE: CVE-2007-5813
Published: 2007-11-05
Description: Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) ticketid and (2) filename parameters.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/27470; http://www.securityfocus.com/bid/26277; https://exchange.xforce.ibmcloud.com/vulnerabilities/38187
CVE: CVE-2007-5603
Published: 2007-11-05
Description: Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allows remote attackers to execute arbitrary code via a long string in the second argument to the AddRouteEntry method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/27469; http://securityreason.com/securityalert/3342; http://www.kb.cert.org/vuls/id/298521
CVE: CVE-2007-5814
Published: 2007-11-05
Description: Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allow remote attackers to execute arbitrary code via a long (1) serverAddress, (2) sessionId, (3) clientIPLower, (4) clientIPHigher, (5) userName, (6) domainName, or (7) dnsSuffix Unicode property value.  NOTE: the AddRouteEntry vector is covered by CVE-2007-5603.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/27469; http://securityreason.com/securityalert/3342; http://www.sec-consult.com/303.html
CVE: CVE-2007-5815
Published: 2007-11-05
Description: Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/27469; http://securityreason.com/securityalert/3342; http://www.sec-consult.com/303.html