Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
25789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2008-3272 State: PUBLISHED Published: 2008-08-08T18:12:00 Last Updated: 2024-08-07T09:28:41.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by max_synthdev before returning certain data to the caller, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html - http://www.debian.org/security/2008/dsa-1630 - http://www.redhat
.org/opensuse-security-announce/2008-10/msg00000.html - http://www.debian.org/security/2008/dsa-1630 - http://www.redhat.com/support/errata/RHSA-2008-0885.html - https://usn.ubuntu.com/637-1/ - http://secunia.com/advisories/32190 - http://www.debian.org/security/2008/dsa-1636 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11182 - http://rhn.redhat.com/errata/RHSA-2008-0972.html - http://www.vupen.com/english/advisories/2008/2307 - http://secunia.com/advisories/31614 - http://www.securitytracker.com/id?1020636 - http://secunia.com/advisories/31881 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html - http://secunia.com/advisor
visories/31881 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html - http://secunia.com/advisories/32104 - http://secunia.com/advisories/31551 - http://www.securityfocus.com/bid/30559 - http://www.redhat.com/support/errata/RHSA-2008-0857.html - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44225 - http://secunia.com/advisories/32103 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=82e68f7ffec3800425f2391c8c86277606860442 - http://secunia.com/advisories/32023 - http://secunia.com/advisories/32759 - http://www.mandriva.com/security/advisories?name=MDVSA-
nia.com/advisories/32023 - http://secunia.com/advisories/32759 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:220 - http://secunia.com/advisories/31366 - http://secunia.com/advisories/32370 - http://secunia.com/advisories/31836 - http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2 - http://secunia.com/advisories/32799 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
CVE ID: CVE-2008-3273 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:28:41.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2008-0828.html - http://rhn.redhat.com/errata/RHSA-2008-0826.html - http://marc.info/?l=bugtraq&m=132698550418872&w=2 - http://www.redhat.com/docs/en-US/JBos
m/errata/RHSA-2008-0826.html - http://marc.info/?l=bugtraq&m=132698550418872&w=2 - http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp03/html-single/readme/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44235 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=457757 - http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp01/html-single/readme/ - http://rhn.redhat.com/errata/RHSA-2008-0827.html - http://marc.info/?l=bugtraq&m=132698550418872&w=2 - https://jira.jboss.org/jira/browse/JBPAPP-544 - http://rhn.redhat.com/errata/RHSA-2008-0825.html - http://www.securitytracker.com/id?1020628 - http://www.securityfocus.com/b
//rhn.redhat.com/errata/RHSA-2008-0825.html - http://www.securitytracker.com/id?1020628 - http://www.securityfocus.com/bid/30540
CVE ID: CVE-2008-3274 State: PUBLISHED Published: 2008-09-12T16:00:00 Last Updated: 2024-08-07T09:28:41.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00733.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00743.html - http://www.securityfocus.com/bid/31111 - http://www.
