Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2008-1480
rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC request.
Affected Products: n/a
References: [{'name': '249146', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-249146-1'}, {'name': '29418', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29418'}, {'name': '5258', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5258'}, {'name': 'ADV-2009-0206', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0206'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2009-015.htm'}, {'name': 'solaris-rpcmetad-dos(41224)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41224'}, {'name': '28261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28261'}, {'name': '1019652', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019652'}, {'name': 'oval:org.mitre.oval:def:5698', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5698'}, {'name': 'ADV-2008-0918', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0918/references'}]
CVE State: PUBLISHED
Explain CVE-2008-1481
Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the board parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Products: n/a
References: [{'name': 'webspell-board-xss(41417)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41417'}, {'name': '28294', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28294'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/28294/exploit'}]
CVE State: PUBLISHED
Explain CVE-2008-1484
The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which allows remote authenticated users to determine the new password via a brute force attack on a seed that is based on the approximate creation time of the targeted account.  NOTE: this issue might be related to CVE-2006-5737.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://punbb.org/forums/viewtopic.php?id=18460'}, {'name': '29043', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29043'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sektioneins.de/advisories/SE-2008-01.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://punbb.org/download/changelogs/1.2.16_to_1.2.17.txt'}, {'name': '45561', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/45561'}, {'name': '20080220 Advisory SE-2008-01: PunBB Blind Password Recovery Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/488408/100/200/threaded'}, {'name': '5165', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5165'}, {'name': '27908', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27908'}]
CVE State: PUBLISHED
Explain CVE-2008-1485
Cross-site scripting (XSS) vulnerability in PunBB 1.2.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the get_host parameter to moderate.php.
Affected Products: n/a
References: [{'name': '29043', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29043'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://punbb.org/download/changelogs/1.2.16_to_1.2.17.txt'}, {'name': '45561', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/45561'}]
CVE State: PUBLISHED
Explain CVE-2008-1486
SQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote attackers to execute arbitrary SQL commands via the non-fulltext search.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.phorum.org/phorum5/read.php?64%2C126815%2C126815'}, {'name': '29519', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29519'}, {'name': '28540', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28540'}, {'name': 'phorum-nonfulltext-sql-injection(41418)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41418'}]
CVE State: PUBLISHED
Explain CVE-2008-1487
Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, and (5) plugins/stats/stats_view.php.
Affected Products: n/a
References: [{'name': '29525', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29525'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linpha.sourceforge.net/wiki/index.php/Release_Notes#Version_1.3.3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linpha.cvs.sourceforge.net/linpha/linpha/ChangeLog?view=markup'}]
CVE State: PUBLISHED
Explain CVE-2008-1488
Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to execute arbitrary code via a long filename.
Affected Products: n/a
References: [{'name': 'FEDORA-2008-6401', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00582.html'}, {'name': '29745', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29745'}, {'tags': ['x_refsource_MISC'], 'url': 'http://papasian.org/~dannyp/apcsmash.php.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://pecl.php.net/bugs/bug.php?id=13415'}, {'name': 'apc-apcsearchpaths-bo(41420)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41420'}, {'name': '29509', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29509'}, {'name': 'FEDORA-2008-6344', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00548.html'}, {'name': 'MDVSA-2008:082', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2008:082'}, {'name': '31082', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/31082'}, {'name': 'GLSA-200804-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200804-07.xml'}, {'name': '28457', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28457'}]
CVE State: PUBLISHED
Explain CVE-2008-1489
Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984.
Affected Products: n/a
References: [{'name': 'DSA-1543', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1543'}, {'name': '28433', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28433'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.videolan.org/vlc/changeset/09572892df7e72c0d4e598c0b5e076cf330d8b0a'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.videolan.org/security/sa0803.php'}, {'name': 'GLSA-200804-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200804-25.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.videolan.org/Changelog/0.8.6f'}, {'name': '29800', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29800'}, {'name': 'oval:org.mitre.oval:def:14841', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14841'}, {'name': '29766', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29766'}, {'name': '29503', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29503'}, {'name': 'ADV-2008-0985', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0985'}, {'name': 'vlcmediaplayer-mp4readbox-rdrf-bo(41412)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41412'}]
CVE State: PUBLISHED
Explain CVE-2008-1490
Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than CVE-2008-0659.
