Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5407 State: PUBLISHED Published: 2008-12-09T11:00:00 Last Updated: 2024-08-07T10:49:12.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec Backup Exec for Windows Servers 11.0 (aka 11d) builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allow remote attackers to bypass authentication, and read or delete files, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021246 - http://seer.entsupport.symantec.com/docs/314528.htm - http://www.securityfocus.com/bid/32347 - http://www.vupen.com/english/ad
/seer.entsupport.symantec.com/docs/314528.htm - http://www.securityfocus.com/bid/32347 - http://www.vupen.com/english/advisories/2008/3209 - http://secunia.com/advisories/32810 - http://securityresponse.symantec.com/avcenter/security/Content/2008.11.19.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46730
CVE ID: CVE-2008-5408 State: PUBLISHED Published: 2008-12-09T11:00:00 Last Updated: 2024-08-07T10:49:12.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the data management protocol in Symantec Backup Exec for Windows Servers 11.0 (aka 11d) builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via unknown vectors. NOTE: this can be exploited by unauthenticated remote attackers by leveraging CVE-2008-5407. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021246 - http://seer.entsupport.s
alyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021246 - http://seer.entsupport.symantec.com/docs/314528.htm - http://www.vupen.com/english/advisories/2008/3209 - http://secunia.com/advisories/32810 - http://securityresponse.symantec.com/avcenter/security/Content/2008.11.19.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46731 - http://www.securityfocus.com/bid/32346
CVE ID: CVE-2008-5409 State: PUBLISHED Published: 2008-12-09T11:00:00 Last Updated: 2024-08-07T10:49:12.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Security 8.5, and (3) Software602 Groupware Server 6.0.08.1118 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, possibly related to included compressed streams that were processed with the ASCIIHexDecode filter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE P
xDecode filter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32789 - http://secunia.com/advisories/27805 - http://osvdb.org/50205 - https://www.exploit-db.com/exploits/7178 - http://osvdb.org/50103 - http://www.securityfocus.com/bid/32396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46750 - http://secunia.com/advisories/32814 - http://osvdb.org/50010 - http://milw0rm.com/sploits/2008-BitDefenderDOS.zip
CVE ID: CVE-2008-5410 State: PUBLISHED Published: 2008-12-10T00:00:00 Last Updated: 2024-08-07T10:49:12.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent attackers to cause a denial of service (failed cryptographic operations) via unspecified vectors, related to the (1) RSA_sign and (2) RSA_verify functions. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-138863-02-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47137 - http:
un.com/search/document.do?assetkey=1-21-138863-02-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47137 - http://www.securityfocus.com/bid/32671 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139459-01-1 - http://www.vupen.com/english/advisories/2008/3372 - http://secunia.com/advisories/33050 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-246846-1 - http://www.securitytracker.com/id?1021358 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5914
CVE ID: CVE-2008-5411 State: PUBLISHED Published: 2008-12-10T00:00:00 Last Updated: 2024-08-07T10:56:45.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP," which makes it easier for remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33022 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK74777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47135 - http://www.vupen.com/english/advisories/2008/3370 - http://www.securityfocus.com/bid/32679 - http://www-01.ibm.co
7135 - http://www.vupen.com/english/advisories/2008/3370 - http://www.securityfocus.com/bid/32679 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2008-5412 State: PUBLISHED Published: 2008-12-10T00:00:00 Last Updated: 2024-08-07T10:56:45.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows has unknown impact and attack vectors related to JSPs. NOTE: this is probably a duplicate of CVE-2009-0438. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33022 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK75248 - http://www.vupen.com/english/advisories/2008/3370 - http://www.securityfocus.com/bid/32679 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - https://excha
370 - http://www.securityfocus.com/bid/32679 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47134
CVE ID: CVE-2008-5413 State: PUBLISHED Published: 2008-12-10T00:00:00 Last Updated: 2024-08-07T10:56:45.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2009-0434. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3370 - http://www.securityfocus.com/bid/32679 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www-1.ibm.com/support/docview.wss?uid=swg1
id/32679 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK63886 - http://www.vupen.com/english/advisories/2009/0423
CVE ID: CVE-2008-5414 State: PUBLISHED Published: 2008-12-10T00:00:00 Last Updated: 2024-08-07T10:56:45.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Feature Pack for Web Services in the Web Services Security component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 has unknown impact and attack vectors related to "userNameToken." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47136 - http://www.vupen.com/english/advisories/2008/3370 - http://www.securityfocus.com/bid/32679 - http://www-01.ibm.com/support/docview.wss?uid=sw
