JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2003-000041	OpenSSL の ssl3_get_record に情報漏洩の脆弱性	OpenSSL では、データの復号化を行う際に、ブロック暗号のパディングによるエラーを発見した後でのメッセージ認証コード (Message Authentication Code) の妥当性に対するチェックが省略されているため、ブロック暗号のパディングによるエラー、もしくはメッセージ認証コードが妥当でないために生じるエラーの 2 つの異なるエラーケースを見分けることが可能な脆弱性が存在します。	CVE-2003-0078	5	http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000041.html	2003-02-19	2007-04-01	View
JVNDB-2003-000040	Sun Solaris の RPC パケットの処理におけるサービス運用妨害 (DoS) の脆弱性	Sun Solaris は、特定の RPC パケットの処理に、通常割り当てられるべき以上のメモリを割り当ててしまうため、大量のスワップ領域を消費してしまう脆弱性が存在します。	CVE-2003-1079	5	http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000040.html	2003-02-18	2007-04-01	View
JVNDB-2003-000039	Red Hat Linux の useradd command におけるパーミッションの設定に関する脆弱性	Red Hat Linux に含まれている shadow-utils に付属する useradd コマンドには、ユーザアカウントの新規追加を行う際に、同時に作成されるローカルのメールスプール (/var/spool/mail/ユーザ名) のパーミッションを設定してしまう脆弱性が存在します。	CVE-2002-1509	3.6	http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000039.html	2003-02-18	2007-07-30	View
JVNDB-2003-000038	IBM Lotus Domino における不正な HTTP リクエストによるサービス運用妨害 (DoS) の脆弱性	------------	CVE-2003-0181	5	http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000038.html	2003-02-17	2007-04-01	View
JVNDB-2003-000037	IBM Lotus Domino における不完全な HTTP リクエストによるサービス運用妨害 (DoS) の脆弱性	------------	CVE-2003-0180	5	http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000037.html	2003-02-17	2007-04-01	View

Page 13611 of 13768, showing 5 records out of 68839 total, starting on record 68051, ending on 68055

<<first <prev 13607 | 13608 | 13609 | 13610 | 13611 | 13612 | 13613 | 13614 | 13615 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page13611
  sortjvnurl
  directiondesc
  Jvninfoscveinfos
- pass(empty)
- paging(array)
  Jvninfo(array)
  page13611
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.jvnurldesc
  limit5
  options(array)
  page13611
  order(array)
  Jvninfo.jvnurldesc
  sortjvnurl
  directiondesc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 4.02 MB

Message	Memory use
Component initialization	1.38 MB
Controller action start	1.49 MB
Controller render start	2.25 MB
View render complete	2.76 MB