Affected Products: n/a
References: [{'name': '28354', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28354'}, {'name': 'aurigma-imageuploader41-bo(40152)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40152'}, {'name': '20080320 Pizco vulnerable to buffer overflow in activex', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=120605071403813&w=2'}, {'name': '29445', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29445'}]
CVE State: PUBLISHED
Explain CVE-2008-1491
Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/asuxdpc-adv.txt'}, {'name': 'asus-asmb3-dpcproxy-bo(41358)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41358'}, {'name': '5694', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5694'}, {'name': '3771', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3771'}, {'name': '28394', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28394'}, {'name': '29402', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29402'}, {'name': 'ADV-2008-0982', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0982/references'}, {'name': '20080321 Buffer-overflow in ASUS Remote Console 2.0.0.24', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489966/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2008-1492
Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter to (1) index.php and (2) install.php.  NOTE: it was later reported that vector 1 is also present in 2.0.
Affected Products: n/a
References: [{'name': '20080322 phpAddressBook v2.11 Multiple Local File Inclusion Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489971/100/0/threaded'}, {'name': '20080501 php-addressbook v2.0 Multiple Remote Vulnerabilities (LFI/XSS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/491525/100/0/threaded'}, {'name': '3772', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3772'}, {'name': '5288', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5288'}, {'name': 'phpaddressbook-skin-directory-traversal(41394)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41394'}, {'name': '29514', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29514'}, {'name': '28397', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28397'}, {'tags': ['x_refsource_MISC'], 'url': 'http://0x90.com.ar/Advisory/20080321.txt'}]
CVE State: PUBLISHED
Explain CVE-2008-1493
Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.
Affected Products: n/a
References: [{'name': '5296', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5296'}, {'name': '20080325 Cuteflow Bin v1.5.0 Local File Inclusion Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/490055/100/0/threaded'}, {'name': 'cuteflowbin-login-file-include(41392)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41392'}, {'name': '28419', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28419'}]
CVE State: PUBLISHED
Explain CVE-2008-1494
SQL injection vulnerability in inc/module/online.php in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a user details action, a different vector than CVE-2008-1425.
Affected Products: n/a
References: [{'name': '28329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28329'}, {'name': '3773', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3773'}, {'name': '20080320 Easy-Clanpage 2.2 (id) Remote SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489888/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2008-1495
Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary PHP files via a modified content type in an ajout action, as demonstrated by (1) image/gif and (2) application/pdf.
Affected Products: n/a
References: [{'name': '29466', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29466'}, {'name': '5281', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5281'}, {'name': '28346', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28346'}, {'tags': ['x_refsource_MISC'], 'url': 'http://realn.free.fr/releases/70207'}, {'name': 'peel-produits-file-upload(41354)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41354'}]
CVE State: PUBLISHED
Explain CVE-2008-1496
Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to (a) membre.php, and the (2) timestamp parameter to (b) the details action in achat/historique_commandes.php and (c) the facture action in factures/facture_html.php.
Affected Products: n/a
References: [{'name': 'peel-timestamp-sql-injection(41341)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41341'}, {'name': '29466', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29466'}, {'name': '5281', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5281'}, {'name': '28346', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28346'}, {'tags': ['x_refsource_MISC'], 'url': 'http://realn.free.fr/releases/70207'}, {'name': 'peel-membre-sql-injection(41353)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41353'}]
CVE State: PUBLISHED
Explain CVE-2008-1497
Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.
Affected Products: n/a
References: [{'name': '3774', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3774'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-03-07'}, {'name': '29105', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29105'}, {'name': '20080321 [INFIGO-2008-03-07]: Surgemail 38k4 IMAP server remote stack overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489959/100/0/threaded'}, {'name': '28377', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28377'}, {'name': 'surgemail-imap-lsub-bo(41402)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41402'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.netwinsite.com/surgemail/help/updates.htm'}]
CVE State: PUBLISHED
Explain CVE-2008-1498
Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command.
Affected Products: n/a
References: [{'name': '5259', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5259'}, {'name': '29105', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29105'}, {'name': '28260', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28260'}, {'name': 'ADV-2008-0901', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0901/references'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.netwinsite.com/surgemail/help/updates.htm'}]
CVE State: PUBLISHED
Explain CVE-2008-1499
Cross-site scripting (XSS) vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string.