com/archives/fedora-package-announce/2008-September/msg00743.html - http://www.securityfocus.com/bid/31111 - http://www.freeipa.org/page/News - http://git.fedorahosted.org/git/freeipa.git/?p=freeipa.git%3Ba=commit%3Bh=9932887f2af38b9701efec27707648c026ec445c - https://bugzilla.redhat.com/show_bug.cgi?id=457835 - http://www.freeipa.org/page/CVE-2008-3274 - http://www.securitytracker.com/id?1020850 - http://secunia.com/advisories/31861 - http://rhn.redhat.com/errata/RHSA-2008-0860.html - http://www.freeipa.org/page/Downloads
CVE ID: CVE-2008-3275 State: PUBLISHED Published: 2008-08-12T23:00:00 Last Updated: 2024-08-07T09:28:41.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1630 - http://www.redhat.com/support/errata/RHSA-2008-088
ntainer: References: - http://www.debian.org/security/2008/dsa-1630 - http://www.redhat.com/support/errata/RHSA-2008-0885.html - https://usn.ubuntu.com/637-1/ - http://lkml.org/lkml/2008/7/2/83 - http://secunia.com/advisories/32190 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6551 - http://www.debian.org/security/2008/dsa-1636 - http://secunia.com/advisories/31614 - http://secunia.com/advisories/31881 - http://secunia.com/advisories/32104 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d70b67c8bc72ee23b55381bd6a884f4796692f77 - http://secunia.com/advisories/31551 - http://www.vupen.com/english/advisories/2008/2430
2ee23b55381bd6a884f4796692f77 - http://secunia.com/advisories/31551 - http://www.vupen.com/english/advisories/2008/2430 - http://www.redhat.com/support/errata/RHSA-2008-0857.html - http://www.redhat.com/support/errata/RHSA-2009-0014.html - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html - http://www.securitytracker.com/id?1020739 - http://secunia.com/advisories/33280 - http://secunia.com/advisories/33556 - http://www.securityfocus.com/bid/30647 - http://secunia.com/advisories/32023 - https://bugzilla.redhat.com/show_bug.cgi?id=457858 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:220 - http://secunia.com/advisories/32344 - https://exchange.xforce.ibm
mandriva.com/security/advisories?name=MDVSA-2008:220 - http://secunia.com/advisories/32344 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44410 - http://www.redhat.com/support/errata/RHSA-2008-0973.html - http://secunia.com/advisories/31836 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.15 - http://www.redhat.com/support/errata/RHSA-2008-0787.html - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html - http://secunia.com/advisories/33201 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10744
CVE ID: CVE-2008-3276 State: PUBLISHED Published: 2008-08-18T17:15:00 Last Updated: 2024-08-07T09:28:41.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.17-rc1 through 2.6.26.2 allows remote attackers to cause a denial of service (panic) via a crafted integer value, related to Change L and Change R options without at least one byte in the dccpsf_val field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32485 - https://bugzilla.redhat.com/show_bug.cgi?id=459226 - https://o
iner: References: - http://secunia.com/advisories/32485 - https://bugzilla.redhat.com/show_bug.cgi?id=459226 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11506 - http://secunia.com/advisories/32190 - http://www.openwall.com/lists/oss-security/2008/08/15/3 - http://secunia.com/advisories/32393 - http://www.debian.org/security/2008/dsa-1636 - http://secunia.com/advisories/32237 - http://www.securityfocus.com/bid/30704 - http://www.redhat.com/support/errata/RHSA-2008-0957.html - http://secunia.com/advisories/31509 - http://secunia.com/advisories/31881 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html - http://www.ubuntu.com/
m/advisories/31881 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html - http://www.ubuntu.com/usn/usn-659-1 - http://www.vupen.com/english/advisories/2008/2406 - http://www.redhat.com/support/errata/RHSA-2008-0857.html - http://www.debian.org/security/2008/dsa-1653 - http://www.securitytracker.com/id?1020705 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=3e8a0a559c66ee9e7468195691a56fefc3589740 - http://secunia.com/advisories/32370 - http://secunia.com/advisories/31836
CVE ID: CVE-2008-3277 State: PUBLISHED Published: 2014-04-15T18:00:00 Last Updated: 2024-08-07T09:28:41.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.el6 in Red Hat Enterprise Linux (RHEL) 6 and ibutils-1.2-11.2.el5 in Red Hat Enterprise Linux (RHEL) 5 allows local users to gain privileges via a Trojan Horse program in refix/lib/, related to an incorrect RPATH setting in the ELF header. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=457935 - http://rhn.redhat.com/errata/RHSA-2
rogram Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=457935 - http://rhn.redhat.com/errata/RHSA-2012-0311.html
