{"cves":[{"id":"CVE-2007-0906","published":"2007-02-13T23:28:00","updated_at":"2025-07-17T16:40:44.808470+00:00","description":"\nMultiple buffer overflows in PHP before 5.2.1 allow attackers to cause a\ndenial of service and possibly execute arbitrary code via unspecified\nvectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions;\n(5) stream filters; and the (6) str_replace, (7) mail, (8)\nibase_delete_user, (9) ibase_add_user, and (10) ibase_modify_user\nfunctions.  NOTE: vector 6 might actually be an integer overflow\n(CVE-2007-1885).  NOTE: as of 20070411, vector (3) might involve the\nimap_mail_compose function (CVE-2007-1825).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-424-1","https://www.cve.org/CVERecord?id=CVE-2007-0906"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"php5","source":"https://ubuntu.com/security/cve?package=php5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=php5","debian":"https://tracker.debian.org/pkg/php5","statuses":[{"release_codename":"dapper","status":"released","description":"5.1.2-1ubuntu3.9","component":null,"pocket":"security"},{"release_codename":"edgy","status":"released","description":"5.1.6-1ubuntu2.6","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"5.2.1-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-424-1"],"notices":[{"id":"USN-424-1","title":"PHP vulnerabilities","summary":"PHP vulnerabilities","instructions":"After a standard system upgrade you need to restart Apache or reboot\nyour computer to effect the necessary changes.","references":[],"published":"2007-02-22T01:42:17","description":"Multiple buffer overflows have been discovered in various PHP modules.\nIf a PHP application processes untrusted data with functions of the\nsession or zip module, or various string functions, a remote attacker\ncould exploit this to execute arbitrary code with the privileges of\nthe web server. (CVE-2007-0906)\n\nThe sapi_header_op() function had a buffer underflow that could be\nexploited to crash the PHP interpreter. (CVE-2007-0907)\n\nThe wddx unserialization handler did not correctly check for some\nbuffer boundaries and had an uninitialized variable. By unserializing\nuntrusted data, this could be exploited to expose memory regions that\nwere not meant to be accessible. Depending on the PHP application this\ncould lead to disclosure of potentially sensitive information.\n(CVE-2007-0908)\n\nOn 64 bit systems (the amd64 and sparc platforms), various print\nfunctions and the odbc_result_all() were susceptible to a format\nstring vulnerability. A remote attacker could exploit this to execute\narbitrary code with the privileges of the web server. (CVE-2007-0909)\n\nUnder certain circumstances it was possible to overwrite superglobal\nvariables (like the HTTP GET/POST arrays) with crafted session data.\n(CVE-2007-0910)\n\nWhen unserializing untrusted data on 64-bit platforms the\nzend_hash_init() function could be forced to enter an infinite loop,\nconsuming CPU resources, for a limited length of time, until the\nscript timeout alarm aborts the script. (CVE-2007-0988)","is_hidden":false,"release_packages":{"dapper":[{"name":"php5-cli","version":"5.1.2-1ubuntu3.5","is_source":false,"source_link":"","version_link":""},{"name":"php5-cgi","version":"5.1.2-1ubuntu3.5","is_source":false,"source_link":"","version_link":""},{"name":"libapache2-mod-php5","version":"5.1.2-1ubuntu3.5","is_source":false,"source_link":"","version_link":""},{"name":"php5-common","version":"5.1.2-1ubuntu3.5","is_source":false,"source_link":"","version_link":""},{"name":"php5-odbc","version":"5.1.2-1ubuntu3.5","is_source":false,"source_link":"","version_link":""}],"breezy":[{"name":"php5-cli","version":"5.0.5-2ubuntu1.7","is_source":false,"source_link":"","version_link":""},{"name":"php5-cgi","version":"5.0.5-2ubuntu1.7","is_source":false,"source_link":"","version_link":""},{"name":"libapache2-mod-php5","version":"5.0.5-2ubuntu1.7","is_source":false,"source_link":"","version_link":""},{"name":"php5-common","version":"5.0.5-2ubuntu1.7","is_source":false,"source_link":"","version_link":""},{"name":"php5-odbc","version":"5.0.5-2ubuntu1.7","is_source":false,"source_link":"","version_link":""}],"edgy":[{"name":"php5-cli","version":"5.1.6-1ubuntu2.2","is_source":false,"source_link":"","version_link":""},{"name":"php5-cgi","version":"5.1.6-1ubuntu2.2","is_source":false,"source_link":"","version_link":""},{"name":"libapache2-mod-php5","version":"5.1.6-1ubuntu2.2","is_source":false,"source_link":"","version_link":""},{"name":"php5-common","version":"5.1.6-1ubuntu2.2","is_source":false,"source_link":"","version_link":""},{"name":"php5-odbc","version":"5.1.6-1ubuntu2.2","is_source":false,"source_link":"","version_link":""}]},"type":"USN","cves_ids":["CVE-2007-0906","CVE-2007-0907","CVE-2007-0908","CVE-2007-0909","CVE-2007-0910","CVE-2007-0988"]}]},{"id":"CVE-2007-0905","published":"2007-02-13T23:28:00","updated_at":"2025-07-17T16:40:44.808470+00:00","description":"\nPHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir\nrestrictions via unspecified vectors in the session extension.  