JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2004-000553	CUPS の lppasswd における passwd.new ファイルと STDERR との違いを認識しない脆弱性	------------	CVE-2004-1270	2.1	http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000553.html	2004-12-15	2007-04-01	View
JVNDB-2003-000193	XFree86 のlibX11.so における任意のコードを実行される脆弱性	XFree86 に同梱されている libX11.so ライブラリにおいて、LD_PRELOAD 環境変数で他のライブラリの読み込みが指定されている場合に、実行権限の確認を行わずにそのまま処理を実行してしまい、ライブラリ内の処理をより高位の権限で呼び出してしまう脆弱性が存在します。	CVE-2002-1472	7.2	http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000193.html	2003-06-25	2007-04-01	View
JVNDB-2002-000050	Microsoft Windows の SMTP サービスにおける認証を回避される脆弱性	Microsoft Windows および Exchange Server において、SMTP サービスの NTLM 認証レイヤからユーザの認証通知時のチェックが不適切なため、サーバへの認証のみでSMTPサービスの利用が可能となる脆弱性が存在します。	CVE-2002-0054	7.5	http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000050.html	2002-02-27	2007-04-01	View
JVNDB-2002-000306	Ethereal における BGP パケットを利用したサービス運用妨害（DoS）の脆弱性	Ethereal には、 BGP プロトコルの実装において、整数の取り扱いに不備があり、メッセージ長を偽造した BGP パケットを送信された場合に、無限ループが発生する脆弱性が存在します。	CVE-2002-1355	5	http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000306.html	2002-12-07	2007-04-01	View
JVNDB-2000-000015	Microsoft IIS のチャンクエンコーディングにおけるバッファオーバーフローの脆弱性	Microsoft IIS には、チャンクエンコーディングデータによって予約可能なバッファのサイズに対する制限がないため、クライアントから POST または PUT コマンドで容量の大きいバッファを要求された場合、システムメモリを大量に消費してしまう脆弱性が存在します。	CVE-2000-0226	5	http://jvndb.jvn.jp/ja/contents/2000/JVNDB-2000-000015.html	2000-03-20	2007-04-01	View

Page 601 of 13768, showing 5 records out of 68839 total, starting on record 3001, ending on 3005

<<first <prev 597 | 598 | 599 | 600 | 601 | 602 | 603 | 604 | 605 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page601
  sortlast_updated_date
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page601
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.last_updated_dateasc
  limit5
  options(array)
  page601
  order(array)
  Jvninfo.last_updated_dateasc
  sortlast_updated_date
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.87 MB

Message	Memory use
Component initialization	1.38 MB
Controller action start	1.49 MB
Controller render start	2.28 MB
View render complete	2.78 MB

