Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2213 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Links 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script2 and (2) msg_script3 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29032 - http://securityreason.com/securityalert/3892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42208 - http://www.securityfocus.com/archive/1/491591/100/0/threaded - http://secunia.com/advisories/30065
CVE ID: CVE-2008-2214 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:59.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long community string in an SNMP TRAP packet. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3886 - http://www.securityfocus.com/bid/28990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42104 - http://www.vupen.com/english/advisories/2008/1403/references - http://www.securit
e.ibmcloud.com/vulnerabilities/42104 - http://www.vupen.com/english/advisories/2008/1403/references - http://www.securityfocus.com/archive/1/491454/100/0/threaded - http://secunia.com/advisories/30036 - http://www.securitytracker.com/id?1019953 - http://www.ngssoftware.com/advisories/critical-vulnerability-in-snmpc/
CVE ID: CVE-2008-2215 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:59.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Project-Based Calendaring System (PBCS) 0.7.1-1 allow remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter to (1) src/yopy_sync.php and (2) system-logger/print_logs.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5523 - http://www.securityfocus.com/bid/28991 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42106 - http://secunia.com/advisories/30015
CVE ID: CVE-2008-2216 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:58.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in src/yopy_upload.php in Project-Based Calendaring System (PBCS) 0.7.1 allows remote authenticated users to upload arbitrary files to tmp/uploads. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42105 - http://www.securityfocus.com/bid/28991
CVE ID: CVE-2008-2217 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:58.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cm/graphie.php in Content Management System 0.6.1 for Phprojekt allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cm_imgpath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42510 - http://www.securityfocus.com/bid/28958
CVE ID: CVE-2008-2218 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:58.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server (MCS) before Maintenance Release 3.5.8.3 and 4.0.25.3 allows remote attackers to cause a denial of service (crash) via a flood of "extraneous" messages, as demonstrated by the Nessus "Generic flood" denial of service plugin. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1404/references - http://secunia.com/advisories/30038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42
ies/2008/1404/references - http://secunia.com/advisories/30038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42115 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=719698 - http://www.securityfocus.com/bid/28994 - http://www.securitytracker.com/id?1019957
CVE ID: CVE-2008-2219 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:58.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in install.php in C-News.fr C-News 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the etape parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42509 - http://www.z0rlu.ownspace.org/index.php?/archives/70-cnews-1.0.1-XSS.html
CVE ID: CVE-2008-2220 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:58.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) CONFIG[LANGUAGE_CPATH] parameter to modules/forum/embedforum.php and the (2) CONFIG[BASE_PATH] parameter to modules/scorm/lib.inc.php, different vectors than CVE-2006-4448. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28996 - https://www.exploit-db.com/exploits
tes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28996 - https://www.exploit-db.com/exploits/5526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42113
CVE ID: CVE-2008-2221 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:58.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java plugin in IBM WebSphere Application Server 5.0.2 allows untrusted applets to gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42116 - http://www.securitytracker.com/id?1019956 - http://secunia.com/advisories/29976 - http://www.securityfocus.com/bid/28997 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK65161 - http://www.vupen.com/english/advisories/2008/1411/references
CVE ID: CVE-2008-2222 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:58.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication via the user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42381 - https://www.exploit-db.com/exploits/5603 - http://www.securityfocus.com/bid/29184
CVE ID: CVE-2008-2223 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:58.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in group_posts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30144 - https://www.exploit-db.com/exploits/5565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42285 - http://www.securityfocus.com/bid/29114 - http://forums.buyscripts.in/viewtopic.php?f=7&t=3389
CVE ID: CVE-2008-2224 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:58.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SazCart 1.5.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) _saz[settings][site_dir] parameter to layouts/default/header.saz.php and the (2) _saz[settings][site_url] parameter to admin/alayouts/default/pages/login.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42289 - http://www.securityfocus.com/bid/29113 - https://www.exploit-db.com/ex