NOTE: it is\npossible that this issue is a duplicate of CVE-2006-6383.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2007-0905"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"php5","source":"https://ubuntu.com/security/cve?package=php5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=php5","debian":"https://tracker.debian.org/pkg/php5","statuses":[{"release_codename":"dapper","status":"not-affected","description":"5.2.0 only","component":null,"pocket":"security"},{"release_codename":"edgy","status":"not-affected","description":"5.2.0 only","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"5.2.1-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.2.0","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2007-0903","published":"2007-02-13T20:28:00","updated_at":"2025-07-17T16:40:44.808470+00:00","description":"\nUnspecified vulnerability in the mod_roster_odbc module in ejabberd before\n1.1.3 has unknown impact and attack vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2007-0903"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"ejabberd","source":"https://ubuntu.com/security/cve?package=ejabberd","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ejabberd","debian":"https://tracker.debian.org/pkg/ejabberd","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"edgy","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"1.1.2-5","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"released","description":"1.1.2-5","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"1.1.2-5","component":null,"pocket":"security"},{"release_codename":"intrepid","status":"released","description":"1.1.2-5","component":null,"pocket":"security"},{"release_codename":"jaunty","status":"released","description":"1.1.2-5","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"1.1.2-5","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2007-0902","published":"2007-02-13T20:28:00","updated_at":"2025-07-17T16:40:42.080419+00:00","description":"\nUnspecified vulnerability in the \"Show debugging information\" feature in\nMoinMoin 1.5.7 allows remote attackers to obtain sensitive information.\nNOTE: the provenance of this information is unknown; the details are\nobtained solely from third party information.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-423-1","https://www.cve.org/CVERecord?id=CVE-2007-0902"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"moin","source":"https://ubuntu.com/security/cve?package=moin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=moin","debian":"https://tracker.debian.org/pkg/moin","statuses":[{"release_codename":"dapper","status":"released","description":"1.5.2-1ubuntu2.3","component":null,"pocket":"security"},{"release_codename":"edgy","status":"released","description":"1.5.3-1ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"1.5.3-1.1ubuntu3.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-423-1"],"notices":[{"id":"USN-423-1","title":"MoinMoin vulnerabilities","summary":"MoinMoin vulnerabilities","instructions":"In general, a standard system upgrade is sufficient to effect the\nnecessary changes.","references":[],"published":"2007-02-20T21:50:27","description":"A flaw was discovered in MoinMoin's debug reporting sanitizer which \ncould lead to a cross-site scripting attack.  By tricking a user into \nviewing a crafted MoinMoin URL, an attacker could execute arbitrary \nJavaScript as the current MoinMoin user, possibly exposing the user's \nauthentication information for the domain where MoinMoin was hosted.\nOnly Ubuntu Breezy was vulnerable.  (CVE-2007-0901)\n\nAn information leak was discovered in MoinMoin's debug reporting, which \ncould expose information about the versions of software running on the \nhost system.  MoinMoin administrators can add \"show_traceback=0\" to\ntheir site configurations to disable debug tracebacks.  (CVE-2007-0902)","is_hidden":false,"release_packages":{"dapper":[{"name":"python-moinmoin","version":"1.5.2-1ubuntu2.2","is_source":false,"source_link":"","version_link":""}],"breezy":[{"name":"python-moinmoin","version":"1.3.4-6ubuntu1.5.10","is_source":false,"source_link":"","version_link":""},{"name":"moin","version":"1.2.4-1ubuntu2.2","is_source":false,"source_link":"","version_link":""}],"edgy":[{"name":"python-moinmoin","version":"1.5.3-1ubuntu1.2","is_source":false,"source_link":"","version_link":""}]},"type":"USN","cves_ids":["CVE-2007-0901","CVE-2007-0902"]}]},{"id":"CVE-2007-0901","published":"2007-02-13T20:28:00","updated_at":"2025-07-17T16:40:42.080419+00:00","description":"\nMultiple cross-site scripting (XSS) vulnerabilities in Info pages in\nMoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or\nHTML via the (1) hitcounts and (2) general parameters, different vectors\nthan CVE-2007-0857.  NOTE: the provenance of this information is unknown;\nthe details are obtained solely from third party information.