Timers

Total Request Time: 85 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.73
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	67.02
Event: Controller.beforeRender	4.28
» Processing toolbar data	4.20
Rendering View	6.47
» Event: View.beforeRender	0.02
» Rendering APP/View/Jvninfos/index.ctp	5.52
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.55
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.08
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id63211
  nameJVNDB-2004-000553
  titleCUPS の lppasswd における passwd.new ファイルと STDERR との違いを認識しない脆弱性
  summary------------
  cveinfo_nameCVE-2004-1270
  cveinfo_id9697
  nvdinfo_nameCVE-2004-1270
  nvdinfo_id71650
  cvssv22.1
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000553.html
  published_date2004-12-15
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id9697
  nameCVE-2004-1269
  statusCandidate
  descriptionlppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail.
  phaseAssigned (20041220)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id71650
  nameCVE-2004-1270
  descriptionlppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers an error message.
  reject
  CVSS_version2
  CVSS_score2.1
  severityLow
  CVSS_base_score2.1
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore3.9
  nvd_xml_version
  CVSS_vector(AV:L/AC:L/Au:N/C:N/I:P/A:N)
  sourcecve
  pub_date2017-07-18
  published2005-01-10
  modified_date2017-07-10
  typeCVE
  seq2004-1270
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  1(array)
  Jvninfo(array)
  id63467
  nameJVNDB-2003-000193
  titleXFree86 のlibX11.so における任意のコードを実行される脆弱性
  summaryXFree86 に同梱されている libX11.so ライブラリにおいて、LD_PRELOAD 環境変数で他のライブラリの読み込みが指定されている場合に、実行権限の確認を行わずにそのまま処理を実行してしまい、ライブラリ内の処理をより高位の権限で呼び出してしまう脆弱性が存在します。
  cveinfo_nameCVE-2002-1472
  cveinfo_id5856
  nvdinfo_nameCVE-2002-1472
  nvdinfo_id80425
  cvssv27.2
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000193.html
  published_date2003-06-25
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id5856
  nameCVE-2002-1472
  statusEntry
  descriptionUntrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privileges via a modified LD_PRELOAD environment variable that points to a malicious module.
  phase(null)
  votes(null)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id80425
  nameCVE-2002-1472
  descriptionUntrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privileges via a modified LD_PRELOAD environment variable that points to a malicious module.
  reject(null)
  CVSS_version2
  CVSS_score7.2
  severityHigh
  CVSS_base_score7.2
  CVSS_impact_subscore10
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-05
  published2003-03-03
  modified_date2008-09-05
  typeCVE
  seq2002-1472
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id63723
  nameJVNDB-2002-000050
  titleMicrosoft Windows の SMTP サービスにおける認証を回避される脆弱性
  summaryMicrosoft Windows および Exchange Server において、SMTP サービスの NTLM 認証レイヤからユーザの認証通知時のチェックが不適切なため、サーバへの認証のみでSMTPサービスの利用が可能となる脆弱性が存在します。
  cveinfo_nameCVE-2002-0054
  cveinfo_id4448
  nvdinfo_nameCVE-2002-0054
  nvdinfo_id79070
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000050.html
  published_date2002-02-27
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id4448
  nameCVE-2002-0054
  statusEntry
  descriptionSMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.
  phase(null)
  votes(null)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id79070
  nameCVE-2002-0054
  descriptionSMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-01-05
  published2002-03-08
  modified_date2016-10-17
  typeCVE
  seq2002-0054
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id63979
  nameJVNDB-2002-000306
  titleEthereal における BGP パケットを利用したサービス運用妨害（DoS）の脆弱性
  summaryEthereal には、 BGP プロトコルの実装において、整数の取り扱いに不備があり、メッセージ長を偽造した BGP パケットを送信された場合に、無限ループが発生する脆弱性が存在します。
  cveinfo_nameCVE-2002-1355
  cveinfo_id5739
  nvdinfo_nameCVE-2002-1355
  nvdinfo_id80308
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000306.html
  published_date2002-12-07
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id5739
  nameCVE-2002-1355
  statusCandidate
  descriptionMultiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via malformed messages.
  phaseProposed (20030317)
  votesACCEPT(2) Cole, Green | MODIFY(1) Cox
  commentsCox> Addref: REDHAT:RHSA-2002:291
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id80308
  nameCVE-2002-1355
  descriptionMultiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via malformed messages.
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-01-05
  published2002-12-23
  modified_date2008-09-05
  typeCVE
  seq2002-1355
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id64235
  nameJVNDB-2000-000015
  titleMicrosoft IIS のチャンクエンコーディングにおけるバッファオーバーフローの脆弱性
  summaryMicrosoft IIS には、チャンクエンコーディングデータによって予約可能なバッファのサイズに対する制限がないため、クライアントから POST または PUT コマンドで容量の大きいバッファを要求された場合、システムメモリを大量に消費してしまう脆弱性が存在します。
  cveinfo_nameCVE-2000-0226
  cveinfo_id1804
  nvdinfo_nameCVE-2000-0226
  nvdinfo_id76469
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2000/JVNDB-2000-000015.html
  published_date2000-03-20
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id1804
  nameCVE-2000-0226
  statusEntry
  descriptionIIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."
  phase(null)
  votes(null)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id76469
  nameCVE-2000-0226
  descriptionIIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-01-05
  published2000-03-20
  modified_date2008-09-10
  typeCVE
  seq2000-0226
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:601/sort:last_updated_date/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:601/sort:last_updated_date/direction:asc
Remote Port	5509
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	18.218.146.21
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	18.218.146.21
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	18.218.146.21
Unique Id	aCn-sq89PvxDnhZocWTGrAAAAO0
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	18.218.146.21
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	18.218.146.21
Redirect Unique Id	aCn-sq89PvxDnhZocWTGrAAAAO0
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	18.218.146.21
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	18.218.146.21
Redirect Redirect Unique Id	aCn-sq89PvxDnhZocWTGrAAAAO0
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1747582642.6561
Request Time	1747582642

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====