Affected Products: n/a
References: [{'name': '20080321 XSS in cPanel 11.x', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489963/100/0/threaded'}, {'name': '3775', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3775'}, {'name': '28403', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28403'}, {'name': 'cpanel-manpage-xss(41374)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41374'}]
CVE State: PUBLISHED
Explain CVE-2008-1500
Cross-site scripting (XSS) vulnerability in index.php in TinyPortal 0.8.6 and 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Products: n/a
References: [{'name': '28402', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28402'}, {'name': 'tinyportal-index-xss(41376)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41376'}]
CVE State: PUBLISHED
Explain CVE-2008-1501
The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and unspecified other ircu derivatives allows remote attackers to cause a denial of service (daemon crash) via a malformed MODE command.
Affected Products: n/a
References: [{'name': 'undernet-ircu-sendusermode-dos(41401)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41401'}, {'name': '29486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29486'}, {'name': '20080324 ircu/snircd remote crash vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060906.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.quakenet.org/snircd/rev/2da2b881d9f5'}, {'name': '20080324 ircu/snircd remote crash vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489990/100/0/threaded'}, {'name': 'ADV-2008-0977', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0977'}, {'name': '1019687', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019687'}, {'name': '28413', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28413'}, {'name': '43613', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/43613'}, {'name': '3779', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3779'}, {'name': 'snircd-sendusermode-dos(41397)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41397'}, {'name': '5306', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5306'}, {'name': '1019688', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019688'}, {'name': 'ADV-2008-0978', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0978'}, {'name': '29481', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29481'}]
CVE State: PUBLISHED
Explain CVE-2008-1502
The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols.
Affected Products: n/a
References: [{'name': '29491', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29491'}, {'name': '31017', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/31017'}, {'name': '32400', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/32400'}, {'name': 'SUSE-SR:2008:015', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html'}, {'name': '32446', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/32446'}, {'name': 'DSA-1871', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1871'}, {'name': '30986', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30986'}, {'name': 'egroupware-badprotocolonce-security-bypass(41435)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41435'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.egroupware.org/viewvc/branches/1.4/phpgwapi/inc/class.kses.inc.php?r1=23625&r2=25110&pathrev=25110'}, {'name': 'FEDORA-2008-6226', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00331.html'}, {'name': '31018', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/31018'}, {'name': 'USN-658-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/658-1/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.moodle.org/en/Release_Notes#Moodle_1.8.5'}, {'name': '[oss-security] 20080708 Re: CVE request: moodle xss in < 1.8.5', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2008/07/08/14'}, {'name': '30073', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30073'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.egroupware.org/changelog'}, {'name': '28424', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28424'}, {'name': 'GLSA-200805-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200805-04.xml'}, {'name': 'ADV-2008-0989', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0989/references'}, {'name': 'DSA-1691', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1691'}, {'name': '31167', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/31167'}]
CVE State: PUBLISHED
Explain CVE-2008-1503
Cross-site scripting (XSS) vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to inject arbitrary web script or HTML via (1) the name of a node object, or the (2) sysContact or (3) sysLocation SNMP configuration field, aka "Audit Log XSS." NOTE: these issues might be resultant from cross-site request forgery (CSRF) vulnerabilities.
Affected Products: n/a
References: [{'name': '3778', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3778'}, {'name': 'f5bigip-auditlog-xss(41440)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41440'}, {'name': '20080323 F5 BIG-IP Web Management Audit Log XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489991/100/0/threaded'}, {'name': '28416', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28416'}]
CVE State: PUBLISHED
Explain CVE-2008-1504
Cross-site scripting (XSS) vulnerability in setup.php3 in phpHeaven phpMyChat 0.14.5 allows remote attackers to inject arbitrary web script or HTML via the Lang parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Products: n/a
References: [{'name': 'phpmychat-setup-xss(41381)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41381'}, {'name': '28399', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28399'}]
CVE State: PUBLISHED
Explain CVE-2008-1505
PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the cpage parameter to index.php.
Affected Products: n/a
References: [{'name': '5294', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5294'}, {'name': '29520', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29520'}, {'name': '28409', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28409'}, {'name': 'custompages-index-file-include(41396)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41396'}]
CVE State: PUBLISHED
Explain CVE-2008-1506
PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.
