Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5252 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T10:49:11.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x before 1.13.3 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html - http://www.debian.org/security/2009/dsa-1901 - http://secunia.com/advisories/33133 - http://lists.opensuse.org/opensuse-se
tp://www.debian.org/security/2009/dsa-1901 - http://secunia.com/advisories/33133 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html - http://secunia.com/advisories/33349
CVE ID: CVE-2008-5256 State: PUBLISHED Published: 2008-11-27T00:00:00 Last Updated: 2024-08-07T10:49:12.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-247326-1 - http://www.virtualbox.org/wiki/Changelog - http://secunia.com/advisories/32851 - http://www.virtualbox.org/changeset?new=trunk%2Fsrc%2Flibs%2Fxpcom18a4%2Fipc%2Fipcd%2Fdaemon%2Fsrc%2FipcdUnix.cpp%40
1 - http://www.virtualbox.org/changeset?new=trunk%2Fsrc%2Flibs%2Fxpcom18a4%2Fipc%2Fipcd%2Fdaemon%2Fsrc%2FipcdUnix.cpp%4013810 - http://www.vupen.com/english/advisories/2008/3410 - http://www.securitytracker.com/id?1021384 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46826 - http://www.securityfocus.com/bid/32444 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:011
CVE ID: CVE-2008-5257 State: PUBLISHED Published: 2008-11-27T00:00:00 Last Updated: 2024-08-07T10:49:11.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: webseald in WebSEAL 6.0.0.17 in IBM Tivoli Access Manager for e-business allows remote attackers to cause a denial of service (crash or hang) via HTTP requests, as demonstrated by a McAfee vulnerability scan. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46821 - http://www.securityfocus.com/bid/32461 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28611 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ37270
CVE ID: CVE-2008-5259 State: PUBLISHED Published: 2009-04-16T15:00:00 Last Updated: 2024-08-07T10:49:12.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format (STRF) chunk, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502701/100/0/threaded - http://www.vupen.com/english/advisories/2009/1044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49908 - http://www.securitytracker.com/id?1022061 - htt
2009/1044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49908 - http://www.securitytracker.com/id?1022061 - http://secunia.com/advisories/33196 - http://secunia.com/secunia_research/2008-57/ - http://www.securityfocus.com/bid/34523
CVE ID: CVE-2008-5260 State: PUBLISHED Published: 2009-01-26T15:05:00 Last Updated: 2024-08-07T10:49:12.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40.0.0 allows remote attackers to execute arbitrary code via a long image_pan_tilt property value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2008-58/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/48176 - http://www.securityfocus.com/bid/33408 - http://osvdb.org/51532 - http://secunia.com/advisories/33444 - http://www.axis.com/techsup/software/ac
s.com/bid/33408 - http://osvdb.org/51532 - http://secunia.com/advisories/33444 - http://www.axis.com/techsup/software/acc/files/acc_security_update_090119.pdf - http://www.vupen.com/english/advisories/2009/0228 - http://www.securityfocus.com/archive/1/500334/100/0/threaded
CVE ID: CVE-2008-5262 State: PUBLISHED Published: 2009-01-13T16:00:00 Last Updated: 2024-08-07T10:49:12.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/il_hdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2008-59/ - http://secunia.com/advisories/33637 - http://secunia.com/advisories/33470 - http://secunia.com/advisories/33801 - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00845.html - http://www.securityfo
ories/33801 - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00845.html - http://www.securityfocus.com/bid/33231 - http://www.debian.org/security/2009/dsa-1717
CVE ID: CVE-2008-5263 State: PUBLISHED Published: 2009-02-26T16:00:00 Last Updated: 2024-08-07T10:49:12.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the mt_codec::getHdrHead function in kernel/kls_hdr/fmt_codec_hdr.cpp in ksquirrel-libs 0.8.0 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE image (aka .hdr file). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48901 - http://secunia.com/secunia_research/2008-63/ - http://www.vupen.com/english/advisories/2009/0528 - http://www.securityfocu
