Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5627 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in account.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the (1) username parameter (aka Email field) or the (2) password parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46911 - https://www.exploit-db.com/exploits/7282
CVE ID: CVE-2008-5628 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CMS little 0.0.1 allows remote attackers to execute arbitrary SQL commands via the term parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32523 - http://securityreason.com/securityalert/4781 - https://www.exploit-db.com/exploits/7269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46931
CVE ID: CVE-2008-5629 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a play action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46935 - http://secunia.com/advisories/32890 - http://www.securityfocus.com/bid/32511
CVE ID: CVE-2008-5630 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 3 and 3.1.4 allows remote attackers to execute arbitrary SQL commands via the umprof_status parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46887 - https://www.exploit-db.com/exploits/7238 - http://www.securityfocus.com/bid/32487 - http://www.vupen.com/english/advisories/2008/3271 - http://securityreason.com/securityalert/4780
CVE ID: CVE-2008-5631 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or the (2) password parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46910 - https://www.exploit-db.com/exploits/7279 - http://secunia.com/advisories/32927
CVE ID: CVE-2008-5632 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Account.asp in Active Time Billing 3.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32895 - http://www.vupen.com/english/advisories/2008/3295 - https://www.exploit-db.com/exploits/7301
CVE ID: CVE-2008-5633 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46925 - http://secunia.com/advisories/32895 - https://www.exploit-db.com/exploits/7275
CVE ID: CVE-2008-5634 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46927 - http://secunia.com/advisories/32895 - https://www.exploit-db.com/exploits/7273
CVE ID: CVE-2008-5635 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46917 - https://www.exploit-db.com/exploits/7278
CVE ID: CVE-2008-5636 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cate.php in Lito Lite CMS, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4779 - http://www.securityfocus.com/bid/32538 - http://secunia.com/advisories/32910 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46923 - https://www.exploit-db.com/exploits/7294 - http://www.vupen.com/english/advisories/2008/3300
CVE ID: CVE-2008-5637 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in blog.asp in ParsBlogger (Pb) allows remote attackers to execute arbitrary SQL commands via the wr parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32488 - https://www.exploit-db.com/exploits/7239 - http://securityreason.com/securityalert/4778 - http://www.vupen.com/english/advisories/2008/3270
CVE ID: CVE-2008-5638 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the (1) ProductID parameter to reviews.aspx or the (2) linkid parameter to links.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32896 - https://www.exploit-db.com/exploits/7300 - http://securityreason.com/securityalert/4768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46908
CVE ID: CVE-2008-5639 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in TxtBlog 1.0 Alpha allows remote attackers to read arbitrary files via a .. (dot dot) in the m parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4777 - http://www.securityfocus.com/bid/32498 - https://www.exploit-db.com/exploits/7241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46902
CVE ID: CVE-2008-5640 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46912 - https://www.exploit-db.com/exploits/7290 - http://www.vupen.com/english/advisories/2008/3302 - http://www.securityfocus.com/bid/32544 - http://securityreason.com/securityalert/4776
CVE ID: CVE-2008-5641 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3297 - http://secunia.com/advisories/32901 - https://www.exploit-db.com/exploits/7299 - http://securityreason.com/securityalert/4767
CVE ID: CVE-2008-5642 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a cms_language cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7285 - http://secunia.com/advisories/32924 - http://securityreason.com/securityalert/4775 - http://www.securityfocus.com/bid/32535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46942 - http://www.vupen.com/english/advisories/2008/3306
CVE ID: CVE-2008-5643 State: PUBLISHED Published: 2008-12-17T18:00:00 Last Updated: 2024-08-07T11:04:43.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Books (com_books) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the book_id parameter in a book_details action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46561 - http://www.securityfocus.com/bid/32255 - http://securityreason.com/securityalert/4774
CVE ID: CVE-2008-5644 State: PUBLISHED Published: 2008-12-17T18:00:00 Last Updated: 2024-08-07T11:04:43.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3144 - http://typo3.org/teams/security/security-bulletins/typo3-20081113-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/46585 - http://secunia.com/advisories/32689 - http://www.securityfocus.com/bid/32284
CVE ID: CVE-2008-5645 State: PUBLISHED Published: 2008-12-17T18:00:00 Last Updated: 2024-08-07T11:04:44.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46461 - http://www.vupen.com/english/advisories/2008/3082 - http://securityreason.com/securityalert/4773 - http://marc.info/?l=full-disclosure&m=122606860208526&w=2 - http://se
2 - http://securityreason.com/securityalert/4773 - http://marc.info/?l=full-disclosure&m=122606860208526&w=2 - http://secunia.com/advisories/32592
CVE ID: CVE-2008-5646 State: PUBLISHED Published: 2008-12-17T18:00:00 Last Updated: 2024-08-07T11:04:43.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32652 - http://www.vupen.com/english/advisories/2008/3080 - http://www.securityfocus.com/bid/32226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46492 - http://trac.edgewall.org/wiki/ChangeLog
CVE ID: CVE-2008-5647 State: PUBLISHED Published: 2008-12-17T18:00:00 Last Updated: 2024-08-07T11:04:43.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46491 - http://secunia.com/advisories/32652 - http://www.vupen.com/english/advisories/2008/3080 - http://www.securityfocus.com/bid/32226 - http://trac.edgewall.org/wiki/ChangeLog