Affected Products: n/a
References: [{'name': '5281', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5281'}, {'name': 'peel-phpinfo-information-disclosure(41494)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41494'}, {'tags': ['x_refsource_MISC'], 'url': 'http://realn.free.fr/releases/70207'}]
CVE State: PUBLISHED
Explain CVE-2008-1507
PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@peel.fr account with password cinema, which allows remote attackers to gain administrative access.
Affected Products: n/a
References: [{'name': '5281', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5281'}, {'tags': ['x_refsource_MISC'], 'url': 'http://realn.free.fr/releases/70207'}, {'name': 'peel-default-password(41493)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41493'}]
CVE State: PUBLISHED
Explain CVE-2008-1508
SQL injection vulnerability in EfesTech E-Kontör and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Products: n/a
References: [{'name': '29499', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29499'}, {'name': 'ekontor-id-sql-injection(41419)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41419'}, {'name': '3776', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3776'}, {'name': '28412', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28412'}, {'name': '20080323 EfesTech E-Kont&ouml;r (id) Remote SQL INJECTION', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489989/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2008-1509
SQL injection vulnerability in index.php in XLPortal 2.2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the query parameter.
Affected Products: n/a
References: [{'name': '5293', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5293'}, {'name': '29479', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29479'}, {'name': 'xlportal-index-sql-injection(41379)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41379'}, {'name': '28408', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28408'}]
CVE State: PUBLISHED
Explain CVE-2008-1510
Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter.
Affected Products: n/a
References: [{'name': '28411', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28411'}, {'name': '3777', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3777'}, {'name': 'opencms-userslist-xss(41390)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41390'}, {'name': '20080323 Alkacon OpenCms users_list.jsp searchfilter XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489984/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2008-1511
Multiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the PathToComment parameter for (1) classes/class_admin.php and (2) classes/class_comments.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/28401/exploit'}, {'name': '28401', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28401'}]
CVE State: PUBLISHED
Explain CVE-2008-1512
Directory traversal vulnerability in admin/admin_xs.php in eXtreme Styles module (XS-Mod) 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the phpEx parameter. NOTE: some of these details are obtained from third party information.
Affected Products: n/a
References: [{'name': '5301', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5301'}, {'name': 'xs-adminxs-file-include(41404)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41404'}, {'name': '28432', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28432'}, {'name': '29487', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29487'}]
CVE State: PUBLISHED
Explain CVE-2008-1513
SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the Referers statistics option is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header.
Affected Products: n/a
References: [{'name': '5239', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5239'}, {'name': 'cmsdanneo-index-sql-injection(41153)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41153'}]
CVE State: PUBLISHED
Explain CVE-2008-1514
arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in 31-bit mode, which triggers an invalid dereference.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://sourceware.org/systemtap/wiki/utrace/tests'}, {'name': '31826', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/31826'}, {'name': 'DSA-1655', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1655'}, {'name': '31177', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/31177'}, {'name': '32237', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/32237'}, {'name': 'RHSA-2008:0972', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2008-0972.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.6'}, {'name': 'DSA-1653', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1653'}, {'name': '32356', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/32356'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=438147'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d6e48f43340343d97839eadb1ab7b6a3ea98797'}, {'name': 'linux-kernel-ptrace-dos(41501)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41501'}, {'name': 'SUSE-SA:2008:051', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html'}, {'name': '32799', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/32799'}, {'name': 'oval:org.mitre.oval:def:9555', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9555'}, {'name': '32315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/32315'}]
CVE State: PUBLISHED
Explain CVE-2008-1515
The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."
Affected Products: n/a
References: [{'name': '29622', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29622'}, {'name': '29859', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29859'}, {'name': 'SUSE-SR:2008:008', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otrs.org/advisory/OSA-2008-01-en/'}, {'name': '28647', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28647'}, {'name': '29585', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29585'}, {'name': 'FEDORA-2008-3100', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html'}, {'name': 'otrs-soapinterface-weak-security(41577)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41577'}]
CVE State: PUBLISHED
Explain CVE-2008-1517
Array index error in the xnu (Mach) kernel in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (system shutdown) via unspecified vectors related to workqueues.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT3549'}, {'name': '1022213', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1022213'}, {'name': '35074', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35074'}, {'name': 'APPLE-SA-2009-05-12', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2009/May/msg00002.html'}, {'name': '20090514 Apple Mac OS X xnu Kernel workqueue_additem/workqueue_removeitem Index Validation Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=797'}, {'name': 'TA09-133A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA09-133A.html'}, {'name': 'ADV-2009-1297', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1297'}, {'name': 'macos-kernel-workqueue-code-execution(50489)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50489'}]
CVE State: PUBLISHED
Explain CVE-2008-1518
Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and 7.0 and Internet Security 6.0 and 7.0 allows local users to gain privileges via an IOCTL 0x800520e8 call.