tp://secunia.com/secunia_research/2008-63/ - http://www.vupen.com/english/advisories/2009/0528 - http://www.securityfocus.com/bid/33902 - http://www.securityfocus.com/archive/1/501228/100/0/threaded
CVE ID: CVE-2008-5264 State: PUBLISHED Published: 2008-11-28T18:26:00 Last Updated: 2024-08-07T10:49:12.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the p parameter in a root action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42963 - http://www.securityfocus.com/bid/29626 - http://www.securityfocus.com/archive/1/493217/100/0/threaded - http://securityreason.com/securityalert/4655 - http://secunia.com/advisories/30623
CVE ID: CVE-2008-5265 State: PUBLISHED Published: 2008-11-28T18:26:00 Last Updated: 2024-08-07T10:49:12.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in TNT Forum 0.9.4, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the modulo parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42978 - https://www.exploit-db.com/exploits/5782 - http://secunia.com/advisories/30595 - http://www.securityfocus.com/bid/29645 - http://securityreason.com/securityalert/4656
CVE ID: CVE-2008-5266 State: PUBLISHED Published: 2008-11-28T18:26:00 Last Updated: 2024-08-07T10:49:12.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a different vector than CVE-2008-2751. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4659 - http://www.securityfocus.com/archive/1/493243/100/0/threaded - http://webappsecurity
rityreason.com/securityalert/4659 - http://www.securityfocus.com/archive/1/493243/100/0/threaded - http://webappsecurity.wordpress.com/2008/06/11/xss-glassfish-web-admin-interface-sun-java-system-application/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/47029 - http://secunia.com/advisories/30604 - http://www.securityfocus.com/bid/29646
CVE ID: CVE-2008-5267 State: PUBLISHED Published: 2008-11-28T18:26:00 Last Updated: 2024-08-07T10:49:12.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in answer.php in Experts 1.0.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the question_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29642 - https://www.exploit-db.com/exploits/5776 - http://securityreason.com/securityalert/4654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42954
CVE ID: CVE-2008-5268 State: PUBLISHED Published: 2008-11-28T18:26:00 Last Updated: 2024-08-07T10:49:12.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the Topic_Id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4653 - https://www.exploit-db.com/exploits/5775 - http://www.securityfocus.com/archive/1/493302/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42977 - http://www.securityfocus.com/bid/29631
CVE ID: CVE-2008-5269 State: PUBLISHED Published: 2008-11-28T18:26:00 Last Updated: 2024-08-07T10:49:12.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in pSys 0.7.0 alpha allows remote attackers to execute arbitrary SQL commands via the shownews parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5745 - http://securityreason.com/securityalert/4652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42916
CVE ID: CVE-2008-5270 State: PUBLISHED Published: 2008-11-28T18:26:00 Last Updated: 2024-08-07T10:49:12.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL commands via the board parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5783 - http://www.securityfocus.com/bid/29647 - http://securityreason.com/securityalert/4651
CVE ID: CVE-2008-5271 State: PUBLISHED Published: 2008-11-28T18:26:00 Last Updated: 2024-08-07T10:49:11.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30602 - http://www.securityfocus.com/bid/29644 - https://www.exploit-db.com/exploits/5779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42970
CVE ID: CVE-2008-5272 State: PUBLISHED Published: 2008-11-28T18:26:00 Last Updated: 2024-08-07T10:49:12.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the template parameter to (1) starnet/editors/fckeditor/studenteditor.php; (2) starnet/modules/sn_news/edit_content.php, reached through starnet/index.php; and (3) starnet/modules/sn_newsletter/edit_content.php, reached through starnet/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4660 - http://secunia.c
al Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4660 - http://secunia.com/advisories/30602 - http://www.securityfocus.com/bid/29644 - https://www.exploit-db.com/exploits/5779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42969
CVE ID: CVE-2008-5273 State: PUBLISHED Published: 2008-11-28T18:26:00 Last Updated: 2024-08-07T10:49:12.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42964 - http://securityreason.com/securityalert/4658 - http://www.securityfocus.com/bid/29638 - http://secunia.com/advisories/30593
CVE ID: CVE-2008-5274 State: PUBLISHED Published: 2008-11-28T18:26:00 Last Updated: 2024-08-07T10:49:12.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47032 - http://secunia.com/advisories/30593
CVE ID: CVE-2008-5275 State: PUBLISHED Published: 2008-11-28T18:26:00 Last Updated: 2024-08-07T10:49:12.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the (a) "Unzip archive" and (b) "Upload files and archives" functionality in net2ftp 0.96 stable and 0.97 beta allow remote attackers to create, read, or delete arbitrary files via a .. (dot dot) in a filename within a (1) TAR or (2) ZIP archive. NOTE: this can be leveraged for code execution by creating a .php file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42994 - http://vuln.sg/net2ftp096-en.html - htt
iner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42994 - http://vuln.sg/net2ftp096-en.html - http://www.securityfocus.com/bid/29664 - http://secunia.com/advisories/30611
CVE ID: CVE-2008-5276 State: PUBLISHED Published: 2008-12-03T17:00:00 Last Updated: 2024-08-07T10:49:11.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.trapkit.de/advisories/TKADV2008-013.txt - http://www.securityfocus.com/archive/1/498768/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A
rchive/1/498768/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14793 - http://www.osvdb.org/50333 - http://www.vupen.com/english/advisories/2008/3287 - http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d19de4e9f2211cbe5bde00726b66c47a424f4e07 - http://secunia.com/advisories/32942 - http://www.securityfocus.com/bid/32545 - http://securityreason.com/securityalert/4680 - http://secunia.com/advisories/33315 - http://www.videolan.org/security/sa0811.html - http://security.gentoo.org/glsa/glsa-200812-24.xml
CVE ID: CVE-2008-5277 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:11.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerDNS before 2.9.21.2 allows remote attackers to cause a denial of service (daemon crash) via a CH HINFO query. Additional Analyst Notes: - CVE Program Container: References: - http://doc.powerdns.com/powerdns-advisory-2008-03.html - http://securitytracker.com/id?1021304 - http://secunia.com/advisories/33264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47076 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html - http://www.securityfocus.com/bid/32627 - http://secunia.com/advisories/32979 -
ecurity-announce/2008-12/msg00002.html - http://www.securityfocus.com/bid/32627 - http://secunia.com/advisories/32979 - http://security.gentoo.org/glsa/glsa-200812-19.xml
CVE ID: CVE-2008-5278 State: PUBLISHED Published: 2008-11-28T19:00:00 Last Updated: 2024-08-07T10:49:12.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header (HTTP_HOST variable). Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00176.html - http://wordpress.org/development/2008/11/wordpress-265/ - http://osvdb.org/50214 - http://securityreason.com/securityalert/4662 -
dpress.org/development/2008/11/wordpress-265/ - http://osvdb.org/50214 - http://securityreason.com/securityalert/4662 - http://www.securityfocus.com/bid/32476 - http://secunia.com/advisories/32882 - http://www.securityfocus.com/archive/1/498652 - http://secunia.com/advisories/32966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46882 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00000.html
CVE ID: CVE-2008-5279 State: PUBLISHED Published: 2008-11-29T02:00:00 Last Updated: 2024-08-07T10:49:11.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Local ZIM Server (zcs.exe) in Zilab Chat and Instant Messaging (ZIM) Server 2.1 and earlier allow remote attackers to execute arbitrary code via (1) heap-based buffer overflows involving multiple vectors including a long room name and a long source account, and (2) a stack-based buffer overflow with a long username in an information request. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27940 - http://
