Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1927 State: PUBLISHED Published: 2008-04-23T17:00:00 Last Updated: 2024-08-07T08:41:00.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a crafted regular expression containing UTF8 characters. NOTE: this issue might only be present on certain operating systems. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://support.avaya.com/elmodocs2/security/ASA-2008-317.htm - http://www.vupen.com/english/advisories/2008/2424 - http://secu
/support.avaya.com/elmodocs2/security/ASA-2008-317.htm - http://www.vupen.com/english/advisories/2008/2424 - http://secunia.com/advisories/31328 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00607.html - http://osvdb.org/44588 - http://wiki.rpath.com/Advisories:rPSA-2009-0011 - http://secunia.com/advisories/33937 - http://rt.perl.org/rt3/Public/Bug/Display.html?id=48156 - http://www.redhat.com/support/errata/RHSA-2008-0532.html - http://secunia.com/advisories/31687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41996 - http://www.ubuntu.com/usn/usn-700-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10579 - http://s
/usn/usn-700-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10579 - http://support.apple.com/kb/HT3438 - http://secunia.com/advisories/29948 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.gentoo.org/security/en/glsa/glsa-200805-17.xml - http://www.securitytracker.com/id?1020253 - http://www.vupen.com/english/advisories/2008/2361 - http://secunia.com/advisories/31467 - http://www.redhat.com/support/errata/RHSA-2008-0522.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00601.html - http://support.avaya.com/elmodocs2/security/ASA-2008-361.htm - http://secunia.com/advisories/33314 - h
l/msg00601.html - http://support.avaya.com/elmodocs2/security/ASA-2008-361.htm - http://secunia.com/advisories/33314 - http://www.vupen.com/english/advisories/2009/0422 - http://secunia.com/advisories/31604 - http://www.vmware.com/security/advisories/VMSA-2008-0013.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=454792 - http://www.securityfocus.com/bid/28928 - http://www.securityfocus.com/archive/1/500210/100/0/threaded - http://secunia.com/advisories/30624 - http://secunia.com/advisories/30025 - http://www.ubuntu.com/usn/usn-700-2 - http://secunia.com/advisories/30326 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:100 - http://www.debian.org/security/2008/dsa-1556 -
0326 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:100 - http://www.debian.org/security/2008/dsa-1556 - http://www.ipcop.org/index.php?name=News&file=article&sid=41 - http://secunia.com/advisories/31208 - http://www.vupen.com/english/advisories/2008/2265/references
CVE ID: CVE-2008-1928 State: PUBLISHED Published: 2008-04-23T18:00:00 Last Updated: 2024-08-07T08:40:59.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41986 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00569.html - http://www.vupen.com/english/advisories/2008/1387/references - http://rt.cpa
package-announce/2008-April/msg00569.html - http://www.vupen.com/english/advisories/2008/1387/references - http://rt.cpan.org/Public/Bug/Display.html?id=35324 - http://www.securityfocus.com/bid/28980 - http://secunia.com/advisories/30011 - http://imager.perl.org/i/release064/Imager_0_64
CVE ID: CVE-2008-1930 State: PUBLISHED Published: 2008-04-28T18:21:00 Last Updated: 2024-08-07T08:41:00.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRY_TIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning with "admin" to obtain administrator privileges, aka a "cryptographic splicing" issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-6013. Additional Analyst Notes: - CVE Program Container: References: - h
xists because of an incomplete fix for CVE-2007-6013. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42027 - http://www.vupen.com/english/advisories/2008/1372/references - http://www.cl.cam.ac.uk/users/sjm217/advisories/wordpress-cookie-integrity.txt - http://wordpress.org/development/2008/04/wordpress-251/ - http://www.securitytracker.com/id?1019923 - http://secunia.com/advisories/29965 - http://www.securityfocus.com/archive/1/491356/100/0/threaded
CVE ID: CVE-2008-1931 State: PUBLISHED Published: 2008-04-24T18:00:00 Last Updated: 2024-08-07T08:41:00.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allow local users to create, write, and read registry keys via a crafted IOCTL request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29953 - http://www.securityfocus.com/archive/1/491249/100/0/threaded - http://www.vupen.com/english/advisories/2008/1350/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41976 - http://www.wintercore.com/advisories/advisory_W010408.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/41976 - http://www.wintercore.com/advisories/advisory_W010408.html - http://www.securityfocus.com/bid/28909
CVE ID: CVE-2008-1932 State: PUBLISHED Published: 2008-04-24T18:00:00 Last Updated: 2024-08-07T08:40:59.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allows local users to execute arbitrary code via a crafted IOCTL request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29953 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42079 - http://www.securityfocus.com/archive/1/491249/100/0/threaded - http://www.vupen.com/english/advisories/2008/1350/references - http://www.wintercore.com/advisories/advisory_W01040
ed - http://www.vupen.com/english/advisories/2008/1350/references - http://www.wintercore.com/advisories/advisory_W010408.html - http://www.securityfocus.com/bid/28909