hange.xforce.ibmcloud.com/vulnerabilities/42289 - http://www.securityfocus.com/bid/29113 - https://www.exploit-db.com/exploits/5566 - http://secunia.com/advisories/30148
CVE ID: CVE-2008-2225 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:58.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands via the systemId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42251 - https://www.exploit-db.com/exploits/5555 - http://www.securityfocus.com/bid/29093
CVE ID: CVE-2008-2226 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:58.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the export feature in OpenKM before 2.0 allows remote attackers to export arbitrary documents via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29117 - http://sourceforge.net/project/shownotes.php?release_id=597940 - http://secunia.com/advisories/30137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42297
CVE ID: CVE-2008-2227 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:58.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PHP-Fusion Forum Rank System 6 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the settings[locale] parameter to (1) forum.php and (2) profile.php in infusions/rank_system/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29077 - http://secunia.com/advisories/30304 - http://ww
rogram Container: References: - http://www.securityfocus.com/bid/29077 - http://secunia.com/advisories/30304 - http://www.securityfocus.com/bid/29077/exploit - https://exchange.xforce.ibmcloud.com/vulnerabilities/42244
CVE ID: CVE-2008-2228 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:49:58.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in portfolio/commentaires/derniers_commentaires.php in Cyberfolio 7.12, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rep parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42286 - http://secunia.com/advisories/30154 - http://www.securityfocus.com/bid/29124
CVE ID: CVE-2008-2230 State: PUBLISHED Published: 2008-06-11T01:00:00 Last Updated: 2024-08-07T08:49:58.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43001 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484311 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484474
CVE ID: CVE-2008-2231 State: PUBLISHED Published: 2008-06-05T20:21:00 Last Updated: 2024-08-07T08:49:58.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote attackers to execute SQL commands and read table information via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.slashcode.com/article.pl?sid=08/01/07/2314232 - http://secunia.com/advisories/31691 - http://www.securitytracker.com/id?1020206 - http://marc.info/?l=oss-security&m=121260265427728&w=2 - http://marc.info/?l=oss-security&m=1212587310280
m/id?1020206 - http://marc.info/?l=oss-security&m=121260265427728&w=2 - http://marc.info/?l=oss-security&m=121258731028005&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42880 - http://securityreason.com/securityalert/3923 - http://slashcode.cvs.sourceforge.net/slashcode/slash/Slash/Utility/Environment/Environment.pm?r1=1.223&r2=1.225 - http://www.slashcode.com/article.pl?sid=08/01/04/1950244&tid=4 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484499 - http://www.debian.org/security/2008/dsa-1633 - http://secunia.com/advisories/30551 - http://www.securityfocus.com/bid/29548
CVE ID: CVE-2008-2232 State: PUBLISHED Published: 2008-07-17T10:00:00 Last Updated: 2024-08-07T08:49:58.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: The expand_template function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30245 - http://www.debian.org/security/2008/dsa-1611 - http://secunia.com/advisories/31086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43834 - http://secunia.com/advisories/31131 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490921 - https://www.redhat.com/archives/fedora-package-announ
/31131 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490921 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00921.html - http://secunia.com/advisories/36358 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00947.html
CVE ID: CVE-2008-2233 State: PUBLISHED Published: 2008-08-18T17:15:00 Last Updated: 2024-08-07T08:49:59.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in Openwsman 1.2.0 and 2.0.0, in unknown configurations, allows remote Openwsman servers to replay SSL sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30694 - http://www.vupen.com/english/advisories/2008/2397 - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00003.html - http://secunia.com/advisories/31429
CVE ID: CVE-2008-2234 State: PUBLISHED Published: 2008-08-18T17:15:00 Last Updated: 2024-08-07T08:49:58.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Openwsman 1.2.0 and 2.0.0 allow remote attackers to execute arbitrary code via a crafted "Authorization: Basic" HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31410 - http://secunia.com/advisories/31942 - http://www.securityfocus.com/bid/30694 - http://www.vupen.com/english/advisories/2008/2624 - http://www.vmware.com/security/advisories/VMSA-2008-0015.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44484 - http://www.vupen.co
curity/advisories/VMSA-2008-0015.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44484 - http://www.vupen.com/english/advisories/2008/2397 - http://lists.vmware.com/pipermail/security-announce/2008/000034.html - http://www.securityfocus.com/archive/1/496528/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44481 - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00003.html - http://secunia.com/advisories/31429
CVE ID: CVE-2008-2235 State: PUBLISHED Published: 2008-08-01T14:00:00 Last Updated: 2024-08-07T08:49:58.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proximate attackers to change the PIN. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30473 - http://secunia.com/advisories/31330 - http://secunia.com/advisories/34362 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:183 - http://www.opensc-project.org/security.html - http:/