ation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27940 - http://aluigi.org/poc/zilabzcsx.zip - http://secunia.com/advisories/29062 - http://www.vupen.com/english/advisories/2008/0664 - http://aluigi.altervista.org/adv/zilabzcsx-adv.txt
CVE ID: CVE-2008-5280 State: PUBLISHED Published: 2008-11-29T02:00:00 Last Updated: 2024-08-07T10:49:12.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0 and 2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted requests without required parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27940 - http://aluigi.org/poc/zilabzcsx.zip - http://secunia.com/advisories/29062 - http://www.vupen.com/english/advisories/2008/0664 - http://www.vupen.com/english/advisories/2008/0665 - http://aluigi.altervista.org/adv/z
om/english/advisories/2008/0664 - http://www.vupen.com/english/advisories/2008/0665 - http://aluigi.altervista.org/adv/zilabzcsx-adv.txt
CVE ID: CVE-2008-5281 State: PUBLISHED Published: 2008-11-29T02:00:00Z Last Updated: 2024-09-17T01:05:34.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Titan FTP Server 6.05 build 550 allows remote attackers to execute arbitrary code via a long DELE command. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0802-exploits/titan-heap-py.txt - http://www.securityfocus.com/bid/27611
CVE ID: CVE-2008-5282 State: PUBLISHED Published: 2008-11-29T02:00:00 Last Updated: 2024-08-07T10:49:12.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with a long HREF attribute, and (2) a DIV tag with a long id attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.bmgsec.com.au/advisory/40/ - http://www.securityfocus.com/archive/1/498583/100/0/threaded - http://www.securityfocus.com/bid/32442 - http://securityreason.com/securityalert/4657 - http://osvdb.org/50282 - http://osvdb.org/50283 - http://www.securityf
- http://securityreason.com/securityalert/4657 - http://osvdb.org/50282 - http://osvdb.org/50283 - http://www.securityfocus.com/archive/1/498578/100/0/threaded - http://secunia.com/advisories/32848 - http://www.vupen.com/english/advisories/2008/3255 - http://www.bmgsec.com.au/advisory/41/
CVE ID: CVE-2008-5283 State: PUBLISHED Published: 2008-11-29T02:00:00Z Last Updated: 2024-09-16T22:03:24.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Hack Honeypot (GHH) File Upload Manager 1.3 allows remote attackers to delete uploaded files via unknown vectors related to the delall action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. CVE analysis suggests that the most recent version as of 20081128 is 1.2, and the File Upload Manager does not have a "delall" action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27877
CVE ID: CVE-2008-5284 State: PUBLISHED Published: 2008-11-29T02:00:00 Last Updated: 2024-08-07T10:49:12.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44, Emerald 5.0.49 and other versions before 5.0.52, Air Marshal 2.0.4 and other versions before 2.0.8, and Radius test client (aka Radlogin) 4.0.20 and earlier, allows remote attackers to cause a denial of service (crash) via an HTTP Content-Length header with a negative value, which triggers a single byte overwrite of memory using a NULL terminator. NOTE: some of these details are obtained from third party information. Additional Analyst
emory using a NULL terminator. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/emerdal-adv.txt - http://www.iea-software.com/docs/Radius40/changes.txt - http://www.securityfocus.com/bid/27701 - http://secunia.com/advisories/28846 - http://www.vupen.com/english/advisories/2008/0484 - http://www.securityfocus.com/archive/1/487810/100/200/threaded - http://www.iea-software.com/docs/airmarshal1/changes.txt - http://www.iea-software.com/docs/Emerald5/changes.txt
CVE ID: CVE-2008-5285 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:12.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP request, which triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499154/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm - http://www.mandriva.com/security/advisories?name=MDVSA-2008:242 - http://www.securityfocus.com/bid/32422 - http://securityreason.com/securityalert/4663 - http://lists.grok.org.uk/pipermail/full-disclosu