Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3491 State: PUBLISHED Published: 2008-08-06T17:05:00 Last Updated: 2024-08-07T09:37:27.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a report action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/47333 - https://www.exploit-db.com/exploits/6185 - https://www.exploit-db.com/exploits/6186 - http://secunia.com/advisories/31344 - http://securityreason.com/securityalert/4117 - http://www.securityfocus.com/bid/30505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
.com/securityalert/4117 - http://www.securityfocus.com/bid/30505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44176 - http://secunia.com/advisories/31345 - http://www.securityfocus.com/bid/30504
CVE ID: CVE-2008-3492 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:37:27.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: America's Army (aka AA or Army Game Project) 2.8.3.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted UDP packet, probably involving a VoiceIndex value that is outside of the range specified by VOICE_MAX_CHATTERS. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44152 - http://www.securityfocus.com/archive/1/495061/100/0/threaded - http://aluigi.altervista.
oud.com/vulnerabilities/44152 - http://www.securityfocus.com/archive/1/495061/100/0/threaded - http://aluigi.altervista.org/adv/armynchia-adv.txt - http://aluigi.org/poc/armynchia.zip - http://www.securityfocus.com/bid/30519
CVE ID: CVE-2008-3493 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:37:27.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of service (application crash) via a crafted frame buffer update packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6181 - http://www.securityfocus.com/bid/30499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44218
CVE ID: CVE-2008-3494 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:37:27.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: 8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host header with additional leading text placed before the real Host header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31391 - http://www.securityfocus.com/archive/1/495117/100/0/threaded - http://www.securityfocus.com/bid/30541 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44238
CVE ID: CVE-2008-3495 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:37:27.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands via the kid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44213 - http://www.securityfocus.com/bid/30534 - http://downloads.securityfocus.com/vulnerabilities/exploits/30534.pl
CVE ID: CVE-2008-3496 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:37:27.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c in uvcvideo in the video4linux (V4L) implementation in the Linux kernel before 2.6.26.1 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31982 - http://www.securityfocus.com/bid/30514 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:223 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html -
/security/advisories?name=MDVSA-2008:223 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://lkml.org/lkml/2008/7/30/655 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44184
CVE ID: CVE-2008-3497 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:37:27.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pages.php in MyPHP CMS 0.3.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5937 - http://www.vupen.com/english/advisories/2008/1953/references - http://securityreason.com/securityalert/4115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43358 - http://www.securityfocus.com/bid/29940
CVE ID: CVE-2008-3498 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:37:27.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in an orders action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30752 - https://www.exploit-db.com/exploits/5939 - http://www.securityfocus.com/bid/29951 - http://securityreason.com/securityalert/4114 - http://www.nbill.co.uk/
s/5939 - http://www.securityfocus.com/bid/29951 - http://securityreason.com/securityalert/4114 - http://www.nbill.co.uk/forum-smf/index.php/topic%2C716.0.html - http://www.vupen.com/english/advisories/2008/1948/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43369
CVE ID: CVE-2008-3499 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:45:17.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in "a page in the workarea folder" in Ektron CMS400.NET 7.00 through 7.04 and 7.50 through 7.52 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://dev.ektron.com/kb_article.aspx?id=18294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44488 - http://secunia.com/advisories/30858
CVE ID: CVE-2008-3500 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:45:18.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Suggested Terms module 5.x before 5.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via crafted Taxonomy terms. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29953 - http://drupal.org/node/274919 - http://www.vupen.com/english/advisories/2008/1931/references - http://secunia.com/advisories/30846 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43363
CVE ID: CVE-2008-3501 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:45:17.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WebAccess simple interface in Novell Groupwise 7.0.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028200.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43326 - http://secunia.com/advisories/30839 - http://www.securityfocus.com/bid/29922 - http://www.securitytracker.com/id?1020359 - http://
unia.com/advisories/30839 - http://www.securityfocus.com/bid/29922 - http://www.securitytracker.com/id?1020359 - http://www.vupen.com/english/advisories/2008/1929/references - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028303.html