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-423-1","https://www.cve.org/CVERecord?id=CVE-2007-0901"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"moin","source":"https://ubuntu.com/security/cve?package=moin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=moin","debian":"https://tracker.debian.org/pkg/moin","statuses":[{"release_codename":"dapper","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"feisty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-423-1"],"notices":[{"id":"USN-423-1","title":"MoinMoin vulnerabilities","summary":"MoinMoin vulnerabilities","instructions":"In general, a standard system upgrade is sufficient to effect the\nnecessary changes.","references":[],"published":"2007-02-20T21:50:27","description":"A flaw was discovered in MoinMoin's debug reporting sanitizer which \ncould lead to a cross-site scripting attack.  By tricking a user into \nviewing a crafted MoinMoin URL, an attacker could execute arbitrary \nJavaScript as the current MoinMoin user, possibly exposing the user's \nauthentication information for the domain where MoinMoin was hosted.\nOnly Ubuntu Breezy was vulnerable.  (CVE-2007-0901)\n\nAn information leak was discovered in MoinMoin's debug reporting, which \ncould expose information about the versions of software running on the \nhost system.  MoinMoin administrators can add \"show_traceback=0\" to\ntheir site configurations to disable debug tracebacks.  (CVE-2007-0902)","is_hidden":false,"release_packages":{"dapper":[{"name":"python-moinmoin","version":"1.5.2-1ubuntu2.2","is_source":false,"source_link":"","version_link":""}],"breezy":[{"name":"python-moinmoin","version":"1.3.4-6ubuntu1.5.10","is_source":false,"source_link":"","version_link":""},{"name":"moin","version":"1.2.4-1ubuntu2.2","is_source":false,"source_link":"","version_link":""}],"edgy":[{"name":"python-moinmoin","version":"1.5.3-1ubuntu1.2","is_source":false,"source_link":"","version_link":""}]},"type":"USN","cves_ids":["CVE-2007-0901","CVE-2007-0902"]}]},{"id":"CVE-2007-0896","published":"2007-02-13T11:28:00","updated_at":"2025-07-17T16:40:42.080419+00:00","description":"\nCross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and\n(2) Sage++ extensions for Firefox, allows remote attackers to inject\narbitrary web script or HTML via a \"<SCRIPT/=''SRC='\" sequence in an RSS\nfeed, a different vulnerability than CVE-2006-4712.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2007-0896"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"firefox-sage","source":"https://ubuntu.com/security/cve?package=firefox-sage","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox-sage","debian":"https://tracker.debian.org/pkg/firefox-sage","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"feisty","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"released","description":"1.3.10-1","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"1.3.10-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.3.10","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2007-0770","published":"2007-02-12T20:28:00","updated_at":"2025-07-17T16:40:38.948054+00:00","description":"\nBuffer overflow in GraphicsMagick and ImageMagick allows user-assisted\nremote attackers to cause a denial of service and possibly execute\narbitrary code via a PALM image that is not properly handled by the\nReadPALMImage function in coders/palm.c. NOTE: this issue is due to an\nincomplete patch for CVE-2006-5456.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-422-1","https://www.cve.org/CVERecord?id=CVE-2007-0770"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"graphicsmagick","source":"https://ubuntu.com/security/cve?package=graphicsmagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=graphicsmagick","debian":"https://tracker.debian.org/pkg/graphicsmagick","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"1.1.7-14","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"released","description":"1.1.7-14","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"dapper","status":"released","description":"6.2.4.5-0.6ubuntu0.6","component":null,"pocket":"security"},{"release_codename":"edgy","status":"released","description":"6.2.4.5.dfsg1-0.10ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"6.2.4.5.dfsg1-0.14ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"released","description":"6.2.4.5.dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-422-1"],"notices":[{"id":"USN-422-1","title":"ImageMagick vulnerabilities","summary":"ImageMagick vulnerabilities","instructions":"In general, a standard system upgrade is sufficient to effect the\nnecessary changes.","references":[],"published":"2007-02-15T21:11:14","description":"Vladimir Nadvornik discovered that the fix for CVE-2006-5456, released \nin USN-372-1, did not correctly solve the original flaw in PALM image \nhandling.  