Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
a-1658 - http://www.securityfocus.com/bid/31602 - http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html - https://bugs.freedesktop.org/show_bug.cgi?id=17803 - http://www.securitytracker.com/id?1021063 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45701 - https://www.exploit-db.com/exploits/7822 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3834 - http://secunia.com/advisories/32385 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html - http://secunia.com/advisories/32281 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00298.html - http://www.freedesktop.org/wiki/Software/dbus#head-dad0dab297a44f1d7a3b1259cfc06b583
nounce/2008-October/msg00298.html - http://www.freedesktop.org/wiki/Software/dbus#head-dad0dab297a44f1d7a3b1259cfc06b583fd6a88a - http://secunia.com/advisories/32230 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10253 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.vupen.com/english/advisories/2008/2762 - http://secunia.com/advisories/33396 - http://secunia.com/advisories/32127 - http://www.redhat.com/support/errata/RHSA-2009-0008.html - http://www.ubuntu.com/usn/usn-653-1
CVE ID: CVE-2008-3835 State: PUBLISHED Published: 2008-09-24T18:00:00 Last Updated: 2024-08-07T09:53:00.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32025 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232 - http://www.debian.org/security/2009/dsa-1697 - https://www.redhat.com/archi
ecurity&y=2008&m=slackware-security.405232 - http://www.debian.org/security/2009/dsa-1697 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html - http://www.ubuntu.com/usn/usn-645-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:206 - http://secunia.com/advisories/32144 - http://www.mozilla.org/security/announce/2008/mfsa2008-38.html - http://secunia.com/advisories/32010 - http://www.vupen.com/english/advisories/2009/0977 - http://www.ubuntu.com/usn/usn-645-2 - http://www.securityfocus.com/bid/31346 - http://secunia.com/advisories/31985 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html - http://secunia.com/advisories/
ries/31985 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html - http://secunia.com/advisories/31984 - http://secunia.com/advisories/32185 - http://secunia.com/advisories/32196 - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45347 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9643 - http://secunia.com/advisories/33433 - https://bugzilla.mozilla.org/show_bug.cgi?id=439034 - http://www.vupen.com/english/advisories/2008/2661 - http://www.securitytracker.com/id?1020919 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008
/2661 - http://www.securitytracker.com/id?1020919 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://secunia.com/advisories/32092 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:205 - http://www.debian.org/security/2009/dsa-1696 - http://download.novell.com/Download?buildid=WZXONb-tqBw~ - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html - http://www.ubuntu.com/usn/usn-647-1 - http://secunia.com/advisories/32007 - http://www.redhat.com/support/errata/RHSA-2008-0882.html - http://secunia.com/advisories/32845 - http://www.
ies/32007 - http://www.redhat.com/support/errata/RHSA-2008-0882.html - http://secunia.com/advisories/32845 - http://www.debian.org/security/2008/dsa-1649 - http://secunia.com/advisories/32012 - http://secunia.com/advisories/33434 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123 - http://secunia.com/advisories/32044 - http://www.redhat.com/support/errata/RHSA-2008-0908.html - http://secunia.com/advisories/34501 - http://secunia.com/advisories/32082
CVE ID: CVE-2008-3836 State: PUBLISHED Published: 2008-09-24T18:00:00 Last Updated: 2024-08-07T09:53:00.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vectors related to feed preview and the (1) elem.doCommand, (2) elem.dispatchEvent, (3) _setTitleText, (4) _setTitleImage, and (5) _initSubscriptionUI functions. Additional Analyst Notes: - CVE Program Container: References: - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232 - http://www.debian.org/security/2009/dsa-1697 - https://exchange.xforce.ibmcloud.com/vulner
m=slackware-security.405232 - http://www.debian.org/security/2009/dsa-1697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45350 - http://www.ubuntu.com/usn/usn-645-1 - http://secunia.com/advisories/32144 - https://bugzilla.mozilla.org/show_bug.cgi?id=430658 - http://www.vupen.com/english/advisories/2009/0977 - http://www.ubuntu.com/usn/usn-645-2 - http://www.securityfocus.com/bid/31346 - https://bugzilla.mozilla.org/show_bug.cgi?id=360529 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html - http://secunia.com/advisories/31984 - http://secunia.com/advisories/32185 - http://secunia.com/advisories/32196 - http://www.debian.org/security/2008/dsa-1669 - http://se
ia.com/advisories/32185 - http://secunia.com/advisories/32196 - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32042 - http://secunia.com/advisories/33433 - http://www.mozilla.org/security/announce/2008/mfsa2008-39.html - http://www.vupen.com/english/advisories/2008/2661 - http://www.securitytracker.com/id?1020914 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:205 - http://download.novell.com/Download?buildid=WZXONb-tqBw~ - http://secunia.com/advisories/32845 - http://www.debian.org/security/2008/dsa-1649 - http://secunia.com/advisories/32012 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-3837 State: PUBLISHED Published: 2008-09-24T18:00:00 Last Updated: 2024-08-07T09:53:00.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32011 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232 - http:/
sories/32011 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232 - http://www.debian.org/security/2009/dsa-1697 - http://secunia.com/advisories/32096 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html - http://www.ubuntu.com/usn/usn-645-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45348 - http://secunia.com/advisories/32144 - http://secunia.com/advisories/32010 - http://www.vupen.com/english/advisories/2009/0977 - http://www.ubuntu.com/usn/usn-645-2 - http://www.securityfocus.com/bid/31346 - http://secunia.com/advisories/31985 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.