CVE ID: CVE-2008-1933 State: PUBLISHED Published: 2008-04-24T18:00:00 Last Updated: 2024-08-07T08:41:00.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method. NOTE: the victim must explicitly allow the code to run. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/491231/100/0/threaded - https://www.exploit-db.com/exploits/5489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42028
CVE ID: CVE-2008-1934 State: PUBLISHED Published: 2008-04-24T18:00:00 Last Updated: 2024-08-07T08:40:59.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1304/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42023 - https://www.exploit-db.com/exploits/5481 - http://www.securityfocus.com/bid/28880 - http://www.z0rlu.ownspace.org/index.php?/archives/58-Crazy-Goomba-1.2.1-SQL-inj.html
CVE ID: CVE-2008-1935 State: PUBLISHED Published: 2008-04-24T18:00:00 Last Updated: 2024-08-07T08:41:00.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Filiale 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the idFiliale parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28900 - http://www.vupen.com/english/advisories/2008/1346/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41980 - https://www.exploit-db.com/exploits/5488
CVE ID: CVE-2008-1936 State: PUBLISHED Published: 2008-04-24T18:00:00 Last Updated: 2024-08-07T08:41:00.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in an add action. NOTE: this issue might be site-specific. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1240/references - http://www.securityfocus.com/archive/1/490985/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42121 - https://www.exploit-db.com/exploits/5450 - http://www.securityfocus.com/bid/
xforce.ibmcloud.com/vulnerabilities/42121 - https://www.exploit-db.com/exploits/5450 - http://www.securityfocus.com/bid/28800
CVE ID: CVE-2008-1937 State: PUBLISHED Published: 2008-04-24T18:00:00 Last Updated: 2024-08-07T08:41:00.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://moinmo.in/SecurityFixes - http://security.gentoo.org/glsa/glsa-200805-09.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/41909 - http://hg.moinmo.in/moin/1.6/rev/f405012e67af - http://www.vupen.com/english/advisories/2008/1307/references - http://secunia
//hg.moinmo.in/moin/1.6/rev/f405012e67af - http://www.vupen.com/english/advisories/2008/1307/references - http://secunia.com/advisories/30160 - http://www.securityfocus.com/bid/28869 - http://secunia.com/advisories/29894
CVE ID: CVE-2008-1938 State: PUBLISHED Published: 2008-04-24T19:00:00 Last Updated: 2024-08-07T08:41:00.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sony Mylo COM-2 Japanese model firmware before 1.002 does not properly verify web server SSL certificates, which allows remote attackers to obtain sensitive information and conduct spoofing attacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41971 - http://www.securityfocus.com/bid/28905 - http://secunia.com/advisories/29928 - http://esupport.sony.com/perl/news-item.pl?news_id=262&mdl=COM2 - http://jvn.jp/jp/JVN%2376788395/index.html - http://www.vupen.
support.sony.com/perl/news-item.pl?news_id=262&mdl=COM2 - http://jvn.jp/jp/JVN%2376788395/index.html - http://www.vupen.com/english/advisories/2008/1349/references - http://mylo.nccl.sony.co.jp/hotnews/2008/04/01/index.html - http://mylo.nccl.sony.co.jp/download/M-W002-001-02/index.html
CVE ID: CVE-2008-1939 State: PUBLISHED Published: 2008-04-24T19:00:00 Last Updated: 2024-08-07T08:41:00.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) topic parameters to (a) philboard_reply.asp, and the (3) forumid parameter to (b) philboard_newtopic.asp, different vectors than CVE-2007-2641 and CVE-2007-0920. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5475 - http://www.securityfocus.com/bid/28871 - http://www.vupen.com/english/advisories/2008/1340/references - https://exchang
http://www.securityfocus.com/bid/28871 - http://www.vupen.com/english/advisories/2008/1340/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41957
CVE ID: CVE-2008-1940 State: PUBLISHED Published: 2008-04-24T19:00:00 Last Updated: 2024-08-07T08:41:00.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and user_transition_allow rules for the (1) sys_setfsuid and (2) sys_setfsgid calls, which allows local users to bypass restrictions for those calls. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41952 - http://www.grsecurity.org/news.php#grsec21113 - http://secunia.com/advisories/29899 - http://www.securitytracker.com/id?1019919 - http://w
ity.org/news.php#grsec21113 - http://secunia.com/advisories/29899 - http://www.securitytracker.com/id?1019919 - http://www.vupen.com/english/advisories/2008/1323/references - http://www.securityfocus.com/bid/28889
CVE ID: CVE-2008-1941 State: PUBLISHED Published: 2008-04-24T19:00:00 Last Updated: 2024-08-07T08:41:00.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the profile update feature in Akiva WebBoard 8.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in the form field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41969 - http://www.securityfocus.com/bid/28895 - http://secunia.com/advisories/29091
CVE ID: CVE-2008-1942 State: PUBLISHED Published: 2008-04-24T19:00:00 Last Updated: 2024-08-07T08:41:00.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with (1) a malformed ExtGState resource containing a /Font resource, or (2) an XObject resource with a Rotate setting, which triggers memory corruption. NOTE: this is probably a different vulnerability than CVE-2007-2186. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41973 - https://exchange.
