rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-1535 
Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T20:00:00.000Z
CVE-2007-1536 
Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T20:00:00.000Z
CVE-2007-1537 
\Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the device and cause a denial of service, as demonstrated by using an IRQL to acquire a spinlock on paged memory via the NdisTapiDispatch function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1538 
McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in (1) HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection or (2) HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Entreprise\CurrentVersion.  NOTE: this issue has been disputed by third-party researchers, stating that the default permissions for HKEY_LOCAL_MACHINE\SOFTWARE does not allow for write access and the product does not modify the inherited permissions. There might be an interaction error with another product
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1539 
Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the module_name parameter, as demonstrated via a static PHP code injection attack in an Apache log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1540 
Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows remote attackers to run arbitrary executables and bypass authentication via a .. (dot dot) sequence and trailing NULL (%00) in the login parameter.  NOTE: this issue was reportedly addressed in SQL-Ledger 2.6.27, however third-party researchers claim that the file is still executed even though an error is generated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1541 
Directory traversal vulnerability in am.pl in SQL-Ledger 2.6.27 only checks for the presence of a NULL (%00) character to protect against directory traversal attacks, which allows remote attackers to run arbitrary executables and bypass authentication via a .. (dot dot) sequence in the login parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1542 
Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers to cause a denial of service via the Remote-Party-ID sipURI field in a SIP INVITE request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1543 
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1544 
Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large max_samples value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1545 
The AddResource function in server/dia/resource.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (server crash) via a nonexistent client ID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1546 
Array index error in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) via (1) large num_action values in the ProcAuSetElements function in server/dia/audispatch.c or (2) a large inputNum parameter to the compileInputs function in server/dia/auutil.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1547 
The ReadRequestFromClient function in server/os/io.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) via multiple simultaneous connections, which triggers a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1548 
SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via \"' (backslash double-quote quote) sequences, which are collapsed into \'', as demonstrated via the name parameter to forum/pop_up_member_search.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1549 
Unrestricted file upload vulnerability in gallery.php in phpx 3.5.15 allows remote attackers to upload and execute arbitrary PHP scripts via an addImage action, which places scripts into the gallery/shelties/ directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1550 
Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the (1) image_id or (2) cat_id parameter to (a) gallery.php; the (3) news_id parameter to (b) news.php or (c) print.php; (4) the news_cat_id parameter to news.php; the (5) cat_id, (6) topic_id, or (7) post_id parameter to (d) forums.php; or (8) the user_id parameter to (e) users.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1551 
Multiple cross-site scripting (XSS) vulnerabilities in phpx 3.5.15 allow remote attackers to inject arbitrary web script or HTML via (1) the signature in "dans profile," or (2) search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1552 
Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME type in the Content-type HTTP header, which allows remote attackers to upload and execute arbitrary scripts via an image MIME type with a filename containing an executable extension such as .php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1553 
admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis parameter to "ok" and providing modified admin_mail, login, and pass parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1554 
Direct static code injection vulnerability in admin/configuration.php in Guestbara 1.2 and earlier allows remote authenticated users to inject arbitrary PHP code into config.php via the (1) admin_mail, (2) emotpatch, (3) login, (4) pass, and unspecified other parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1555 
SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the c parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-20T22:00:00.000Z
CVE-2007-1556 
SQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to execute arbitrary SQL commands via the dlid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T01:00:00.000Z
CVE-2007-1557 
Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service and possibly gain privileges via format string specifiers in the Management Server name field on the Communication settings page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T01:00:00.000Z
CVE-2007-1558 
The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions.  NOTE: this design-level issue potentially affects all products that use APOP, including (1) Thunderbird 1.x before 1.5.0.12 and 2.x before 2.0.0.4, (2) Evolution, (3) mutt, (4) fetchmail before 6.3.8, (5) SeaMonkey 1.0.x before 1.0.9 and 1.1.x before 1.1.2, (6) Balsa 2.3.16 and earlier, (7) Mailfilter before 0.8.2, and possibly other products.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-16T22:00:00.000Z
CVE-2007-1559 
Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via (1) unspecified long property values to SonicMediaPlayer.dll or (2) long arguments to unspecified methods in SonicMediaPlayer.dll.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T22:00:00.000Z
CVE-2007-1560 
The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T18:00:00.000Z
CVE-2007-1561 
The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP INVITE message with an SDP containing one valid and one invalid IP address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T19:00:00.000Z
CVE-2007-1562 
The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T19:00:00.000Z
CVE-2007-1563 
The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T19:00:00.000Z
CVE-2007-1564 
The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T19:00:00.000Z
CVE-2007-1565 