By tricking a user into processing a specially crafted image \nwith an application that uses imagemagick, an attacker could execute \narbitrary code with the user's privileges.","is_hidden":false,"release_packages":{"dapper":[{"name":"libmagick9","version":"6:6.2.4.5-0.6ubuntu0.5","is_source":false,"source_link":"","version_link":""}],"breezy":[{"name":"libmagick6","version":"6:6.2.3.4-1ubuntu1.6","is_source":false,"source_link":"","version_link":""}],"edgy":[{"name":"libmagick9","version":"7:6.2.4.5.dfsg1-0.10ubuntu0.2","is_source":false,"source_link":"","version_link":""}]},"type":"USN","cves_ids":["CVE-2007-0770","CVE-2006-5456"]}]},{"id":"CVE-2007-0669","published":"2007-02-08T22:28:00","updated_at":"2025-07-17T16:40:38.948054+00:00","description":"\nUnspecified vulnerability in Twiki 4.0.0 through 4.1.0 allows local users\nto execute arbitrary Perl code via unknown vectors related to CGI session\nfiles.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2007-0669"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"twiki","source":"https://ubuntu.com/security/cve?package=twiki","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=twiki","debian":"https://tracker.debian.org/pkg/twiki","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"edgy","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"4.0.5-9.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"released","description":"4.0.5-9.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"4.0.5-9.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"intrepid","status":"released","description":"4.0.5-9.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jaunty","status":"released","description":"4.0.5-9.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"4.0.5-9.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2007-0857","published":"2007-02-08T18:28:00","updated_at":"2025-07-17T16:40:42.080419+00:00","description":"\nMultiple cross-site scripting (XSS) vulnerabilities in MoinMoin before\n1.5.7 allow remote attackers to inject arbitrary web script or HTML via (1)\nthe page info, or the page name in a (2) AttachFile, (3) RenamePage, or (4)\nLocalSiteMap action.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-421-1","https://www.cve.org/CVERecord?id=CVE-2007-0857"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"moin","source":"https://ubuntu.com/security/cve?package=moin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=moin","debian":"https://tracker.debian.org/pkg/moin","statuses":[{"release_codename":"dapper","status":"released","description":"1.5.2-1ubuntu2.3","component":null,"pocket":"security"},{"release_codename":"edgy","status":"released","description":"1.5.3-1ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"1.5.3-1.1ubuntu3.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-421-1"],"notices":[{"id":"USN-421-1","title":"MoinMoin vulnerability","summary":"MoinMoin vulnerability","instructions":"In general, a standard system upgrade is sufficient to effect the\nnecessary changes.","references":[],"published":"2007-02-10T03:24:55","description":"A flaw was discovered in MoinMoin's page name sanitizer which could lead \nto a cross-site scripting attack.  By tricking a user into viewing a \ncrafted MoinMoin page, an attacker could execute arbitrary JavaScript as \nthe current MoinMoin user, possibly exposing the user's authentication \ninformation for the domain where MoinMoin was hosted.","is_hidden":false,"release_packages":{"dapper":[{"name":"python2.4-moinmoin","version":"1.5.2-1ubuntu2.1","is_source":false,"source_link":"","version_link":""}],"breezy":[{"name":"moin","version":"1.2.4-1ubuntu2.1","is_source":false,"source_link":"","version_link":""},{"name":"python2.3-moinmoin","version":"1.3.4-6ubuntu1.1","is_source":false,"source_link":"","version_link":""},{"name":"python2.4-moinmoin","version":"1.3.4-6ubuntu1.1","is_source":false,"source_link":"","version_link":""}],"edgy":[{"name":"python2.4-moinmoin","version":"1.5.3-1ubuntu1.1","is_source":false,"source_link":"","version_link":""}]},"type":"USN","cves_ids":["CVE-2007-0857"]}]},{"id":"CVE-2007-0855","published":"2007-02-08T18:28:00","updated_at":"2025-07-17T16:40:42.080419+00:00","description":"\nStack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and\npossibly other products, allows user-assisted remote attackers to execute\narbitrary code via a crafted, password-protected archive.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2007-0855"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"unrar-nonfree","source":"https://ubuntu.com/security/cve?package=unrar-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=unrar-nonfree","debian":"https://tracker.debian.org/pkg/unrar-nonfree","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"edgy","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"1:3.7.3-1","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"released","description":"1:3.7.3-1","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"1:3.7.3-1","component":null,"pocket":"security"},{"release_codename":"intrepid","status":"released","description":"1:3.7.3-1","component":null,"pocket":"security"},{"release_codename":"jaunty","status":"released","description":"1:3.7.3-1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"1:3.7.3-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2006-6979","published":"2007-02-08T18:28:00","updated_at":"2025-07-17T16:40:19.497075+00:00","description":"\nThe ruby handlers in the Magnatune component in Amarok do not properly\nquote text in certain contexts, probably including construction of an unzip\ncommand line, which allows attackers to execute arbitrary commands via\nshell metacharacters.