: - http://secunia.com/advisories/29934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41972 - http://www.vupen.com/english/advisories/2008/1327/references - http://www.securityfocus.com/bid/28890 - http://www.vallejo.cc/proyectos/foxitreader2.htm - http://www.vallejo.cc/proyectos/foxitreader1.htm
CVE ID: CVE-2008-1943 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:41:00.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the backend of XenSource Xen Para Virtualized Frame Buffer (PVFB) 3.0 through 3.1.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted description of a shared framebuffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0194.html - http://www.securityfocus.com/bid/29183 - http://www.securitytracker.com/id?1020008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42387 - http://secunia.c
ttp://www.securitytracker.com/id?1020008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42387 - http://secunia.com/advisories/29963 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10338 - http://secunia.com/advisories/30781 - https://bugzilla.redhat.com/show_bug.cgi?id=443078 - http://www.vupen.com/english/advisories/2008/1900/references
CVE ID: CVE-2008-1944 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:41:00.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows local users to cause a denial of service (SDL crash) and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of messages." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0194.html - http://www.securitytracker.com/id?1020009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42388
2008-0194.html - http://www.securitytracker.com/id?1020009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42388 - http://secunia.com/advisories/29963 - https://bugzilla.redhat.com/show_bug.cgi?id=443390 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10868 - http://www.securityfocus.com/bid/29186
CVE ID: CVE-2008-1945 State: PUBLISHED Published: 2008-08-08T19:00:00 Last Updated: 2024-08-07T08:41:00.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44269 - http://secunia.com/advisories/32088 - https://oval.cisecurity.org/repository/se
rce.ibmcloud.com/vulnerabilities/44269 - http://secunia.com/advisories/32088 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9905 - http://secunia.com/advisories/32063 - http://secunia.com/advisories/34642 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 - http://www.ubuntu.com/usn/usn-776-1 - http://www.securityfocus.com/bid/30604 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html - http://www.debian.org/security/2009/dsa-1799 - https://rhn.redhat.com/errata/RHSA-2008-0892.html - http://www.securitytracker.com/id?1020959 - http://secunia.com/advisories/35031
CVE ID: CVE-2008-1946 State: PUBLISHED Published: 2008-07-28T17:00:00 Last Updated: 2024-08-07T08:41:00.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by entering the account name on the command line, related to improper use of the pam_succeed_if.so module. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43993 - http://rhn.redhat.com/errata/RHSA-2008-0780.html -
10029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43993 - http://rhn.redhat.com/errata/RHSA-2008-0780.html - http://securitytracker.com/id?1020552 - http://www.securityfocus.com/bid/30363 - http://secunia.com/advisories/31225
CVE ID: CVE-2008-1947 State: PUBLISHED Published: 2008-06-04T19:17:00 Last Updated: 2024-08-07T08:40:59.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/492958/100/0/threaded - http://secunia.com/advisories/30500 - http://www.redhat.com/support/errata/RHSA-2008-0862.html - http://secunia.com/advisories/34013 - http://marc.info/?l=tomc
ttp://www.redhat.com/support/errata/RHSA-2008-0862.html - http://secunia.com/advisories/34013 - http://marc.info/?l=tomcat-user&m=121244319501278&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6009 - http://www.vupen.com/english/advisories/2008/2823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42816 - http://secunia.com/advisories/37460 - http://www.vmware.com/security/advisories/VMSA-2009-0002.html - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/32120 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.vupen.com/english/advisories/2008/1725 - http://secunia.com/advisories/30592 - http:/
s/VMSA-2009-0016.html - http://www.vupen.com/english/advisories/2008/1725 - http://secunia.com/advisories/30592 - http://secunia.com/advisories/33999 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11534 - http://www.securityfocus.com/bid/29502 - http://secunia.com/advisories/31865 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html - http://secunia.com/advisories/31639 - http://secunia.com/advisories/30967 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:188 - http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm - http://www.vupen.com/english/advisories/2009/0320 - http://www.securityfocus.com/a
elmodocs2/security/ASA-2008-401.htm - http://www.vupen.com/english/advisories/2009/0320 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0864.html - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://secunia.com/advisories/32222 - http://secunia.com/advisories/31891 - http://secunia.com/advisories/33797 - http://www.securitytracker.com/id?1020624 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html - https://
/2008-07/msg00001.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html - http://tomcat.apache.org/security-5.html - http://www.vupen.com/english/advisories/2008/2780 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://www.vupen.com/english/advisories/2009/0503 - http://www.vupen.com/english/advisories/2009/3316 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://www.debian.org/security/200
om/english/advisories/2009/3316 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://www.debian.org/security/2008/dsa-1593 - http://secunia.com/advisories/32266 - http://www.redhat.com/support/errata/RHSA-2008-0648.html - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6b
3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E