# CVEs published 2007-09-23

9 CVEs were published on September 23, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2001-1582](https://cve.now/CVE-2001-1582.md): Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP (no CVSS)
- [CVE-2001-1583](https://cve.now/CVE-2001-1583.md): lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control (no CVSS)
- [CVE-2002-2226](https://cve.now/CVE-2002-2226.md): Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument. (no CVSS)
- [CVE-2003-1336](https://cve.now/CVE-2003-1336.md): Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL. (no CVSS)
- [CVE-2003-1337](https://cve.now/CVE-2003-1337.md): Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP (no CVSS)
- [CVE-2003-1338](https://cve.now/CVE-2003-1338.md): CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to inject arbitrary HTTP headers and pos (no CVSS)
- [CVE-2003-1339](https://cve.now/CVE-2003-1339.md): Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attack (no CVSS)
- [CVE-2004-2686](https://cve.now/CVE-2004-2686.md): Directory traversal vulnerability in the vfs\_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modul (no CVSS)
- [CVE-2004-2687](https://cve.now/CVE-2004-2687.md): distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-09-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.