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2006-6979"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"amarok","source":"https://ubuntu.com/security/cve?package=amarok","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=amarok","debian":"https://tracker.debian.org/pkg/amarok","statuses":[{"release_codename":"dapper","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"1.4.5-0ubuntu7","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.4.4","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2007-0844","published":"2007-02-08T17:28:00","updated_at":"2025-07-17T16:40:42.080419+00:00","description":"\nThe auth_via_key function in pam_ssh.c in pam_ssh before 1.92, when the\nallow_blank_passphrase option is disabled, allows remote attackers to\nbypass authentication restrictions and use private encryption keys\nrequiring a blank passphrase by entering a non-blank passphrase.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2007-0844"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"libpam-ssh","source":"https://ubuntu.com/security/cve?package=libpam-ssh","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libpam-ssh","debian":"https://tracker.debian.org/pkg/libpam-ssh","statuses":[{"release_codename":"dapper","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"feisty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2006-2220","published":"2007-02-08T17:28:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nphpBB 2.0.20 does not properly verify user-specified input variables used\nas limits to SQL queries, which allows remote attackers to obtain sensitive\ninformation via a negative LIMIT specification, as demonstrated by the\nstart parameter to memberlist.php, which reveals the SQL query in the\nresulting error message.","ubuntu_description":"","notes":[],"codename":null,"priority":"negligible","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2006-2220"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"phpbb2","source":"https://ubuntu.com/security/cve?package=phpbb2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=phpbb2","debian":"https://tracker.debian.org/pkg/phpbb2","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"edgy","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"feisty","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"intrepid","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"jaunty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2006-2219","published":"2007-02-08T17:28:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nphpBB 2.0.20 does not verify user-specified input variable types before\nbeing passed to type-dependent functions, which allows remote attackers to\nobtain sensitive information, as demonstrated by the (1) mode parameter to\nmemberlist.php and the (2) highlight parameter to viewtopic.php that are\nused as an argument to the htmlspecialchars or urlencode functions, which\ndisplays the installation path in the resulting error message.","ubuntu_description":"","notes":[],"codename":null,"priority":"negligible","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2006-2219"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"phpbb2","source":"https://ubuntu.com/security/cve?package=phpbb2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=phpbb2","debian":"https://tracker.debian.org/pkg/phpbb2","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"edgy","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"feisty","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"intrepid","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"jaunty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2007-0833","published":"2007-02-07T22:28:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nVMware Workstation 5.5.3 34685, when the \"Enable copy and paste to and from\nthis virtual machine\" option is enabled, preserves clipboard data on the\nguest operating system after it was deleted on the host operating system,\nwhich might allow local users to read clipboard contents by moving the\nfocus back to the host operating system.","ubuntu_description":"","notes":[{"author":"kees","note":"No upstream fix."}],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2007-0833"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"vmware-player","source":"https://ubuntu.com/security/cve?package=vmware-player","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vmware-player","debian":"https://tracker.debian.org/pkg/vmware-player","statuses":[{"release_codename":"dapper","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"feisty","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"}]},{"name":"vmware-server","source":"https://ubuntu.com/security/cve?package=vmware-server","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vmware-server","debian":"https://tracker.debian.org/pkg/vmware-server","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"feisty","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2007-0832","published":"2007-02-07T22:28:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nVMware Workstation 5.5.3 34685 does not immediately change the availability\nof a shared clipboard when the \"Enable copy and paste to and from this\nvirtual machine\" checkbox is changed, which allows local users to obtain\nsensitive information or conduct certain attacks that are facilitated by\nweaker isolation between the host and guest operating systems.","ubuntu_description":"","notes":[{"author":"kees","note":"No upstream fix."