english/advisories/2008/3370 - http://www.securityfocus.com/bid/32679 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK67282
CVE ID: CVE-2008-5415 State: PUBLISHED Published: 2008-12-11T15:00:00 Last Updated: 2024-08-07T10:56:45.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499128/100/0/threaded - http://secunia.com/secunia_research/2007-82/ - http://secunia.com/advisories/27299 - http://securityreason.com/securityalert/4708 - http://www.vupen.com/english/advi
- http://secunia.com/advisories/27299 - http://securityreason.com/securityalert/4708 - http://www.vupen.com/english/advisories/2008/3404 - http://osvdb.org/50683 - http://www.securityfocus.com/bid/32764 - http://www.securityfocus.com/archive/1/499104/100/0/threaded - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=194293 - http://community.ca.com/blogs/casecurityresponseblog/archive/2008/12/10.aspx
CVE ID: CVE-2008-5416 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:56:45.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2 allows remote authenticated users to cause a denial of service (access violation exception) or execute arbitrary code by calling the sp_replwritetovarbin extended stored procedure with a set of invalid parameters that trigger memory
code by calling the sp_replwritetovarbin extended stored procedure with a set of invalid parameters that trigger memory overwrite, aka "SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.sec-consult.com/files/20081209_mssql-2000-sp_replwritetovarbin_memwrite.txt - http://www.vupen.com/english/advisories/2008/3380 - http://secunia.com/advisories/33034 - http://osvdb.org/50917 - http://securitytracker.com/id?1021363 - https://www.exploit-db.com/exploits/7501 - http://securitytracker.com/id?1021490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47182 - http://www.kb.cert.org/vuls/id/696644
cker.com/id?1021490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47182 - http://www.kb.cert.org/vuls/id/696644 - http://www.securityfocus.com/archive/1/499042/100/0/threaded - http://www.securityfocus.com/archive/1/499085/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-004 - http://securityreason.com/securityalert/4706 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html - http://www.microsoft.com/technet/security/advisory/961040.mspx - http://www.securityfocus.com/bid/32710 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6217 - http://www.vmware.com/security/advisories/VMSA-2
y.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6217 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.us-cert.gov/cas/techalerts/TA09-041A.html - http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0304.html - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2009-055.htm
CVE ID: CVE-2008-5417 State: PUBLISHED Published: 2008-12-10T13:33:00Z Last Updated: 2024-09-17T00:21:10.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha platform uses world-writable permissions for the OSIT$NAMES logical name table, which allows local users to bypass intended access restrictions and modify this table via the (1) SYS$CRELNM and (2) SYS$DELLNM system services. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1021364 - http://secunia.com/advisories/33028 - ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.3/AXP_DNVOSIECO03-V83.txt
CVE ID: CVE-2008-5418 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:56:45.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in login.php in the PunPortal module before 2.0 for PunBB allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pun_user[language] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7168 - http://www.securityfocus.com/bid/32380 - http://securityreason.com/securityalert/4707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46774
CVE ID: CVE-2008-5419 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:56:45.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SST_CTGTRANS requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021262 - http://securityreason.com/securityalert/4710 - http://www.zerodayinitiative.com/advisories/ZDI-08-075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46751 - http://osvdb.org/50031 - http://secunia.com/advisor
8-075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46751 - http://osvdb.org/50031 - http://secunia.com/advisories/32801 - http://www.securityfocus.com/bid/32389 - http://www.vupen.com/english/advisories/2008/3220 - http://www.securityfocus.com/archive/1/498555/100/0/threaded
CVE ID: CVE-2008-5420 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:56:45.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center before 6.1 does not properly authenticate SST_SENDFILE requests, which allows remote attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-08-076/ - http://www.securityfocus.com/bid/32392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46753 - http://secunia.com/advisories/32801 - http://www.vupen.com/english/advisories/2008/3220 - http://www.security
es/46753 - http://secunia.com/advisories/32801 - http://www.vupen.com/english/advisories/2008/3220 - http://www.securitytracker.com/id?1021263 - http://osvdb.org/50032 - http://securityreason.com/securityalert/4709 - http://www.securityfocus.com/archive/1/498556/100/0/threaded
CVE ID: CVE-2008-5421 State: PUBLISHED Published: 2008-12-11T15:00:00Z Last Updated: 2024-09-16T22:50:20.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header; (2) an invalid value in the Content-Length HTTP header, as demonstrated by a negative integer; or (3) a missing Content-Length HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/smsgheit-adv.txt - http://secunia.com/advisories/29149 - http://www.securityfocus.com/bid/28048