Timers

Total Request Time: 593 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.63
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	573.04
Event: Controller.beforeRender	5.14
» Processing toolbar data	5.05
Rendering View	6.71
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.73
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.55
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.08
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id63315
  nameJVNDB-2003-000041
  titleOpenSSL の ssl3_get_record に情報漏洩の脆弱性
  summaryOpenSSL では、データの復号化を行う際に、ブロック暗号のパディングによるエラーを発見した後でのメッセージ認証コード (Message Authentication Code) の妥当性に対するチェックが省略されているため、ブロック暗号のパディングによるエラー、もしくはメッセージ認証コードが妥当でないために生じるエラーの 2 つの異なるエラーケースを見分けることが可能な脆弱性が存在します。
  cveinfo_nameCVE-2003-0078
  cveinfo_id6906
  nvdinfo_nameCVE-2003-0078
  nvdinfo_id73225
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000041.html
  published_date2003-02-19
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id6906
  nameCVE-2003-0077
  statusEntry
  descriptionThe hanterm (hanterm-xf) terminal emulator 2.0.5 and earlier, and possibly later versions, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user"s terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
  phase(null)
  votes(null)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id73225
  nameCVE-2003-0078
  descriptionssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks that rely on distinguishing between padding and MAC verification errors, possibly leading to extraction of the original plaintext, aka the "Vaudenay timing attack."
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:N/A:N)
  sourcecve
  pub_date2017-01-03
  published2003-03-03
  modified_date2016-10-17
  typeCVE
  seq2003-0078
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id63314
  nameJVNDB-2003-000040
  titleSun Solaris の RPC パケットの処理におけるサービス運用妨害 (DoS) の脆弱性
  summarySun Solaris は、特定の RPC パケットの処理に、通常割り当てられるべき以上のメモリを割り当ててしまうため、大量のスワップ領域を消費してしまう脆弱性が存在します。
  cveinfo_nameCVE-2003-1079
  cveinfo_id7902
  nvdinfo_nameCVE-2003-1079
  nvdinfo_id74151
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000040.html
  published_date2003-02-18
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id7902
  nameCVE-2003-1078
  statusCandidate
  descriptionThe FTP client for Solaris 2.6, 7, and 8 with the debug (-d) flag enabled displays the user password on the screen during login.
  phaseAssigned (20050208)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id74151
  nameCVE-2003-1079
  descriptionUnknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service (memory consumption) via certain arguments in RPC calls that cause large amounts of memory to be allocated.
  reject
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-07-18
  published2003-02-18
  modified_date2017-07-10
  typeCVE
  seq2003-1079
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  2(array)
  Jvninfo(array)
  id63313
  nameJVNDB-2003-000039
  titleRed Hat Linux の useradd command におけるパーミッションの設定に関する脆弱性
  summaryRed Hat Linux に含まれている shadow-utils に付属する useradd コマンドには、ユーザアカウントの新規追加を行う際に、同時に作成されるローカルのメールスプール (/var/spool/mail/ユーザ名) のパーミッションを設定してしまう脆弱性が存在します。
  cveinfo_nameCVE-2002-1509
  cveinfo_id5893
  nvdinfo_nameCVE-2002-1509
  nvdinfo_id80462
  cvssv23.6
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000039.html
  published_date2003-02-18
  registered_date2007-04-01
  last_updated_date2007-07-30
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id5893
  nameCVE-2002-1509
  statusEntry
  descriptionA patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user"s group (mode 660), which allows other users in the same group to read or modify the new user"s incoming email.
  phase(null)
  votes(null)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id80462
  nameCVE-2002-1509
  descriptionA patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user"s group (mode 660), which allows other users in the same group to read or modify the new user"s incoming email.
  reject(null)
  CVSS_version2
  CVSS_score3.6
  severityLow
  CVSS_base_score3.6
  CVSS_impact_subscore4.9
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:P/I:P/A:N)
  sourcecve
  pub_date2017-01-05
  published2003-03-03
  modified_date2008-09-10
  typeCVE
  seq2002-1509
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id63312
  nameJVNDB-2003-000038
  titleIBM Lotus Domino における不正な HTTP リクエストによるサービス運用妨害 (DoS) の脆弱性
  summary------------
  cveinfo_nameCVE-2003-0181
  cveinfo_id7009
  nvdinfo_nameCVE-2003-0181
  nvdinfo_id73327
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000038.html
  published_date2003-02-17
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id7009
  nameCVE-2003-0180
  statusCandidate
  descriptionLotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form.
  phaseAssigned (20030328)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id73327
  nameCVE-2003-0181
  descriptionLotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a Fictionary Value Field POST request as demonstrated using the s_Validation form with a long, unknown parameter name.
  reject
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-07-18
  published2003-04-02
  modified_date2017-07-10
  typeCVE
  seq2003-0181
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  4(array)
  Jvninfo(array)
  id63311
  nameJVNDB-2003-000037
  titleIBM Lotus Domino における不完全な HTTP リクエストによるサービス運用妨害 (DoS) の脆弱性
  summary------------
  cveinfo_nameCVE-2003-0180
  cveinfo_id7008
  nvdinfo_nameCVE-2003-0180
  nvdinfo_id73326
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000037.html
  published_date2003-02-17
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id7008
  nameCVE-2003-0179
  statusCandidate
  descriptionBuffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control.
  phaseAssigned (20030328)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id73326
  nameCVE-2003-0180
  descriptionLotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form.
  reject
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-07-18
  published2003-04-02
  modified_date2017-07-10
  typeCVE
  seq2003-0180
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:13611/sort:jvnurl/direction:desc/Jvninfos:cveinfos
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:13611/sort:jvnurl/direction:desc/Jvninfos:cveinfos
Remote Port	21761
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	18.116.67.226
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	18.116.67.226
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	18.116.67.226
Unique Id	aBCRcMk0ppfDFz1Ej24UFgAAAJQ
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	18.116.67.226
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	18.116.67.226
Redirect Unique Id	aBCRcMk0ppfDFz1Ej24UFgAAAJQ
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	18.116.67.226
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	18.116.67.226
Redirect Redirect Unique Id	aBCRcMk0ppfDFz1Ej24UFgAAAJQ
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1745916272.0539
Request Time	1745916272

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====