}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2007-0832"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"vmware-player","source":"https://ubuntu.com/security/cve?package=vmware-player","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vmware-player","debian":"https://tracker.debian.org/pkg/vmware-player","statuses":[{"release_codename":"dapper","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"feisty","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"}]},{"name":"vmware-server","source":"https://ubuntu.com/security/cve?package=vmware-server","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vmware-server","debian":"https://tracker.debian.org/pkg/vmware-server","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"feisty","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2007-0803","published":"2007-02-07T11:28:00","updated_at":"2025-07-17T16:40:42.080419+00:00","description":"\nMultiple buffer overflows in STLport before 5.0.3 allow remote attackers to\nexecute arbitrary code via unspecified vectors relating to (1) \"print\nfloats\" and (2) a missing null termination in the \"rope constructor.\"","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2007-0803"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"stlport5","source":"https://ubuntu.com/security/cve?package=stlport5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=stlport5","debian":"https://tracker.debian.org/pkg/stlport5","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"edgy","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"5.0.3-1","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"intrepid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jaunty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2007-0802","published":"2007-02-07T11:28:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nMozilla Firefox 2.0.0.1 allows remote attackers to bypass the Phishing\nProtection mechanism by adding certain characters to the end of the domain\nname, as demonstrated by the \".\" and \"/\" characters, which is not caught by\nthe Phishing List blacklist filter.","ubuntu_description":"","notes":[{"author":"kees","note":"phishing filter bypass"},{"author":"jdstrand","note":"per Mozilla, 2.0 only"}],"codename":null,"priority":"negligible","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2007-0802"],"bugs":["https://bugzilla.mozilla.org/show_bug.cgi?id=367538"],"patches":{},"tags":{},"packages":[{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"dapper","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"feisty","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"released","description":"2.0.0.19+nobinonly1-0ubuntu0.7.10.1","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"2.0.0.19+nobinonly1-0ubuntu0.8.04.1","component":null,"pocket":"security"},{"release_codename":"intrepid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.0.0.12","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2007-0801","published":"2007-02-07T11:28:00","updated_at":"2025-07-17T16:40:40.445844+00:00","description":"\nThe nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1.5.0.9\ncreates temporary files with predictable filenames based on creation time,\nwhich allows remote attackers to execute arbitrary web script or HTML via a\ncrafted XMLHttpRequest.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2007-0801"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"edgy","status":"released","description":"2.0.0.6+0dfsg-0ubuntu0.6.10","component":null,"pocket":"security"},{"release_codename":"dapper","status":"released","description":"1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"2.0.0.6+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.0.0.2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2007-0800","published":"2007-02-07T11:28:00","updated_at":"2025-07-17T16:40:40.445844+00:00","description":"\nCross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked\npopups to have an internal zone origin, which allows user-assisted remote\nattackers to cross zone restrictions and read arbitrary file:// URIs by\nconvincing a user to show a blocked popup.