Affected Products: n/a
References: [{'name': '1020195', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1020195'}, {'name': 'ADV-2008-1739', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1739'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kaspersky.com/technews?id=203038727'}, {'name': '30534', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30534'}, {'name': 'kaspersky-internetsecurity-kl1-bo(42849)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/42849'}, {'name': '20080604 Kaspersky Internet Security IOCTL Stack Based Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=704'}, {'name': '1020196', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1020196'}]
CVE State: PUBLISHED
Explain CVE-2008-1521
ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to gain privileges by accessing administrative URIs, as demonstrated by rpSysAdmin.html.
Affected Products: n/a
References: [{'name': '20080301 The Router Hacking Challenge is Over!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489009/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gnucitizen.org/projects/router-hacking-challenge/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf'}]
CVE State: PUBLISHED
Explain CVE-2008-1522
ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), have (1) "user" as their default password for the "user" account and (2) "1234" as their default password for the "admin" account, which makes it easier for remote attackers to obtain access.
Affected Products: n/a
References: [{'name': '20080301 The Router Hacking Challenge is Over!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489009/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gnucitizen.org/projects/router-hacking-challenge/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf'}, {'name': 'zyxelprestige-default-password(41508)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41508'}]
CVE State: PUBLISHED
Explain CVE-2008-1523
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain ISP and Dynamic DNS credentials by sending a direct request for (1) WAN.html, (2) wzPPPOE.html, and (3) rpDyDNS.html, and then reading the HTML source.
Affected Products: n/a
References: [{'name': '20080301 The Router Hacking Challenge is Over!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489009/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gnucitizen.org/projects/router-hacking-challenge/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf'}, {'name': 'zyxelprestige-multiple-info-disclosure(41509)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41509'}]
CVE State: PUBLISHED
Explain CVE-2008-1524
The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has "public" as its default community for both (1) read and (2) write operations, which allows remote attackers to perform administrative actions via SNMP, as demonstrated by reading the Dynamic DNS service password or inserting an XSS sequence into the system.sysName.0 variable, which is displayed on the System Status page.
Affected Products: n/a
References: [{'name': '20080301 The Router Hacking Challenge is Over!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489009/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gnucitizen.org/projects/router-hacking-challenge/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf'}]
CVE State: PUBLISHED
Explain CVE-2008-1525
The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address.
Affected Products: n/a
References: [{'name': '20080301 The Router Hacking Challenge is Over!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489009/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gnucitizen.org/projects/router-hacking-challenge/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf'}]
CVE State: PUBLISHED
Explain CVE-2008-1526
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords.
Affected Products: n/a
References: [{'name': '20080301 The Router Hacking Challenge is Over!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489009/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gnucitizen.org/projects/router-hacking-challenge/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf'}]
CVE State: PUBLISHED
Explain CVE-2008-1527
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack.
Affected Products: n/a
References: [{'name': '20080301 The Router Hacking Challenge is Over!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489009/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gnucitizen.org/projects/router-hacking-challenge/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf'}]
CVE State: PUBLISHED
Explain CVE-2008-1528
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain authentication data by making direct HTTP requests and then reading the HTML source, as demonstrated by a request for (1) RemMagSNMP.html, which discloses SNMP communities; or (2) WLAN.html, which discloses WEP keys.
Affected Products: n/a
References: [{'name': '20080301 The Router Hacking Challenge is Over!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489009/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gnucitizen.org/projects/router-hacking-challenge/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf'}, {'name': 'zyxelprestige-snmp-wep-info-disclosure(41511)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41511'}]
CVE State: PUBLISHED
Explain CVE-2008-1529
ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods.
Affected Products: n/a
References: [{'name': '20080301 The Router Hacking Challenge is Over!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489009/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gnucitizen.org/projects/router-hacking-challenge/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf'}, {'name': 'zyxelprestige-password-weak-security(41513)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41513'}]
CVE State: PUBLISHED