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:183 - http://www.opensc-project.org/security.html - http://secunia.com/advisories/33115 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://secunia.com/advisories/31360 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html - https://www.debian.org/security/2008/dsa-1627 - http://www.opensc-project.org/pipermail/opensc-announce/2008-July/000020.html - http://secunia.com/advisories/32099 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html - http://security.gentoo.org/glsa/glsa-200812-09.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/4
00005.html - http://security.gentoo.org/glsa/glsa-200812-09.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/44140
CVE ID: CVE-2008-2236 State: PUBLISHED Published: 2008-10-03T15:00:00 Last Updated: 2024-08-07T08:49:58.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter (flavour variable). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000073.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45600 - http://secunia.com/advisories/32074 - http://sourceforge.net/project/shownotes.php?rele
loud.com/vulnerabilities/45600 - http://secunia.com/advisories/32074 - http://sourceforge.net/project/shownotes.php?release_id=630149 - http://jvn.jp/en/jp/JVN03300113/index.html - http://www.securityfocus.com/bid/31535
CVE ID: CVE-2008-2237 State: PUBLISHED Published: 2008-10-30T19:19:00 Last Updated: 2024-08-07T08:49:58.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in OpenOffice.org (OOo) 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-677-2 - http://secunia.com/advisories/32856 - http://www.securityfocus.com/bid/31962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46165 - http://secunia.com/advisories/32461 - http://secunia.com/advisories/32419 - https://oval.cisecurity
nerabilities/46165 - http://secunia.com/advisories/32461 - http://secunia.com/advisories/32419 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10784 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00923.html - http://secunia.com/advisories/32872 - http://neowiki.neooffice.org/index.php/NeoOffice_2.2.5_Patch_3_New_Features#Security_fixes - http://www.ubuntu.com/usn/usn-677-1 - http://security.gentoo.org/glsa/glsa-200812-13.xml - http://secunia.com/advisories/32676 - http://www.vupen.com/english/advisories/2008/3103 - http://www.vupen.com/english/advisories/2008/2947 - http://www.openoffice.org/security/cves/CVE-2008-2237.html
8/3103 - http://www.vupen.com/english/advisories/2008/2947 - http://www.openoffice.org/security/cves/CVE-2008-2237.html - http://secunia.com/advisories/32489 - http://secunia.com/advisories/32463 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-242627-1 - http://www.securitytracker.com/id?1021120 - http://www.redhat.com/support/errata/RHSA-2008-0939.html - http://www.debian.org/security/2008/dsa-1661 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://secunia.com/advisories/33140 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00905.html
CVE ID: CVE-2008-2238 State: PUBLISHED Published: 2008-10-30T19:19:00 Last Updated: 2024-08-07T08:49:58.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a StarOffice/StarSuite document, which trigger a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-677-2 - http://secunia.com/advisories/32856 - http://www.securityfocus.com/bid/31962 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=750 - https://oval.cisecurity.or
us.com/bid/31962 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=750 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10849 - http://secunia.com/advisories/32461 - http://www.vupen.com/english/advisories/2008/3153 - http://secunia.com/advisories/32419 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00923.html - http://secunia.com/advisories/32872 - http://neowiki.neooffice.org/index.php/NeoOffice_2.2.5_Patch_3_New_Features#Security_fixes - http://www.ubuntu.com/usn/usn-677-1 - http://security.gentoo.org/glsa/glsa-200812-13.xml - http://secunia.com/advisories/32676 - http://www.vupen.com/english/advisorie
curity.gentoo.org/glsa/glsa-200812-13.xml - http://secunia.com/advisories/32676 - http://www.vupen.com/english/advisories/2008/3103 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-243226-1 - http://www.vupen.com/english/advisories/2008/2947 - http://secunia.com/advisories/32489 - http://secunia.com/advisories/32463 - http://www.redhat.com/support/errata/RHSA-2008-0939.html - http://www.openoffice.org/security/cves/CVE-2008-2238.html - http://www.debian.org/security/2008/dsa-1661 - http://www.securitytracker.com/id?1021121 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://secunia.com/advisories/33140 - https://exchange.xforce.ibmcloud.com/vulnera
rity-announce/2008-11/msg00002.html - http://secunia.com/advisories/33140 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46166 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00905.html
CVE ID: CVE-2008-2240 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:49:58.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2008-May/001988.html - http://www.vupen.com/english/advisories/2008/1597 - http://secunia.com/advisories/30310 - http://www.attrition.org/pipermail/vim/2008-May/001989.htm
/advisories/2008/1597 - http://secunia.com/advisories/30310 - http://www.attrition.org/pipermail/vim/2008-May/001989.html - http://secunia.com/advisories/30332 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42552 - http://www.mwrinfosecurity.com/publications/mwri_ibm-lotus-domino-accept-language-stack-overflow_2008-05-20.pdf - http://www-1.ibm.com/support/docview.wss?uid=swg21303057 - http://www.securityfocus.com/bid/29310 - http://www.securitytracker.com/id?1020098