rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-0345 
The (1) Activity Monitor.app/Contents/Resources/pmTool, (2) Keychain Access.app/Contents/Resources/kcproxy, and (3) ODBC Administrator.app/Contents/Resources/iodbcadmintool programs in /Applications/Utilities/ in Mac OS X 10.4.8 have weak permissions (writable by admin group), which allows local admin users to gain root privileges by modifying a program and then performing permissions repair via diskutil.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0346 
SQL injection vulnerability in index.php in SmE FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the us parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0347 
The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which allows remote authenticated users to execute limited SQL injection attacks and cause a denial of service (database error) via a ' character in certain messages, tickets, or Wiki entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-29T20:00:00.000Z
CVE-2007-0348 
Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T19:00:00.000Z
CVE-2007-0349 
Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. (dot dot) in the gateway parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T00:00:00.000Z
CVE-2007-0350 
Multiple SQL injection vulnerabilities in (a) index.php and (b) dl.php in SmE FileMailer 1.21 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ps, (2) us, (3) f, or (4) code parameter.  NOTE: the us vector in index.php is already covered by CVE-2007-0346.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0351 
Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain the privileges of a previous system user, possibly related to user profile unload failure. NOTE: it is not clear whether this is an issue in Windows itself, or an interaction with another product.  The issue might involve ZoneAlarm not being able to terminate processes when it cannot prompt the user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0352 
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a crafted .cnt file composed of lines that begin with an integer followed by a space and a long string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0353 
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0354 
SQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0355 
Buffer overflow in the Apple Minimal SLP v2 Service Agent (slpd) in Mac OS X 10.4.11 and earlier, including 10.4.8, allows local users, and possibly remote attackers, to gain privileges and possibly execute arbitrary code via a registration request with an invalid attr-list field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0356 
The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long CCRP.RootFolder property value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0357 
Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C (URL-encoded dot dot backslash) sequences in a URI requested from the AR7 webserver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0358 
Unspecified vulnerability in the FTP server implementation in HP Jetdirect firmware x.20.nn through x.24.nn allows remote attackers to cause a denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0359 
PHP remote file inclusion vulnerability in frontpage.php in Uberghey CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the setup_folder parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0360 
PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0361 
PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execute arbitrary PHP code via a URL in the chem parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0362 
Cross-site scripting (XSS) vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to tag attributes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0363 
Cross-site scripting (XSS) vulnerability in admin-search.php in (1) Openads for PostgreSQL (aka phpPgAds) before 2.0.10 and (2) Openads (aka phpAdsNew) before 2.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T01:00:00.000Z
CVE-2007-0364 
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to (a) suggest_category.php; the (2) u parameter to (b) user_detail.php; the (3) friend_name, (4) friend_email, (5) error_msg, (6) my_name, (7) my_email, and (8) id parameters to (c) tell_friend.php; the (9) error_msg, (10) email, (11) name, and (12) subject parameters to (d) sendmail.php; the (13) email, (14) error_msg, and (15) username parameters to (e) send_pwd.php; the (16) keyword parameter to (f) search.php; the (17) error_msg, (18) username, (19) password, (20) password2, and (21) email parameters to (g) register.php; the (22) url, (23) contact_name, and (24) email parameters to (h) power_search.php; the (25) path and (26) total parameters to (i) new.php; the (27) query parameter to (j) modify.php; the (28) error_msg parameter to (k) login.php; the (29) error_msg and (30) email parameters to (l) mailing_list.php; the (31) gateway parameter to (m) upgrade.php; and another unspecified vector.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T19:00:00.000Z
CVE-2007-0365 
Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.009 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: this is probably a different vulnerability than CVE-2006-5830.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T19:00:00.000Z
CVE-2007-0366 
Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH that points to a malicious ipfw program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T21:00:00.000Z
CVE-2007-0367 
Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, including the configuration file, which allows local users to have an unknown impact by creating, modifying, or deleting files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T21:00:00.000Z
CVE-2007-0368 
Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string in the MBSE_ROOT environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0369 
SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to execute arbitrary SQL commands via the comment forum.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0370 
Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to inject arbitrary PHP code into an upload/banners/ file via a banners add operation that uploads the PHP code through an image_form parameter specifying a multiple-extension filename such as .jpg.vil.gif.php, which is stored in upload/banners/ under a different name, and executable via a direct request.  NOTE: a separate SQL injection issue could be leveraged to make this vulnerability reachable by remote unauthenticated attackers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0371 
A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long CCRP_BDc.SelectedFolder property value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0372 
Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via (1) the active parameter in admin/modules/modules.php; the (2) ad_class, (3) imageurl, (4) clickurl, (5) ad_code, or (6) position parameter in modules/Advertising/admin/index.php; or unspecified vectors in the (7) advertising, (8) weblinks, or (9) reviews section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0373 
Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute arbitrary SQL commands via (1) the searchword parameter in certain files; the where parameter in (2) plugins/search/content.php or (3) plugins/search/weblinks.php; the text parameter in (4) plugins/search/contacts.php, (5) plugins/search/categories.php, or (6) plugins/search/sections.php; or (7) the email parameter in database/table/user.php, which is not properly handled by the check function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0374 
SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0375 
Joomla! 1.5.0 Beta allows remote attackers to obtain sensitive information via a direct request for (1) plugins/user/example.php; (2) gmail.php, (3) example.php, or (4) ldap.php in plugins/authentication/; (5) modules/mod_mainmenu/menu.php; or other unspecified PHP scripts, which reveals the path in various error messages, related to a jimport function call at the beginning of each script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0376 
Cross-site scripting (XSS) vulnerability in Virtuemart 1.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0377 
Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in kernel/group.php in core, (2) the lid parameter in class/table_broken.php in the Weblinks module, and other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0378 
Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0379 
Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0380 
DocMan 1.3 RC2 allows remote attackers to obtain sensitive information (the full path) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0381 
Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters.  NOTE: CVE analysis suggests that the vendor fixed these issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0382 
Multiple SQL injection vulnerabilities in letterman.class.php in the Letterman 1.2.3 (com_letterman) component for Joomla! before 1.0.12 allow remote attackers to execute arbitrary SQL commands via the id parameter, related to the (1) lm_sendMail, (2) saveNewsletter, and (3) cancelNewsletter functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0383 
WDaemon 9.5.4 allows remote attackers to access the /WorldClient.dll URI on TCP port 3000, which has unknown impact.  NOTE: The researcher reports that the vendor response was "this is not a security bug.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0384 
Cross-site scripting (XSS) vulnerability in preview in the reviews section in PostNuke 0.764 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0385 
The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information (the full path) via "unvalidated output" in FAQ/index.php, possibly involving an undefined id_cat variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0386 
Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0387 
SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 (com_weblinks) allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0388 
SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids[1] and other boardids[] parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0389 
Directory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and ArsDigita Community Education Solution (ACES) 1.1, allows remote attackers to read arbitrary files via .%252e/ (double-encoded dot dot slash) sequences in the URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0390 
Cross-site scripting (XSS) vulnerability in index.php in sabros.us 1.7 allows remote attackers to inject arbitrary web script or HTML via the tag parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0391 
Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attackers to execute arbitrary code via certain scan job settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0392 
IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0393 
Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0394 
HP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0395 
PHP remote file inclusion vulnerability in libraries/grab_globals.lib.php in ComVironment 4.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0396 
Unspecified vulnerability in HP-UX B.11.23, when running IPFilter in combination with PHNE_34474, allows remote attackers to cause a denial of service (system crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-19T23:00:00.000Z
CVE-2007-0397 
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS certificates or SSH public keys when connecting to devices, which allows remote attackers to spoof those devices to obtain sensitive information or generate incorrect information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-20T01:00:00.000Z
CVE-2007-0398 
Multiple cross-site scripting (XSS) vulnerabilities in forum.php3 in Arnaud Guyonne (aka Arnotic) a-forum allow remote attackers to inject arbitrary web script or HTML via the (1) Sujet or (2) Pseudo field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-22T18:00:00.000Z
CVE-2007-0399 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1.1 RC3 allow remote authenticated users to inject arbitrary web script or HTML via the (1) recipient or (2) BCC field when selecting send in a pm action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-22T18:00:00.000Z
CVE-2007-0400 
Cross-site scripting (XSS) vulnerability in admin/memberlist.php in Easebay Resources Login Manager 3.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-22T18:00:00.000Z
CVE-2007-0401 
SQL injection vulnerability in admin/memberlist.php in Easebay Resources Login Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the init_row parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-22T18:00:00.000Z
CVE-2007-0402 
Cross-site scripting (XSS) vulnerability in admin/edit_member.php in Easebay Resources Paypal Subscription Manager allows remote attackers to inject arbitrary web script or HTML via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-22T18:00:00.000Z
CVE-2007-0403 
SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-22T18:00:00.000Z
CVE-2007-0404 
bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a (1) .po or (2) .mo file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-23T00:00:00.000Z
CVE-2007-0405 
The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-23T00:00:00.000Z
CVE-2007-0406 
Multiple buffer overflows in the (1) main function in (a) client.c, and the (2) server_setup and (3) server_client_connect functions in (b) server.c in gxine 0.5.9 and earlier allow local users to cause a denial of service (daemon crash) or gain privileges via a long HOME environment variable.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-23T00:00:00.000Z
CVE-2007-0407 
Cross-site scripting (XSS) vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 (beta) allows remote attackers to inject arbitrary web script or HTML via the username parameter during anonymous registration, a different vector than CVE-2007-0308.  NOTE: it is possible that a separate "WikiPage titles" issue was also fixed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-23T00:00:00.000Z
CVE-2007-0408 
BEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when reusing cached connections, which allows remote attackers to obtain access via an untrusted X.509 certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-23T00:00:00.000Z
CVE-2007-0409 
BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users to read the cleartext password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-23T00:00:00.000Z