CVE ID: CVE-2008-3278 State: PUBLISHED Published: 2019-11-07T22:43:09 Last Updated: 2024-08-07T09:28:42.036Z Vendors: frysk Products: frysk Problem Types: Other Description: frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability by running arbitrary code as another user. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2008-3278 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3278 - https://access.redh
acker.debian.org/tracker/CVE-2008-3278 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3278 - https://access.redhat.com/security/cve/cve-2008-3278
CVE ID: CVE-2008-3279 State: PUBLISHED Published: 2010-04-05T15:15:00 Last Updated: 2024-08-07T09:28:41.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=457942 - http://www.redhat.com/support/errata/RHSA-2010-0181.html - http://www.vupen.com/english/advisories/2010/0755 - http://secunia.com/advisories/39231 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11399
CVE ID: CVE-2008-3280 State: PUBLISHED Published: 2021-05-21T19:23:55 Last Updated: 2024-08-07T09:28:42.000Z Vendors: n/a Products: openid Problem Types: CWE-338 Description: It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator (CVE-2008-0166). In combination with the DNS Cache Poisoning issue (CVE-2008-1447) and the fact that almost all SSL/TLS implementations do not consult CRLs (currently an untracked issue), this means that it is impossible to rely on these OPs. Additional Analyst Notes: - CVE Program Container: References: - http://lists.openid.net/pipermail/openid-security/2008-Au
ditional Analyst Notes: - CVE Program Container: References: - http://lists.openid.net/pipermail/openid-security/2008-August/000942.html - https://www.exploit-db.com/exploits/5720
CVE ID: CVE-2008-3281 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T09:28:41.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/644-1/ - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/31855 - http://www.securitytracker.com/id?1020728 - http://www.vupen.com/english/advisories/2009/1621 - https://www.redhat.com/archi
://www.securitytracker.com/id?1020728 - http://www.vupen.com/english/advisories/2009/1621 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00347.html - https://rhn.redhat.com/errata/RHSA-2008-0836.html - http://secunia.com/advisories/32807 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://secunia.com/advisories/31982 - http://www.vupen.com/english/advisories/2008/2971 - http://www.vmware.com/security/advisories/VMSA-2008-0017.html - http://www.vupen.com/english/advisories/2008/2843 - http://xmlsoft.org/news.html - http://secunia.com/advisories/31590 - http://www.vupen.com/english/advisories/2009/1522 - http://www.securityfocus.com/
http://secunia.com/advisories/31590 - http://www.vupen.com/english/advisories/2009/1522 - http://www.securityfocus.com/archive/1/497962/100/0/threaded - http://www.ubuntu.com/usn/usn-640-1 - http://secunia.com/advisories/31728 - http://security.gentoo.org/glsa/glsa-200812-06.xml - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://secunia.com/advisories/32488 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://secunia.com/advisories/31566 - http://www.securityfocus.com/bid/30783 - http://wiki.rpath.com/Advisories:rPSA-2008-0325 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6496 - http
ries:rPSA-2008-0325 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6496 - http://www.vupen.com/english/advisories/2008/2419 - http://secunia.com/advisories/35379 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:192 - http://secunia.com/advisories/32974 - http://svn.gnome.org/viewvc/libxml2?view=revision&revision=3772 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00261.html - http://www.debian.org/security/2008/dsa-1631 - https://bugzilla.redhat.com/show_bug.cgi?id=458086 - http://mail.gnome.org/archives/xml/2008-August/msg00034.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
.org/archives/xml/2008-August/msg00034.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9812 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:180 - http://secunia.com/advisories/31558 - http://support.apple.com/kb/HT3613 - http://lists.vmware.com/pipermail/security-announce/2008/000039.html - http://secunia.com/advisories/31748
CVE ID: CVE-2008-3282 State: PUBLISHED Published: 2008-08-29T18:00:00 Last Updated: 2025-01-17T15:19:35.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a "numeric truncation error," a different vulnerability than CVE-2008-2152. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/31646 - https://www.redhat.com/a
Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/31646 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00120.html - http://securitytracker.com/id?1020764 - http://secunia.com/advisories/31640 - http://www.vupen.com/english/advisories/2008/2449 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00494.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44742 - https://bugzilla.redhat.com/show_bug.cgi?id=458056 - http://www.redhat.com/support/errata/RHSA-2008-0835.html - http://www.securityfocus.com/bid/30866 - http://www.openoffice.org/issues/show_bug.cgi?id=92217 - https://oval.cisecurity.org/r