bid/31346 - http://secunia.com/advisories/31985 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html - http://secunia.com/advisories/31984 - http://secunia.com/advisories/32185 - http://secunia.com/advisories/32196 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9950 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html - http://www.debian.org/security/2008/dsa-1669 - http://www.mozilla.org/security/announce/2008/mfsa2008-40.html - http://secunia.com/advisories/32042 - http://secunia.com/advisories/33433 - http://www.vupen.com/english/advisories/2008/2661 - http://slackware.com/security/viewer.p
ecunia.com/advisories/33433 - http://www.vupen.com/english/advisories/2008/2661 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422 - http://secunia.com/advisories/32095 - http://secunia.com/advisories/32089 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://www.securitytracker.com/id?1020922 - http://www.redhat.com/support/errata/RHSA-2008-0879.html - https://bugzilla.mozilla.org/show_bug.cgi?id=329385 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:205 - http://download.novell.com/Download?buildid=WZXONb-tqBw~ - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html - http:/
oad?buildid=WZXONb-tqBw~ - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html - http://secunia.com/advisories/31987 - http://www.redhat.com/support/errata/RHSA-2008-0882.html - http://secunia.com/advisories/32845 - http://www.debian.org/security/2008/dsa-1649 - http://secunia.com/advisories/32012 - http://secunia.com/advisories/32044 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-3838 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T09:53:00.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NFS Remote Procedure Calls (RPC) zones implementation in Sun Solaris 10 and OpenSolaris before snv_88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020752 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240866-1 - http://secunia.com/advisories/31622 - https://
752 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240866-1 - http://secunia.com/advisories/31622 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44696 - http://www.vupen.com/english/advisories/2008/2441 - http://www.securityfocus.com/bid/30853
CVE ID: CVE-2008-3839 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T09:53:00.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NFS module in the kernel in Sun Solaris 10 and OpenSolaris snv_59 through snv_87, when configured as an NFS server without the nodevices option, allows local users to cause a denial of service (panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44631 - http://www.vupen.com/english/advisories/2008/2425 - http://support.avaya.com/elmodocs2/security/ASA-2008-3
ities/44631 - http://www.vupen.com/english/advisories/2008/2425 - http://support.avaya.com/elmodocs2/security/ASA-2008-369.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-26-241066-1 - http://secunia.com/advisories/31598 - http://www.securitytracker.com/id?1020751
CVE ID: CVE-2008-3840 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T09:53:00.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00127-08252008 - http://www.securityfocus.com/archive/1/495729/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44745 - http://securityreason.com/securityalert/4192
CVE ID: CVE-2008-3841 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T09:53:00.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/search_links.php in Freeway eCommerce 1.4.1.171 allows remote attackers to inject arbitrary web script or HTML via the search_link parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31475 - http://www.openfreeway.org/download/change-log.html - http://securityreason.com/securityalert/4181 - http://www.securityfocus.com/archive/1/495549/100/0/threaded
CVE ID: CVE-2008-3842 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T09:53:00.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework without the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "</" (less-than slash) sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.procheckup.com/PDFs/bypassing-dot-NET-ValidateRequest.pdf - http://securityreason.com/securityalert/4193 - http://www.securityfocu
.com/PDFs/bypassing-dot-NET-ValidateRequest.pdf - http://securityreason.com/securityalert/4193 - http://www.securityfocus.com/archive/1/495667/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44741
CVE ID: CVE-2008-3843 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T09:53:00.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework with the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "<~/" (less-than tilde slash) sequence followed by a crafted STYLE element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496071/100/0/threaded - https://exchange.xforce.ibmcloud.com/v
ner: References: - http://www.securityfocus.com/archive/1/496071/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44743 - http://www.procheckup.com/PDFs/bypassing-dot-NET-ValidateRequest.pdf - http://securityreason.com/securityalert/4193 - http://www.securityfocus.com/archive/1/495667/100/0/threaded - http://www.procheckup.com/Vulnerability_PR08-20.php
CVE ID: CVE-2008-3844 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T09:53:00.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification (Trojan Horse) that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not distributed from any official Red Hat sources, the scope of this issue is restricted to users who may have obtained these packages through unofficial distribution points. As of 20080827, no unofficial distributions of this software are k
hese packages through unofficial distribution points. As of 20080827, no unofficial distributions of this software are known. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2008-399.htm - http://www.redhat.com/security/data/openssh-blacklist.html - http://www.vupen.com/english/advisories/2008/2821 - http://secunia.com/advisories/31575 - http://www.redhat.com/support/errata/RHSA-2008-0855.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44747 - http://securitytracker.com/id?1020730 - http://www.securityfocus.com/bid/30794 - http://secunia.com/advisories/32241