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-428-1","https://www.cve.org/CVERecord?id=CVE-2007-0800"],"bugs":[""],"patches":{},"tags":{},"packages":[{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"dapper","status":"released","description":"1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"edgy","status":"released","description":"2.0.0.6+0dfsg-0ubuntu0.6.10","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"2.0.0.6+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"iceape","source":"https://ubuntu.com/security/cve?package=iceape","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=iceape","debian":"https://tracker.debian.org/pkg/iceape","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"feisty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"released","description":"1.1.4-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"lightning-sunbird","source":"https://ubuntu.com/security/cve?package=lightning-sunbird","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=lightning-sunbird","debian":"https://tracker.debian.org/pkg/lightning-sunbird","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"feisty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"released","description":"0.5-0ubuntu4","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"midbrowser","source":"https://ubuntu.com/security/cve?package=midbrowser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=midbrowser","debian":"https://tracker.debian.org/pkg/midbrowser","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"feisty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"released","description":"0.1.6b-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"xulrunner","source":"https://ubuntu.com/security/cve?package=xulrunner","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xulrunner","debian":"https://tracker.debian.org/pkg/xulrunner","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"edgy","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"feisty","status":"released","description":"1.8.0.10-3ubuntu1","component":null,"pocket":"security"},{"release_codename":"gutsy","status":"released","description":"1.8.0.10-3ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-428-1"],"notices":[{"id":"USN-428-1","title":"Firefox vulnerabilities","summary":"Firefox vulnerabilities","instructions":"After a standard system upgrade you need to restart Firefox to effect\nthe necessary changes.","references":[],"published":"2007-03-01T02:56:42","description":"Several flaws have been found that could be used to perform Cross-site\nscripting attacks. A malicious web site could exploit these to modify\nthe contents or steal confidential data (such as passwords) from other\nopened web pages. (CVE-2006-6077, CVE-2007-0780, CVE-2007-0800,\nCVE-2007-0981, CVE-2007-0995, CVE-2007-0996)\n\nThe SSLv2 protocol support in the NSS library did not sufficiently\ncheck the validity of public keys presented with a SSL certificate. A\nmalicious SSL web site using SSLv2 could potentially exploit this to\nexecute arbitrary code with the user's privileges.  (CVE-2007-0008)\n\nThe SSLv2 protocol support in the NSS library did not sufficiently\nverify the validity of client master keys presented in an SSL client\ncertificate. A remote attacker could exploit this to execute arbitrary\ncode in a server application that uses the NSS library.\n(CVE-2007-0009)\n\nVarious flaws have been reported that could allow an attacker to\nexecute arbitrary code with user privileges by tricking the user into\nopening a malicious web page. (CVE-2007-0775, CVE-2007-0776,\nCVE-2007-0777, CVE-2007-1092)\n\nTwo web pages could collide in the disk cache with the result that\ndepending on order loaded the end of the longer document could be\nappended to the shorter when the shorter one was reloaded from the\ncache. It is possible a determined hacker could construct a targeted\nattack to steal some sensitive data from a particular web page. The\npotential victim would have to be already logged into the targeted\nservice (or be fooled into doing so) and then visit the malicious\nsite. (CVE-2007-0778)\n\nDavid Eckel reported that browser UI elements--such as the host name\nand security indicators--could be spoofed by using custom cursor\nimages and a specially crafted style sheet. (CVE-2007-0779)","is_hidden":false,"release_packages":{"dapper":[{"name":"libnspr4","version":"1.5.dfsg+1.5.0.10-0ubuntu0.6.06.1","is_source":false,"source_link":"","version_link":""},{"name":"firefox","version":"1.5.dfsg+1.5.0.10-0ubuntu0.6.06.1","is_source":false,"source_link":"","version_link":""},{"name":"libnss3","version":"1.5.dfsg+1.5.0.10-0ubuntu0.6.06.1","is_source":false,"source_link":"","version_link":""}],"breezy":[{"name":"firefox","version":"1.5.dfsg+1.5.0.10-0ubuntu0.5.10.1","is_source":false,"source_link":"","version_link":""}],"edgy":[{"name":"libnspr4","version":"2.0.0.2+0dfsg-0ubuntu0.6.10","is_source":false,"source_link":"","version_link":""},{"name":"firefox","version":"2.0.0.2+0dfsg-0ubuntu0.6.10","is_source":false,"source_link":"","version_link":""},{"name":"libnss3","version":"2.0.0.2+0dfsg-0ubuntu0.6.10","is_source":false,"source_link":"","version_link":""}]},"type":"USN","cves_ids":["CVE-2007-1092","CVE-2007-0780","CVE-2007-0775","CVE-2007-0008","CVE-2007-0995","CVE-2007-0009","CVE-2007-0778","CVE-2007-0981","CVE-2007-0779","CVE-2007-0996","CVE-2007-0776","CVE-2006-6077","CVE-2007-0800","CVE-2007-0777"]}]}],"offset":76880,"limit":20,"total_results":79316}