Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nerabilities/43071 - http://secunia.com/advisories/30689 - https://www.exploit-db.com/exploits/5804 - http://e-rdc.org/v1/news.php?readmore=98 - http://securityreason.com/securityalert/3963 - http://www.securityfocus.com/archive/1/493371/100/0/threaded
CVE ID: CVE-2008-2917 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in productsofcat.asp in E-SMART CART allows remote attackers to execute arbitrary SQL commands via the category_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020296 - http://www.securityfocus.com/bid/29712 - http://www.spanish-hackers.com/vuln/joss-40.txt - http://secunia.com/advisories/30687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43088 - http://securityreason.com/securityalert/3964 - https://www.exploit-db.com/explo
rce.ibmcloud.com/vulnerabilities/43088 - http://securityreason.com/securityalert/3964 - https://www.exploit-db.com/exploits/5805 - http://www.securityfocus.com/archive/1/493372/100/0/threaded
CVE ID: CVE-2008-2918 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30677 - https://www.exploit-db.com/exploits/5815 - http://www.securityfocus.com/bid/29727 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43099
CVE ID: CVE-2008-2919 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in listing.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL commands via the sort parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29714 - http://secunia.com/advisories/30688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43089 - https://www.exploit-db.com/exploits/5806
CVE ID: CVE-2008-2920 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/filemanager/ (aka the File Manager) in EZTechhelp EZCMS 1.2 and earlier does not require authentication, which allows remote attackers to create, modify, read, and delete files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43091 - http://ezcms.eztechhelp.com/index.php?page=3&nid=27 - https://www.exploit-db.com/exploits/5819
CVE ID: CVE-2008-2921 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30674 - http://www.securityfocus.com/bid/29737 - http://ezcms.eztechhelp.com/index.php?page=3&nid=27 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43086 - https://www.exploit-db.com/exploits/5819
CVE ID: CVE-2008-2922 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:33.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in artegic Dana IRC client 1.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long IRC message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30681 - http://www.securityfocus.com/bid/29724 - https://www.exploit-db.com/exploits/5817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43112
CVE ID: CVE-2008-2923 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote attackers to inject arbitrary web script or HTML via the words parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43122 - http://osvdb.org/show/osvdb/46150 - http://holisticinfosec.org/content/view/71/45/ - http://www.vupen.com/english/advisories/2008/1859/references - http://secunia.com/advis
nfosec.org/content/view/71/45/ - http://www.vupen.com/english/advisories/2008/1859/references - http://secunia.com/advisories/30662 - http://www.securitytracker.com/id?1020323
CVE ID: CVE-2008-2924 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Webmatic before 2.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29748 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43115 - http://www.valarsoft.com/index.php?page=home&notizie=si&notID=154&singlenot=1&no_home=1#2 - http://secunia.com/advisories/30656
CVE ID: CVE-2008-2925 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:33.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Webmatic before 2.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43105 - http://www.securityfocus.com/bid/29748 - http://www.valarsoft.com/index.php?page=home&notizie=si&notID=154&singlenot=1&no_home=1#2 - http://secunia.com/advisories/30656
CVE ID: CVE-2008-2926 State: PUBLISHED Published: 2008-08-12T23:00:00 Last Updated: 2024-08-07T09:21:34.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2339 - http://www.securitytracker.com/id?1020660 - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36559 - http:
9 - http://www.securitytracker.com/id?1020660 - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36559 - http://www.securityfocus.com/archive/1/495397/100/0/threaded - http://secunia.com/advisories/31434 - http://www.securitytracker.com/id?1020658 - http://www.securityfocus.com/bid/30651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44392 - http://www.securitytracker.com/id?1020659
CVE ID: CVE-2008-2927 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T09:21:34.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-675-2 - http://www.openwall.com/lists/oss-security/2008/07/0
gram Container: References: - http://www.ubuntu.com/usn/USN-675-2 - http://www.openwall.com/lists/oss-security/2008/07/04/1 - http://www.redhat.com/support/errata/RHSA-2008-0584.html - http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msnp9/slplink.c - http://secunia.com/advisories/32861 - http://www.securitytracker.com/id?1020451 - http://secunia.com/advisories/30971 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11695 - http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee7
/developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msn/slplink.c - http://www.securityfocus.com/bid/29956 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:143 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17972 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0246 - https://issues.rpath.com/browse/RPL-2647 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:127 - http://www.openwall.com/lists/oss-security/2008/07/03/6 - http://secunia.com/advisories/31105 - http://www.pidgin.im/news/security/?id=25 - http://www.ubuntu.com/usn/US
07/03/6 - http://secunia.com/advisories/31105 - http://www.pidgin.im/news/security/?id=25 - http://www.ubuntu.com/usn/USN-675-1 - http://www.zerodayinitiative.com/advisories/ZDI-08-054 - http://secunia.com/advisories/31642 - http://secunia.com/advisories/32859 - http://secunia.com/advisories/31387 - http://www.debian.org/security/2008/dsa-1610 - https://bugzilla.redhat.com/show_bug.cgi?id=453764 - http://secunia.com/advisories/31016 - http://www.securityfocus.com/archive/1/495818/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44774 - http://www.vupen.com/english/advisories/2008/2032/references - http://www.securityfocus.com/archive/1/493682 - http://www.securityfocus.c
com/english/advisories/2008/2032/references - http://www.securityfocus.com/archive/1/493682 - http://www.securityfocus.com/archive/1/495165/100/0/threaded
CVE ID: CVE-2008-2928 State: PUBLISHED Published: 2008-08-29T18:00:00 Last Updated: 2024-08-07T09:21:34.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted Accept-Language HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=453916 - http://securitytracker.com/id?1020771 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861 - http://www.redhat.com/docs/manua
71 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861 - http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html - http://secunia.com/advisories/31702 - https://rhn.redhat.com/errata/RHSA-2008-0596.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861 - http://www.securityfocus.com/bid/30869 - http://www.vupen.com/english/advisories/2008/2480 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00449.html - http://secunia.com/advisories/31777 - https://oval.cisecurity.org/repository/search/definiti
8-September/msg00449.html - http://secunia.com/advisories/31777 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44738 - http://secunia.com/advisories/31565
CVE ID: CVE-2008-2929 State: PUBLISHED Published: 2008-08-29T18:00:00 Last Updated: 2024-08-07T09:21:34.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject arbitrary web script or HTML via input values that use % (percent) escaping. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31612 - http://h20000.www2.hp.com/bizsupport/TechSupport/Docum
am Container: References: - http://secunia.com/advisories/31612 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861 - http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html - http://secunia.com/advisories/31702 - https://rhn.redhat.com/errata/RHSA-2008-0601.html - https://rhn.redhat.com/errata/RHSA-2008-0596.html - https://bugzilla.redhat.com/show_bug.cgi?id=454621 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44737 - http://www.vupen.com/english/advisories/2008/2480 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.
upen.com/english/advisories/2008/2480 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00449.html - http://www.securityfocus.com/bid/30870 - http://secunia.com/advisories/31777 - http://secunia.com/advisories/31565 - http://securitytracker.com/id?1020772 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5877
CVE ID: CVE-2008-2930 State: PUBLISHED Published: 2008-08-29T18:00:00 Last Updated: 2024-08-07T09:21:34.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via crafted LDAP search requests with patterns, related to a single-threaded regular-expression subsystem. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44733 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6078 - http://www.red
ies/44733 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6078 - http://www.redhat.com/support/errata/RHSA-2008-0602.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861 - http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html - http://secunia.com/advisories/31702 - https://rhn.redhat.com/errata/RHSA-2008-0596.html - http://secunia.com/advisories/31867 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861 - http://www.vupen.com/english/advisories/2008/2480 - http://www.securityfocus.com/bid/30871 - https://www.redhat.com/archives/fedora-package-announce/2008-Septemb
008/2480 - http://www.securityfocus.com/bid/30871 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00708.html - http://www.redhat.com/support/errata/RHSA-2008-0858.html - http://securitytracker.com/id?1020773 - https://bugzilla.redhat.com/show_bug.cgi?id=454065 - http://secunia.com/advisories/31565 - http://secunia.com/advisories/31627 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00521.html
CVE ID: CVE-2008-2931 State: PUBLISHED Published: 2008-07-09T18:00:00 Last Updated: 2024-08-07T09:21:34.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1630 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43696 - http://www.redhat.com/support/errata/RHSA-2008-0885.html - http://lists.opensuse.org/opensuse-s
/vulnerabilities/43696 - http://www.redhat.com/support/errata/RHSA-2008-0885.html - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html - https://usn.ubuntu.com/637-1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10437 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html - http://secunia.com/advisories/31614 - http://secunia.com/advisories/30982 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=ee6f958291e2a768fd727e7a67badfff0b67711a - http://www.openwall.com/lists/oss-security/2008/07/08/4 - http://secunia.com/advisories/31551 - http://www.securityfocus.com/bid/301