CVE ID: CVE-2008-5422 State: PUBLISHED Published: 2008-12-11T15:00:00 Last Updated: 2024-08-07T10:56:45.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2008-502.htm - http://secunia.com/advisories/33108 - http://www.securityfocus.com/bid/32769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47253 - http://www.vupe
- http://www.securityfocus.com/bid/32769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47253 - http://www.vupen.com/english/advisories/2008/3406 - http://www.securitytracker.com/id?1021383 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1
CVE ID: CVE-2008-5423 State: PUBLISHED Published: 2008-12-11T15:00:00 Last Updated: 2024-08-07T10:56:45.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33119 - http://www.security
ditional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33119 - http://www.securityfocus.com/bid/32772 - http://secunia.com/advisories/33108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47258 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240506-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-127556-03-1 - http://support.avaya.com/elmodocs2/security/ASA-2008-500.htm - http://securitytracker.com/id?1021379 - http://www.vupen.com/english/advisories/2008/3406 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1 - http://www.vupen.com/english/advisories/2008/3407
CVE ID: CVE-2008-5424 State: PUBLISHED Published: 2008-12-11T15:00:00 Last Updated: 2024-08-07T10:56:45.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (infinite loop) via a large e-mail message, a related issue to CVE-2006-1173. Additional Analyst Notes: - CVE Program Container: References: - http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro - http:/
lyst Notes: - CVE Program Container: References: - http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro - http://securityreason.com/securityalert/4721 - http://www.securityfocus.com/bid/32702 - http://www.securityfocus.com/archive/1/499038/100/0/threaded - http://www.securityfocus.com/archive/1/499045/100/0/threaded
CVE ID: CVE-2008-5425 State: PUBLISHED Published: 2008-12-11T15:00:00 Last Updated: 2024-08-07T10:56:45.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESet NOD32 2.70.0039.0000 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173. Additional Analyst Notes: - CVE Program Container: References: - http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro - http://securityreason.com/securityalert/4
: References: - http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro - http://securityreason.com/securityalert/4721 - http://www.securityfocus.com/archive/1/499038/100/0/threaded - http://www.securityfocus.com/archive/1/499045/100/0/threaded
CVE ID: CVE-2008-5426 State: PUBLISHED Published: 2008-12-11T15:00:00 Last Updated: 2024-08-07T10:56:45.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaspersky Internet Security Suite 2009 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173. Additional Analyst Notes: - CVE Program Container: References: - http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro - http://securityreason.com/se
ram Container: References: - http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro - http://securityreason.com/securityalert/4721 - http://www.securityfocus.com/archive/1/499038/100/0/threaded - http://www.securityfocus.com/archive/1/499045/100/0/threaded
CVE ID: CVE-2008-5427 State: PUBLISHED Published: 2008-12-11T15:00:00 Last Updated: 2024-08-07T10:56:45.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Norton Antivirus in Norton Internet Security 15.5.0.23 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173. Additional Analyst Notes: - CVE Program Container: References: - http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro - http://secur
otes: - CVE Program Container: References: - http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro - http://securityreason.com/securityalert/4721 - http://www.securityfocus.com/archive/1/499038/100/0/threaded - http://www.securityfocus.com/archive/1/499045/100/0/threaded
CVE ID: CVE-2008-5428 State: PUBLISHED Published: 2008-12-11T15:00:00 Last Updated: 2024-08-07T10:56:45.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 9.51 on Windows XP does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173. Additional Analyst Notes: - CVE Program Container: References: - http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro - http://securityreason.com/securityalert/47
References: - http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro - http://securityreason.com/securityalert/4721 - http://www.securityfocus.com/archive/1/499038/100/0/threaded - http://www.securityfocus.com/archive/1/499045/100/0/threaded
CVE ID: CVE-2008-5429 State: PUBLISHED Published: 2008-12-11T15:00:00 Last Updated: 2024-08-07T10:56:46.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incredimail build 5853710 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173. Additional Analyst Notes: - CVE Program Container: References: - http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro - http://securityreason.com/securityalert/4
CVE ID: CVE-2008-5430 State: PUBLISHED Published: 2008-12-13T05:00:00 Last Updated: 2024-08-07T10:56:46.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Thunderbird 2.0.14 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which might allow remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173. Additional Analyst Notes: - CVE Program Container: References: - http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro - http://www.securityfocus.com/bid/32