CVE ID: CVE-2008-3502 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:45:18.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Best Practical Solutions RT 3.0.0 through 3.6.6 allows remote authenticated users to cause a denial of service (CPU or memory consumption) via unspecified vectors related to the Devel::StackTrace module for Perl. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2008-June/000158.html - http://www.securityfocus.com/bid/29925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43337 - http://secunia.com/advisories/30830
CVE ID: CVE-2008-3503 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:45:17.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSSFromParent in Plain Black WebGUI before 7.5.13 does not restrict view access to Collaboration System (CS) RSS feeds, which allows remote attackers to obtain sensitive information (CS data). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43344 - http://www.webgui.org/bugs/tracker/security-issue---collaboration-rss/ - http://www.webgui.org/getwebgui/advisories/webgui-7_5_13-beta-released - http://www.securityfocus.com/bid/29927 - http://secunia.com/advisor
g/getwebgui/advisories/webgui-7_5_13-beta-released - http://www.securityfocus.com/bid/29927 - http://secunia.com/advisories/30782 - http://www.vupen.com/english/advisories/2008/1932/references
CVE ID: CVE-2008-3504 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:45:18.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in mask PHP File Manager (mPFM) before 2.3 has unknown impact and remote attack vectors related to "manipulation of cookies." Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=608915 - http://secunia.com/advisories/30833 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43333 - http://www.securityfocus.com/bid/29926
CVE ID: CVE-2008-3505 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:45:17.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via the nr parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4116 - http://www.securityfocus.com/bid/29975 - https://www.exploit-db.com/exploits/5941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43372
CVE ID: CVE-2008-3506 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:45:17.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to execute arbitrary SQL commands via the nr parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43371 - http://securityreason.com/securityalert/4116 - http://www.securityfocus.com/bid/29972 - https://www.exploit-db.com/exploits/5941
CVE ID: CVE-2008-3507 State: PUBLISHED Published: 2008-08-07T20:00:00 Last Updated: 2024-08-07T09:45:17.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6207 - http://www.securityfocus.com/bid/30575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44230
CVE ID: CVE-2008-3508 State: PUBLISHED Published: 2008-08-07T20:00:00 Last Updated: 2024-08-07T09:45:17.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44231 - http://www.securityfocus.com/bid/30555
CVE ID: CVE-2008-3509 State: PUBLISHED Published: 2008-08-07T20:00:00 Last Updated: 2024-08-07T09:45:18.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in system/admin/, which allows remote attackers to change the configuration or execute arbitrary PHP code via addition of blocks, and other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6210 - http://secunia.com/advisories/31389 - https://www.exploit-db.com/exploits/6209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44226 - http://www.secu
https://www.exploit-db.com/exploits/6209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44226 - http://www.securityfocus.com/bid/30562 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44227
CVE ID: CVE-2008-3510 State: PUBLISHED Published: 2008-08-07T20:00:00 Last Updated: 2024-08-07T09:45:18.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in livehelp_js.php in Crafty Syntax Live Help (CSLH) 2.14.6 allows remote attackers to inject arbitrary web script or HTML via the department parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.craftysyntax.com/help/viewtopic.php?t=3945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44228 - http://www.securityfocus.com/bid/30543 - http://secunia.com/advisories/31340
CVE ID: CVE-2008-3511 State: PUBLISHED Published: 2008-08-07T20:00:00 Last Updated: 2024-08-07T09:45:18.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to inject arbitrary web script or HTML via the (1) latest parameter to (a) index.php, (b) images.php, (c) suggest_image.php, and (d) image_desc.php; and the (2) msg parameter to index.php, images.php, and suggest_image.php, and (e) index.php, (f) adminhome.php, (g) config.php, (h) changepassword.php, (i) cleanup.php, (j) browsecats.php, and (k) images.php in admin/. NOTE: the image_desc.php/msg vector is covered
.php, (i) cleanup.php, (j) browsecats.php, and (k) images.php in admin/. NOTE: the image_desc.php/msg vector is covered by CVE-2006-1660. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44433 - http://www.securityfocus.com/bid/30546 - http://www.securityfocus.com/bid/30546/exploit
CVE ID: CVE-2008-3512 State: PUBLISHED Published: 2008-08-07T20:00:00 Last Updated: 2024-08-07T09:45:18.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a visit action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495166/100/0/threaded - http://www.securityfocus.com/bid/30577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44255
CVE ID: CVE-2008-3513 State: PUBLISHED Published: 2008-08-07T20:00:00 Last Updated: 2024-08-07T09:45:18.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44434 - http://www.securityfocus.com/archive/1/497929/100/0/threaded - http://secunia.com/advisories/32500 - http://www.securityfocus.com/bid/30511/exploit - http://packetstorm.linuxsecurity.com/0810-exploits/phpnukebook-sq