penwall.com/lists/oss-security/2008/07/08/4 - http://secunia.com/advisories/31551 - http://www.securityfocus.com/bid/30126 - http://secunia.com/advisories/32023 - https://bugzilla.redhat.com/show_bug.cgi?id=454388 - http://secunia.com/advisories/32759 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 - http://www.openwall.com/lists/oss-security/2008/07/08/3 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
CVE ID: CVE-2008-2932 State: PUBLISHED Published: 2008-09-12T16:00:00 Last Updated: 2024-08-07T09:21:34.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Red Hat adminutil 1.1.6 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via % (percent) encoded HTTP input to unspecified CGI scripts in Fedora Directory Server. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-2929. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=454662 - http://www.securityfocus.com/bid/31106 - https://www.redhat.com/archives/fedora-package-
at.com/show_bug.cgi?id=454662 - http://www.securityfocus.com/bid/31106 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00449.html - http://secunia.com/advisories/31777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45203
CVE ID: CVE-2008-2933 State: PUBLISHED Published: 2008-07-17T10:00:00 Last Updated: 2024-08-07T09:21:34.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely handled by a vector application, as exploited in conjunction with CVE-2008-2540. NOTE: this issue exists because of an insufficient fix for CVE-2005-2267. Additional Analyst Notes: - CVE Program Container: References: - http://www.novel
an insufficient fix for CVE-2005-2267. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5031400 - http://www.debian.org/security/2009/dsa-1697 - http://www.redhat.com/support/errata/RHSA-2008-0597.html - http://secunia.com/advisories/31270 - http://secunia.com/advisories/31121 - http://www.vupen.com/english/advisories/2009/0977 - http://secunia.com/advisories/31145 - http://www.securitytracker.com/id?1020500 - http://secunia.com/advisories/31377 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0238 - http://security.gentoo.org/glsa/glsa-200808-03.xml - http://www.secur
://wiki.rpath.com/wiki/Advisories:rPSA-2008-0238 - http://security.gentoo.org/glsa/glsa-200808-03.xml - http://www.securityfocus.com/archive/1/494860/100/0/threaded - http://www.ubuntu.com/usn/usn-626-2 - http://www.redhat.com/support/errata/RHSA-2008-0598.html - http://secunia.com/advisories/31157 - http://secunia.com/advisories/33433 - http://www.debian.org/security/2008/dsa-1614 - http://secunia.com/advisories/31183 - http://secunia.com/advisories/31106 - http://www.kb.cert.org/vuls/id/130923 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - https://issues.rpath.com/browse/RPL-2683 - http://secunia.com/advisories/31261 - http://secunia.com/advisories/31120 - http://www
ssues.rpath.com/browse/RPL-2683 - http://secunia.com/advisories/31261 - http://secunia.com/advisories/31120 - http://www.mozilla.org/security/announce/2008/mfsa2008-35.html - http://www.ubuntu.com/usn/usn-623-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11618 - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380974 - http://www.debian.org/security/2008/dsa-1615 - http://secunia.com/advisories/31176 - https://bugzilla.mozilla.org/show_bug.cgi?id=441120 - http://secunia.com/advisories/31129 - http://www.securityfocus.com/bid/30242 - http://www.ubuntu.com/usn/usn-626-1 - http://www.mandriva.com/security/
31129 - http://www.securityfocus.com/bid/30242 - http://www.ubuntu.com/usn/usn-626-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:148 - http://secunia.com/advisories/31306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43832 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-2934 State: PUBLISHED Published: 2008-07-18T16:00:00 Last Updated: 2024-08-07T09:21:34.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31270 - http://www.vupen.com/english/advisories/2009/0977 - http://www.mozilla.org/security/announce/2008/mfsa2008-36.html - http://secunia.com/advisories/31132 - http://sunsolve.sun.com/search/document.do?assetke
nnounce/2008/mfsa2008-36.html - http://secunia.com/advisories/31132 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43850 - https://bugzilla.mozilla.org/show_bug.cgi?id=441360 - http://www.vupen.com/english/advisories/2008/2125 - http://securitytracker.com/id?1020516 - http://www.ubuntu.com/usn/usn-626-1 - http://www.securityfocus.com/bid/30266 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-2935 State: PUBLISHED Published: 2008-08-01T14:00:00 Last Updated: 2024-08-07T09:21:34.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containing a long string as "an argument in the XSL input." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0649.html - https://oval.cisecurity.org/repository/search/defini
ences: - http://www.redhat.com/support/errata/RHSA-2008-0649.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44141 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0306 - http://secunia.com/advisories/32453 - http://secunia.com/advisories/31399 - http://secunia.com/advisories/31363 - http://www.scary.beasts.org/security/CESA-2008-003.html - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00092.html - http://www.securityfocus.com/archive/1/494976/100/0/threaded - http://www.securityfocus.com/bid/30467 - http://www.ocert.org/patches/exslt_crypt.patch - http://secur