rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-5030 
Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via packets containing options with large lengths, which trigger attempts at excessive memory allocation, as demonstrated by (1) the TSrvMsg constructor in SrvMessages/SrvMsg.cpp; the (2) TClntMsg, (3) TClntOptIAAddress, (4) TClntOptIAPrefix, (5) TOptVendorSpecInfo, and (6) TOptOptionRequest constructors; and the (7) TRelIfaceMgr::decodeRelayRepl, (8) TRelMsg::decodeOpts, and (9) TSrvIfaceMgr::decodeRelayForw methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T18:00:00.000Z
CVE-2007-5031 
The TSrvOptIA_NA::rebind method in SrvOptions/SrvOptIA_NA.cpp in Dibbler 0.6.0 allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via an invalid IA_NA option in a REBIND message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T18:00:00.000Z
CVE-2007-5032 
Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T18:00:00.000Z
CVE-2007-5033 
Cross-site scripting (XSS) vulnerability in profile.php in phpBB XS 2 allows remote attackers to inject arbitrary web script or HTML via the selfdes parameter in a profile_info editprofile action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T18:00:00.000Z
CVE-2007-5034 
ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS.  NOTE: this issue only occurs when a proxy is defined for https.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T20:00:00.000Z
CVE-2007-5035 
PHP remote file inclusion vulnerability in html/modules/extranet_profile/main.php in openEngine 1.9 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the this_module_path parameter.  NOTE: this issue is disputed by CVE because PHP encounters a fatal function-call error on a direct request for the file, before reaching the include statement
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5036 
Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a denial of service (HTTPS service outage) via a crafted query string in an HTTPS request to (1) adLog.cgi, (2) post.cgi, or (3) ad.cgi, related to the "files filter."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5037 
Buffer overflow in the inotifytools_snprintf function in src/inotifytools.c in the inotify-tools library before 3.11 allows context-dependent attackers to execute arbitrary code via a long filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5038 
The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the value of the createemailregexp parameter, which allows remote attackers to bypass intended restrictions on account creation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5039 
Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtDeleteValueKey, (3) NtQueryValueKey, (4) NtSetSystemInformation, and (5) NtSetValueKey kernel SSDT hooks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5040 
Ghost Security Suite alpha 1.200 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtCreateThread, (3) NtDeleteValueKey, (4) NtQueryValueKey, (5) NtSetSystemInformation, and (6) NtSetValueKey kernel SSDT hooks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5041 
G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey and (2) NtOpenProcess kernel SSDT hooks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5042 
Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtDeleteFile, (3) NtLoadDriver, (4) NtOpenProcess, (5) NtOpenSection, (6) NtOpenThread, and (7) NtUnloadDriver kernel SSDT hooks, a partial regression of CVE-2006-7160.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5043 
Kaspersky Internet Security 7.0.0.125 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to (1) cause a denial of service (crash) and possibly gain privileges via the NtCreateSection kernel SSDT hook or (2) cause a denial of service (avp.exe service outage) via the NtLoadDriver kernel SSDT hook.  NOTE: this issue may partially overlap CVE-2006-3074.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5044 
ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreatePort and (2) NtDeleteFile kernel SSDT hooks, a partial regression of CVE-2007-2083.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5045 
Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed, allows remote attackers to execute arbitrary commands via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter containing the Firefox "-chrome" argument.  NOTE: this is a related issue to CVE-2006-4965 and the result of an incomplete fix for CVE-2007-3670.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5046 
Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5047 
Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the NtOpenSection kernel SSDT hook.  NOTE: the NtCreateMutant and NtOpenEvent function hooks are already covered by CVE-2007-1793.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5048 
Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5050 
Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5051 
Multiple cross-site scripting (XSS) vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) box_width, (2) PEDIGREE_GENERATIONS, and (3) rootid parameters in ancestry.php, and the (4) newpid parameter in timeline.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5052 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or HTML via a request to the wiki module with (1) the title parameter or (2) a "title=" sequence in the PATH_INFO, or a request to the download module with (3) the cat parameter or (4) a "cat=" sequence in the PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-5053 
Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in (1) the admin_home parameter to modules/poll/poll_summary.php or (2) the rootdp parameter to include/db.php; or a URL in the language_home parameter to (3) search/search.php, (4) poll/inlinepoll.php, (5) poll/showpoll.php, (6) links/showlinks.php, or (7) links/submit_links.php in modules/; related to missing checks in (a) modules/moduleSec.php and (b) include/includeSec.php for inclusion of certain URLs, as demonstrated by an ftps:// URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-5054 
Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the gsLanguage parameter to (1) search/search.php, (2) poll/inlinepoll.php, (3) poll/showpoll.php, (4) links/showlinks.php, or (5) links/submit_links.php in modules/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-5055 
Multiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the admin_home parameter to modules/poll/poll_summary.php or (2) the rootdp parameter to include/db.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-5056 
Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the last_module parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-5057 
NetSupport Manager Client before 10.20.0004 allows remote attackers to bypass the (1) basic and (2) authentication schemes by spoofing the NetSupport Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-5058 
Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web script or HTML via the username field in a login attempt, which is not properly handled when the Monitor Web Syslog screen is open.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-5059 
Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script or HTML via several vectors, as demonstrated by the (1) uname and (2) pass parameters in a login form, and (3) an unspecified "url value," leading to storage of XSS sequences in the database and display of these sequences in the alert section of the admin panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-5060 
Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers to change arbitrary passwords via certain password_ and rpassword_ parameters, possibly related to timestamp values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-5061 
SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to index.php in a banners action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-5062 
account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create administrative accounts via the un parameter in a register action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-5063 
Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing login credentials via a direct request for var/users.txt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-5064 
Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in DapPlayer_Now.dll, allows remote attackers to execute arbitrary code via a long first argument to the DownURL2 method.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-5065 
PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-5066 
Unspecified vulnerability in Webmin before 1.370 on Windows allows remote authenticated users to execute arbitrary commands via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T23:00:00.000Z
CVE-2007-5067 
Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since header to (1) xigui32.exe or (2) xitami.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T23:00:00.000Z
CVE-2007-5068 
SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL commands via the mod parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T23:00:00.000Z
CVE-2007-5069 
Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T23:00:00.000Z
CVE-2007-5070 
Heap-based buffer overflow in the EasyMailMessagePrinter ActiveX control in emprint.DLL 6.0.1.0 in the Quiksoft EasyMail MessagePrinter Object allows remote attackers to execute arbitrary code via a long string in the first argument to the SetFont method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T23:00:00.000Z
CVE-2007-5071 
Incomplete blacklist vulnerability in upload_img_cgi.php in Simple PHP Blog before 0.5.1 allows remote attackers to upload dangerous files and execute arbitrary code, as demonstrated by a filename ending in .php. or a .htaccess file, a different vector than CVE-2005-2733. NOTE: the vulnerability was also present in a 0.5.1 download available in the early morning of 20070923.  NOTE: the original 20070920 disclosure provided an incorrect filename, img_upload_cgi.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T23:00:00.000Z
CVE-2007-5072 
Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog) before 0.5.1, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via certain user_colors array parameters to certain user_style.php files under themes/, as demonstrated by the user_colors[bg_color] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T23:00:00.000Z
CVE-2007-5078 
Multiple cross-site scripting (XSS) vulnerabilities in eGov Manager allow remote attackers to inject arbitrary web script or HTML via unspecified "user-supplied input" to (1) center.exe or (2) Index.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-05T00:00:00.000Z
CVE-2007-5079 
Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64 platforms, which might allow remote attackers to bypass intended access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-25T01:00:00.000Z
CVE-2007-5080 
Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T17:00:00.000Z
CVE-2007-5081 
Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a crafted RM file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T17:00:00.000Z
CVE-2007-5082 
Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T20:00:00.000Z
CVE-2007-5083 
Multiple integer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands that trigger a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T20:00:00.000Z
CVE-2007-5084 
Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes (1) 0x07, (2) 0x08, (3) 0x09, (4) 0x1E, (5) 0x32, (6) 0x36, (7) 0x40, and possibly others.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T20:00:00.000Z
CVE-2007-5085 
Unspecified vulnerability in the management EJB (MEJB) in Apache Geronimo before 2.0.2 allows remote attackers to bypass authentication and obtain "access to Geronimo internals" via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-26T10:00:00.000Z
CVE-2007-5086 
Kaspersky Anti-Virus (KAV) and Internet Security 7.0 build 125 do not properly validate certain parameters to System Service Descriptor Table (SSDT) and Shadow SSDT function handlers, which allows local users to cause a denial of service (crash) via the (1) NtUserSendInput, (2) LoadLibraryA, (3) NtOpenProcess, (4) NtOpenThread, (5) NtTerminateProcess, (6) NtUserFindWindowEx, and (7) NtUserBuildHwndList kernel SSDT hooks in kylif.sys; the (8) NtDuplicateObject (DuplicateHandle) kernel SSDT hook; and possibly other kernel SSDT hooks.  NOTE: the NtCreateSection vector is covered by CVE-2007-5043.1.  NOTE: the vendor disputes that the DuplicateHandle vector is a vulnerability in their code, stating that "it is not an error in our code, but an obscure method for manipulating standard Windows routines to circumvent our self-defense mechanisms."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-26T10:00:00.000Z
CVE-2007-5087 
The ATM module in the Linux kernel before 2.4.35.3, when CLIP support is enabled, allows local users to cause a denial of service (kernel panic) by reading /proc/net/atm/arp before the CLIP module has been loaded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-26T10:00:00.000Z
CVE-2007-5088 
Cross-site scripting (XSS) vulnerability in search/cust_bill_event.cgi in Freeside 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the failed parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-26T20:00:00.000Z
CVE-2007-5089 
PHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SKIN_URL parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-26T20:00:00.000Z
CVE-2007-5090 
Unspecified vulnerability in IBM Rational ClearQuest (CQ), when a Microsoft SQL Server or an IBM DB2 database is used, allows attackers to corrupt data via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-26T20:00:00.000Z
CVE-2007-5091 
Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary web script or HTML via the cat_data[color] parameter to (1) preferences/inc/class.uicategories.inc.php and (2) admin/inc/class.uicategories.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-26T20:00:00.000Z
CVE-2007-5092 
Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in an ACCEPT_FILE array parameter to modules.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-26T20:00:00.000Z
CVE-2007-5093 
The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked.  NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-26T21:00:00.000Z