500 - http://www.securityfocus.com/bid/30511/exploit - http://packetstorm.linuxsecurity.com/0810-exploits/phpnukebook-sql.txt - http://www.securityfocus.com/bid/30511
CVE ID: CVE-2008-3514 State: PUBLISHED Published: 2008-08-13T10:00:00 Last Updated: 2024-08-07T09:45:18.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows remote attackers to determine valid user names by enabling functionality in the GUI and then making an "attempt to assign permissions to other system users." Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/support/vi3/doc/releasenotes_vc202u5.html - http://secunia.com/advisories/31468 - http://www.vmware.com/security/advisories/VMSA-200
doc/releasenotes_vc202u5.html - http://secunia.com/advisories/31468 - http://www.vmware.com/security/advisories/VMSA-2008-0012.html - http://www.vupen.com/english/advisories/2008/2363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44425 - http://securityreason.com/securityalert/4150 - http://www.securitytracker.com/id?1020693 - http://www.securityfocus.com/bid/30664 - http://www.securityfocus.com/archive/1/495386/100/0/threaded - http://www.insomniasec.com/advisories/ISVA-080812.1.htm
CVE ID: CVE-2008-3515 State: PUBLISHED Published: 2008-08-13T00:00:00 Last Updated: 2024-08-07T09:45:17.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) viewer.swf and (2) loadflash.js, a different vulnerability than CVE-2008-3516. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31432 - http://www.vupen.com/english/advisories/2008/2322 - http://www.securityfocus.com/bid/30615 - http://www.adobe.com/support/security/bulletin
m/english/advisories/2008/2322 - http://www.securityfocus.com/bid/30615 - http://www.adobe.com/support/security/bulletins/apsb08-17.html - http://www.securitytracker.com/id?1020645
CVE ID: CVE-2008-3516 State: PUBLISHED Published: 2008-08-13T00:00:00 Last Updated: 2024-08-07T09:45:17.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) viewer.swf and (2) loadflash.js, a different vulnerability than CVE-2008-3515. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31432 - http://www.vupen.com/english/advisories/2008/2322 - http://www.securityfocus.com/bid/30615 - http://www.adobe.com/support/security/bulletin
CVE ID: CVE-2008-3517 State: REJECTED Published: 2009-03-26T10:00:00Z Last Updated: 2024-09-16T20:28:06.654Z Description: No description available.
CVE ID: CVE-2008-3518 State: REJECTED Published: 2009-03-26T10:00:00Z Last Updated: 2024-09-17T02:21:49.917Z Description: No description available.
CVE ID: CVE-2008-3519 State: PUBLISHED Published: 2008-09-23T14:00:00 Last Updated: 2024-08-07T09:45:17.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain sensitive information (non-EJB classes) via a download request, a different vulnerability than CVE-2008-3273. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=45882
ditional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458823 - http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp02/html-single/readme/index.html - http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp04/html-single/readme/index.html - http://www.redhat.com/support/errata/RHSA-2008-0832.html - http://www.redhat.com/support/errata/RHSA-2008-0833.html - http://www.redhat.com/support/errata/RHSA-2008-0831.html - http://www.redhat.com/support/errata/RHSA-2008-0834.html - http://www.securityfocus.com/bid/31300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45305 - http://www
.html - http://www.securityfocus.com/bid/31300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45305 - http://www.securitytracker.com/id?1020905
CVE ID: CVE-2008-3520 State: PUBLISHED Published: 2008-10-02T18:00:00 Last Updated: 2024-08-07T09:45:18.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31470 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:164 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:144 - http://www.redhat.com/support/errata/RHSA-2009-0012.html - https://exchange.xforce.ibmcloud.com/vuln
me=MDVSA-2009:144 - http://www.redhat.com/support/errata/RHSA-2009-0012.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45621 - http://secunia.com/advisories/34391 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10141 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:142 - http://bugs.gentoo.org/show_bug.cgi?id=222819 - http://www.ubuntu.com/usn/USN-742-1 - http://rhn.redhat.com/errata/RHSA-2015-0698.html - http://secunia.com/advisories/33173 - http://security.gentoo.org/glsa/glsa-200812-18.xml - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606
CVE ID: CVE-2008-3521 State: PUBLISHED Published: 2008-10-02T18:00:00 Last Updated: 2024-08-07T09:45:18.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the jas_stream_tmpfile function in libjasper/base/jas_stream.c in JasPer 1.900.1 allows local users to cause a denial of service (program exit) by creating the appropriate tmp.XXXXXXXXXX temporary file, which causes Jasper to exit. NOTE: this was originally reported as a symlink issue, but this was incorrect. NOTE: some vendors dispute the severity of this issue, but it satisfies CVE's requirements for inclusion. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid
rements for inclusion. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31470 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:164 - http://bugs.gentoo.org/attachment.cgi?id=163282&action=view - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3521 - http://secunia.com/advisories/34391 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:142 - http://www.ubuntu.com/usn/USN-742-1 - http://bugs.gentoo.org/show_bug.cgi?id=222819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45622