CVE ID: CVE-2008-3845 State: PUBLISHED Published: 2008-08-27T23:00:00 Last Updated: 2024-08-07T09:53:00.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6307 - http://security.craftysyntax.com/updates/?v=2.14.6 - http://sourceforge.net/project/shownotes.php?release_id=620878 - http://www.gulftech.org/?node=research&article_id=00127-08252008 - http://www.securi
t/shownotes.php?release_id=620878 - http://www.gulftech.org/?node=research&article_id=00127-08252008 - http://www.securityfocus.com/archive/1/495729/100/0/threaded - http://secunia.com/advisories/31573 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44669 - http://www.securityfocus.com/bid/30825 - http://securityreason.com/securityalert/4192
CVE ID: CVE-2008-3846 State: PUBLISHED Published: 2008-08-27T23:00:00 Last Updated: 2024-08-07T09:53:00.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mysql-lists 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31611 - http://jvn.jp/en/jp/JVN27417220/index.html - http://aqua.sun.ddns.vc/free/php_script/mysql.html - http://www.securityfocus.com/bid/30835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44662
CVE ID: CVE-2008-3847 State: PUBLISHED Published: 2008-08-27T23:00:00 Last Updated: 2024-08-07T09:53:00.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AN Guestbook (ANG) before 0.7.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44671 - http://sourceforge.net/forum/forum.php?forum_id=860304 - http://www.securityfocus.com/bid/30830 - http://secunia.com/advisories/31608
CVE ID: CVE-2008-3848 State: PUBLISHED Published: 2008-08-27T23:00:00 Last Updated: 2024-08-07T09:53:00.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in single.php in Z-Breaknews 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44675 - http://www.securityfocus.com/bid/30831 - https://www.exploit-db.com/exploits/6309
CVE ID: CVE-2008-3849 State: PUBLISHED Published: 2008-08-27T23:00:00 Last Updated: 2024-08-07T09:53:00.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the calendar controller in Civic Website Manager before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving (1) month, (2) day, and (3) year fields. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31609 - http://secunia.com/advisories/31641 - http://www.securityfocus.com/bid/30833 - http://sourceforge.net/project/shownotes.php?group_id=234663&release_id=621954 - https://exchang
tyfocus.com/bid/30833 - http://sourceforge.net/project/shownotes.php?group_id=234663&release_id=621954 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44673
CVE ID: CVE-2008-3850 State: PUBLISHED Published: 2008-08-27T23:00:00 Last Updated: 2024-08-07T09:53:00.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Accellion File Transfer FTA_7_0_135 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to courier/forgot_password.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30796 - http://secunia.com/advisories/31572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44641 - http://zebux.free.fr/pub/Advisory/Advisory_Accellion_XSS_Vulnerability_200808.txt
CVE ID: CVE-2008-3851 State: PUBLISHED Published: 2008-08-27T23:00:00 Last Updated: 2024-08-07T09:53:00.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\ (dot dot backslash) in the (1) blogpost, (2) cat, and (3) file parameters to data/inc/themes/predefined_variables.php, as reachable through index.php; and the (4) blogpost and (5) cat parameters to data/inc/blog_include_react.php, as reachable through index.php. NOTE: the issue involving vectors 1 through 3 reportedly exists because of an incomplete fix for CVE-2008-3194. Addi
hp. NOTE: the issue involving vectors 1 through 3 reportedly exists because of an incomplete fix for CVE-2008-3194. Additional Analyst Notes: - CVE Program Container: References: - http://www.pluck-cms.org/releasenotes.php#4.5.3 - http://www.securityfocus.com/bid/30820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44677 - http://securityreason.com/securityalert/4195 - https://www.exploit-db.com/exploits/6300 - http://secunia.com/advisories/31607 - http://www.securityfocus.com/archive/1/495706/100/0/threaded
CVE ID: CVE-2008-3852 State: PUBLISHED Published: 2008-08-28T17:00:00 Last Updated: 2024-08-07T09:53:00.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio in the Visual Studio Net component in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 2 allows remote authenticated users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21255607 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR28432 - http://www.securitytracker.com/id?1020761 - http://www.securityfocus.
ww-1.ibm.com/support/docview.wss?uid=swg1JR28432 - http://www.securitytracker.com/id?1020761 - http://www.securityfocus.com/archive/1/496405/100/0/threaded - http://www-1.ibm.com/support/docview.wss?uid=swg1JR28431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44697 - http://www.vupen.com/english/advisories/2008/1769 - http://www.securityfocus.com/bid/29601 - http://www.vupen.com/english/advisories/2008/2445 - http://secunia.com/advisories/31635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42927 - http://www-1.ibm.com/support/docview.wss?uid=swg21293566 - http://secunia.com/advisories/30558
CVE ID: CVE-2008-3853 State: PUBLISHED Published: 2008-08-28T17:00:00 Last Updated: 2024-08-07T09:53:00.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9.1 before FP4a and 9.5 before FP1 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via unspecified vectors. NOTE: this might be related to CVE-2007-3676. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21255607 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ12379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45141 -
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ12379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45141 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www.securityfocus.com/bid/29601 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ12406 - http://secunia.com/advisories/29784