www.securityfocus.com/bid/30866 - http://www.openoffice.org/issues/show_bug.cgi?id=92217 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11345 - https://bugzilla.redhat.com/show_bug.cgi?id=455867 - http://secunia.com/advisories/31778
CVE ID: CVE-2008-3283 State: PUBLISHED Published: 2008-08-29T18:00:00 Last Updated: 2024-08-07T09:28:41.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) the authentication / bind phase and (2) anonymous LDAP search requests. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=458977 - http://securitytracker.com/id?1020774 - http://www.redhat.com/support/errata/RHSA-2008-0602.html - http
.cgi?id=458977 - http://securitytracker.com/id?1020774 - http://www.redhat.com/support/errata/RHSA-2008-0602.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44731 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861 - http://secunia.com/advisories/31913 - http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html - http://secunia.com/advisories/31702 - https://rhn.redhat.com/errata/RHSA-2008-0596.html - http://secunia.com/advisories/31867 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861 - http://www.securityfocus.com/bid/30872 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
532861 - http://www.securityfocus.com/bid/30872 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6118 - http://www.vupen.com/english/advisories/2008/2480 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00708.html - http://www.redhat.com/support/errata/RHSA-2008-0858.html - http://secunia.com/advisories/31565 - http://secunia.com/advisories/31627 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00521.html
CVE ID: CVE-2008-3284 State: REJECTED Published: 2009-03-26T10:00:00Z Last Updated: 2024-09-16T22:31:27.883Z Description: No description available.
CVE ID: CVE-2008-3285 State: PUBLISHED Published: 2008-07-24T17:00:00 Last Updated: 2024-08-07T09:28:41.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31175 - http://securityreason.com/securityalert/4027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43910 - http://www.securityfocus.com/bid/30290 - http://www.securityfocus.com/archive/1/494536/100/0/threaded
CVE ID: CVE-2008-3286 State: PUBLISHED Published: 2008-07-24T17:00:00 Last Updated: 2024-08-07T09:28:41.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) VERIFYCONTENT or (2) GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or (3) a GAMESPYRESPONSE command followed by a long RS string. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.org/fakep/unrealfp.zip - http://www.securityfocus.com/bid/30299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43902 - http://secunia.com/advis
/www.securityfocus.com/bid/30299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43902 - http://secunia.com/advisories/31158 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43901 - http://aluigi.altervista.org/adv/swat4x-adv.txt - http://www.vupen.com/english/advisories/2008/2149/references
CVE ID: CVE-2008-3287 State: PUBLISHED Published: 2008-07-24T17:00:00 Last Updated: 2024-08-07T09:28:41.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service (daemon crash) via malformed packets to TCP port 497, which trigger a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43926 - http://www.securityfocus.com/archive/1/494562/100/0/threaded - http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639 - http://www.securityfocus.com/bid/30313 - http://securit
ntz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639 - http://www.securityfocus.com/bid/30313 - http://securityreason.com/securityalert/4031 - http://www.vupen.com/english/advisories/2008/2150/references - http://www.fortiguardcenter.com/advisory/FGA-2008-16.html - http://secunia.com/advisories/31186
CVE ID: CVE-2008-3288 State: PUBLISHED Published: 2008-07-24T17:00:00 Last Updated: 2024-08-07T09:28:41.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a "weak hash algorithm," which makes it easier for context-dependent attackers to recover passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30319 - http://www.securityfocus.com/archive/1/494636/100/0/threaded - http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639 - http://securityreason.com/securityalert/4026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4
9692&r=0.5160639 - http://securityreason.com/securityalert/4026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43935 - http://www.vupen.com/english/advisories/2008/2150/references - http://www.securitytracker.com/id?1020534 - http://www.fortiguardcenter.com/advisory/FGA-2008-16.html - http://secunia.com/advisories/31186