Konqueror 3.5.5 allows remote attackers to cause a denial of service (crash) by using JavaScript to read a child iframe having an ftp:// URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T19:00:00.000Z
CVE-2007-1566 
SQL injection vulnerability in News/page.asp in NetVIOS Portal allows remote attackers to execute arbitrary SQL commands via the NewsID parameter.  NOTE: this issue might be the same as CVE-2006-5954.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T19:00:00.000Z
CVE-2007-1567 
Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors, as demonstrated by warftp_165.tar by Immunity.  NOTE: this might be the same issue as CVE-1999-0256, CVE-2000-0131, or CVE-2006-2171, but due to Immunity's lack of details, this cannot be certain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T21:00:00.000Z
CVE-2007-1568 
Stack-based buffer overflow in DaanSystems NewsReactor 20070220.21 allows remote attackers to execute arbitrary code via a yEnc (yEncode) encoded article with a long filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T21:00:00.000Z
CVE-2007-1569 
Stack-based buffer overflow in NewsBin Pro 4.32 allows remote attackers to cause a denial of service or execute arbitrary code via a yEnc (yEncode) encoded article with a long filename, as demonstrated using a .nzb file.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T21:00:00.000Z
CVE-2007-1571 
PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platform (AMP) 3.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T21:00:00.000Z
CVE-2007-1572 
SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter, a different vector than CVE-2007-1440.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T21:00:00.000Z
CVE-2007-1573 
SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin 3.6.5 allows remote authenticated administrators to execute arbitrary SQL commands via the "Attached Before" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T21:00:00.000Z
CVE-2007-1574 
CARE2X 2.2, and possibly earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T21:00:00.000Z
CVE-2007-1575 
Multiple SQL injection vulnerabilities in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via (1) unspecified vectors to the (a) calendar and (2) search modules, and an (2) unspecified cookie when the user logs out.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T21:00:00.000Z
CVE-2007-1576 
Multiple cross-site scripting (XSS) vulnerabilities in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the (1) Projects, (2) Contacts, (3) Helpdesk, (4) Search (only Gecko engine driven Browsers), and (5) Notes modules; the (6) Mail summary page; and unspecified other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T21:00:00.000Z
CVE-2007-1577 
Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[tplname] parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1578 
Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1579 
Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSCRIBE command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1580 
FTPDMIN 0.96 allows remote attackers to cause a denial of service (daemon crash) via a LIST command for a Windows drive letter, as demonstrated using "//A:".  NOTE: this has been reported as a buffer overflow by some sources, but there is not a long argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1581 
The resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting the hash_update_file function via a userspace (1) error or (2) stream handler, which can then be used to destroy and modify internal resources.  NOTE: it was later reported that PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 are also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1582 
The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting certain functions in the GD (ext/gd) extension and unspecified other extensions via a userspace error handler, which can be used to destroy and modify internal resources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1583 
The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with register_globals functionality that is not detectable by these scripts, as demonstrated by forcing a memory_limit violation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1584 
Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by passing an all-whitespace string to this function, which causes it to write '\0' characters in whitespace that precedes the string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1585 
The Linksys WAG200G with firmware 1.01.01, WRT54GC 2 with firmware 1.00.7, and WRT54GC 1 with firmware 1.03.0 and earlier allow remote attackers to obtain sensitive information (passwords and configuration data) via a packet to UDP port 916. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1586 
ZynOS 3.40 allows remote attackers to cause a denial of service (link restart) by sending a request for the name \M via the SMB Mail Slot Protocol.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1587 
templates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 allows remote attackers to execute arbitrary programs by specifying the program name in the qshapeLocation parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1588 
server.cpp in MyServer 0.8.5 calls Process::setuid before calling Process::setgid and thus does not properly drop privileges, which might allow remote attackers to execute CGI programs with unintended privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1589 
TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service (filesystem unavailability) by dismounting a volume mounted by a different user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1590 
The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows remote attackers to cause a denial of service (device crash) via SIP (1) INVITE, (2) CANCEL, or unspecified other messages with a WWW-Authenticate header containing a crafted Digest domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-21T23:00:00.000Z
CVE-2007-1591 
VsapiNT.sys in the Scan Engine 8.0 for Trend Micro AntiVirus 14.10.1041, and other products, allows remote attackers to cause a denial of service (kernel fault and system crash) via a crafted UPX file with a certain field that triggers a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-22T19:00:00.000Z
CVE-2007-1592 
net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-22T19:00:00.000Z
CVE-2007-1593 
The administrative service in Symantec Veritas Volume Replicator (VVR) for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Storage Foundation products allows remote attackers to cause a denial of service (memory consumption and service crash) via a crafted packet to the service port (8199/tcp) that triggers a request for more memory than available, which causes the service to write to an invalid pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-04T16:00:00.000Z
CVE-2007-1594 
The handle_response function in chan_sip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP Response code 0 in a SIP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-22T23:00:00.000Z
CVE-2007-1595 
The Asterisk Extension Language (AEL) in pbx/pbx_ael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-22T23:00:00.000Z