CVE ID: CVE-2008-5648 State: PUBLISHED Published: 2008-12-17T18:00:00 Last Updated: 2024-08-07T11:04:43.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/login.php in DeltaScripts PHP Shop 1.0 allows remote attackers to execute arbitrary SQL commands via the admin_username parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46429 - https://www.exploit-db.com/exploits/7025 - http://secunia.com/advisories/32583 - http://www.securityfocus.com/bid/32162
CVE ID: CVE-2008-5649 State: PUBLISHED Published: 2008-12-17T18:00:00 Last Updated: 2024-08-07T11:04:43.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46588 - https://www.exploit-db.com/exploits/7102 - http://www.vupen.com/english/advisories/2008/3140 - http://www.securityfocus.com/bid/32276 - http://securityreason.com/securityalert/4772
CVE ID: CVE-2008-5650 State: PUBLISHED Published: 2008-12-17T18:00:00 Last Updated: 2024-08-07T11:04:43.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46592 - http://secunia.com/advisories/32660 - http://www.securityfocus.com/bid/32298 - https://www.exploit-db.com/exploits/7103
CVE ID: CVE-2008-5651 State: PUBLISHED Published: 2008-12-17T18:00:00 Last Updated: 2024-08-07T11:04:43.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in plugins/bookmarker/bookmarker_backend.php in MyioSoft EasyBookMarker 4.0 allows remote attackers to execute arbitrary SQL commands via the Parent parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7053 - http://osvdb.org/49690 - http://www.securityfocus.com/bid/32200 - http://www.vupen.com/english/advisories/2008/3075 - http://secunia.com/advisories/32636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46474
CVE ID: CVE-2008-5652 State: PUBLISHED Published: 2008-12-17T18:00:00 Last Updated: 2024-08-07T11:04:43.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyBookMarker 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7045 - http://www.vupen.com/english/advisories/2008/3075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46447 - http://secunia
www.vupen.com/english/advisories/2008/3075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46447 - http://secunia.com/advisories/32673 - http://securityreason.com/securityalert/4770 - http://www.securityfocus.com/bid/32199 - http://osvdb.org/49701
CVE ID: CVE-2008-5653 State: PUBLISHED Published: 2008-12-17T18:00:00 Last Updated: 2024-08-07T11:04:43.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7044 - http://osvdb.org/49700 - http://secunia.com/advisories/32673 - http://www.securityfocus.com/bid/32199
CVE ID: CVE-2008-5654 State: PUBLISHED Published: 2008-12-17T18:00:00 Last Updated: 2024-08-07T11:04:43.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter, a different vector than CVE-2008-1344. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46448 - http://osvdb.org/49702 - https://www.exploit-db.com/exploits/7046 - http
nge.xforce.ibmcloud.com/vulnerabilities/46448 - http://osvdb.org/49702 - https://www.exploit-db.com/exploits/7046 - http://secunia.com/advisories/32673 - http://www.securityfocus.com/bid/32199
CVE ID: CVE-2008-5655 State: PUBLISHED Published: 2008-12-17T18:00:00 Last Updated: 2024-08-07T11:04:43.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MyioSoft EasyBookMarker 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) delete_folder and (2) delete_link parameters to unspecified vectors, possibly to (a) plugins/bookmarker/bookmarker_backend.php or (b) ajaxp.php, different vectors than CVE-2008-5654. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmclo
third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47684 - http://www.vupen.com/english/advisories/2008/3075
CVE ID: CVE-2008-5656 State: PUBLISHED Published: 2008-12-17T20:00:00 Last Updated: 2024-08-07T11:04:43.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46591 - http://typo3.org/teams/security/security-bulletins/typo3-20081113-2/ - http://www.securityfocus.com/bid/32284
CVE ID: CVE-2008-5657 State: PUBLISHED Published: 2008-12-17T20:00:00 Last Updated: 2024-08-07T11:04:43.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32470 - http://www.securityfocus.com/archive/1/497884 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46195 - http://www.securityfocus.com/archive/1/497882/30/0/threaded - http://www.vupen.com/english/advisories/2008/3164 -
6195 - http://www.securityfocus.com/archive/1/497882/30/0/threaded - http://www.vupen.com/english/advisories/2008/3164 - http://wouter.coekaerts.be/site/security/quassel-ctcp - http://quassel-irc.org/node/89 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00354.html - http://secunia.com/advisories/32692 - http://www.securityfocus.com/bid/31973
CVE ID: CVE-2008-5658 State: PUBLISHED Published: 2008-12-17T20:00:00 Last Updated: 2024-08-07T11:04:44.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32625 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://www.securitytracker.com/id?1021303 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://www.sektioneins.de/advisories/SE-2008-06.tx
.com/id?1021303 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://www.sektioneins.de/advisories/SE-2008-06.txt - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html - http://www.securityfocus.com/archive/1/501376/100/0/threaded - http://wiki.rpath.com/Advisories:rPSA-2009-0035 - http://osvdb.org/50480 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47079 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://www.redhat.com/support/errata/RHSA-2009-0350.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html - http://secunia.com/advisori
0350.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html - http://secunia.com/advisories/35003 - http://www.php.net/ChangeLog-5.php#5.2.7 - http://www.openwall.com/lists/oss-security/2008/12/04/3 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:045 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://archives.neohapsis.com/archives/bugtraq/2008-12/0039.html - http://secunia.com/advisories/35306 - http://secunia.com/advisories/35650 - http://www.debian.org/security/2009/dsa-1789
CVE ID: CVE-2008-5659 State: PUBLISHED Published: 2008-12-17T20:00:00 Last Updated: 2024-08-07T11:04:43.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated against DSA private keys. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47574 - http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38417 - http://www.openwall.com/lists/oss-se
oud.com/vulnerabilities/47574 - http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38417 - http://www.openwall.com/lists/oss-security/2008/12/06/2