Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
lnerabilities/42430 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00459.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00380.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:118 - http://www.ubuntu.com/usn/usn-685-1 - http://www.vupen.com/english/advisories/2008/1528/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11261
CVE ID: CVE-2008-2293 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:01.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting the CommentSystemAdmin cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29244 - http://secunia.com/advisories/30255 - https://www.exploit-db.com/exploits/5630 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42463
CVE ID: CVE-2008-2294 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:02.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php with a modified user name for "admin." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42466 - https://www.exploit-db.com/exploits/5627 - http://www.securityfocus.com/bid/29252
CVE ID: CVE-2008-2295 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:02.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in rg_search.php in Rgboard 3.0.12, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the s_text parameter and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5620 - http://www.securityfocus.com/bid/29230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42432
CVE ID: CVE-2008-2296 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:01.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute arbitrary PHP code via a URL in the site_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42431 - https://www.exploit-db.com/exploits/5620 - http://www.securityfocus.com/bid/29230
CVE ID: CVE-2008-2297 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:01.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the logininfo cookie to "<?php" or "?>", which is present in the password file and probably passes an insufficient comparison. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42464 - http://www.securityfocus.com/bid/29243 - http://secunia.com/advisories/30279 - https://www.exploit-db.com/exploits/5628
CVE ID: CVE-2008-2298 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:01.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5629 - http://www.securityfocus.com/bid/29246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42468
CVE ID: CVE-2008-2299 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:00.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1531/references - http://support.citrix.com/article/CTX114893 - http://secunia.com/advisories/30271 -
h/advisories/2008/1531/references - http://support.citrix.com/article/CTX114893 - http://secunia.com/advisories/30271 - http://www.securityfocus.com/bid/29233 - http://www.securitytracker.com/id?1020026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42444
CVE ID: CVE-2008-2300 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:00.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users to access unauthorized desktops via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29232 - http://secunia.com/advisories/30271 - http://www.securitytracker.com/id?1020027 - http://support.citrix.com/article/CTX116941 - http://www.vupen.com/english/advisories/2008/1530/reference
m/id?1020027 - http://support.citrix.com/article/CTX116941 - http://www.vupen.com/english/advisories/2008/1530/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42439
CVE ID: CVE-2008-2301 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:01.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Kostenloses Linkmanagementscript allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) top_view.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42455 - http://secunia.com/advisories/30201 - http://www.securityfocus.com/archive/1/492111/100/0/threaded - http://www.securityfocus.com/bid/29236 - https://www.exploit-db.com/exploits/
ocus.com/archive/1/492111/100/0/threaded - http://www.securityfocus.com/bid/29236 - https://www.exploit-db.com/exploits/5623
CVE ID: CVE-2008-2302 State: PUBLISHED Published: 2008-05-23T15:00:00 Last Updated: 2024-08-07T08:58:01.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30250 - http://securitytracker.com/id?1020028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42396 - http://secunia.com/advisories/30291 - http://www.securit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42396 - http://secunia.com/advisories/30291 - http://www.securityfocus.com/bid/29209 - http://www.vupen.com/english/advisories/2008/1618 - http://www.djangoproject.com/weblog/2008/may/14/security/
CVE ID: CVE-2008-2303 State: PUBLISHED Published: 2008-07-14T18:00:00 Last Updated: 2024-08-07T08:58:01.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability than CVE-2008-2307. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43736 - http://www.s
es/security-announce//2008/Nov/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43736 - http://www.securityfocus.com/bid/30186 - http://secunia.com/advisories/32706 - http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html - http://support.apple.com/kb/HT3298 - http://www.vupen.com/english/advisories/2008/2094/references - http://secunia.com/advisories/31074
CVE ID: CVE-2008-2304 State: PUBLISHED Published: 2008-07-14T18:00:00 Last Updated: 2024-08-07T08:58:02.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows user-assisted attackers to execute arbitrary code or cause a denial of service (application crash) via a .funhouse file with a string XML element that contains many characters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3988 - http://lists.apple.com/archives/security-announce//2008/Jul/msg00002.html - https://www.exploit-db.com/exploits/6043 - http://
/lists.apple.com/archives/security-announce//2008/Jul/msg00002.html - https://www.exploit-db.com/exploits/6043 - http://support.apple.com/kb/HT2352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43733 - http://www.vupen.com/english/advisories/2008/2093/references - http://secunia.com/advisories/31060 - http://www.securityfocus.com/archive/1/494230/100/0/threaded - http://www.securityfocus.com/bid/30189 - http://www.securitytracker.com/id?1020472
CVE ID: CVE-2008-2305 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T08:58:02.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to execute arbitrary code via a document containing a crafted font, related to "PostScript font names." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://se
l - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - http://securitytracker.com/id?1020873 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45162
CVE ID: CVE-2008-2306 State: PUBLISHED Published: 2008-06-23T20:00:00 Last Updated: 2024-08-07T08:58:01.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTION_SHELL_EXECUTE_HIGHRISK Internet Explorer zone setting, which allows remote attackers to bypass intended access restrictions, and force a client system to download and execute arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/127185 - http://secunia.com/advisories/30775 - http://www.securitytracker.com/id?1020329 - http://www.vupen.com/english/advisories/2008/1882/references - http://www.
- http://www.securitytracker.com/id?1020329 - http://www.vupen.com/english/advisories/2008/1882/references - http://www.securityfocus.com/bid/29835 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html
CVE ID: CVE-2008-2307 State: PUBLISHED Published: 2008-06-23T20:00:00 Last Updated: 2024-08-07T08:58:02.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors involving JavaScript arrays that trigger memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT2163 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00319.html - http://www.vupen.com/en
om/kb/HT2163 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00319.html - http://www.vupen.com/english/advisories/2008/1981/references - http://support.apple.com/kb/HT2165 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00279.html - http://secunia.com/advisories/30775 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00003.html - http://secunia.com/advisories/30801 - http://www.vupen.com/english/advisories/2008/1882/references - http://support.apple.com/kb/HT2092 - http://secunia.com/advisories/30992 - http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html - http://www.kb.cert.org/vuls/id/361043 - http://www.secu
s.apple.com/archives/security-announce/2008//Jul/msg00001.html - http://www.kb.cert.org/vuls/id/361043 - http://www.securityfocus.com/bid/29836 - http://www.vupen.com/english/advisories/2008/2094/references - http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html - http://www.securitytracker.com/id?1020330 - http://secunia.com/advisories/31074 - http://www.vupen.com/english/advisories/2008/1980
CVE ID: CVE-2008-2308 State: PUBLISHED Published: 2008-07-01T17:00:00 Last Updated: 2024-08-07T08:58:02.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service (memory corruption and application crash) by resolving an alias that contains crafted AFP volume mount information. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT2163 - http://www.vupen.com/english/advisories/2008/1981/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43474 - http://lists.apple.com/a
/advisories/2008/1981/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43474 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://securitytracker.com/id?1020390 - http://secunia.com/advisories/30802 - http://www.securityfocus.com/bid/30018
CVE ID: CVE-2008-2309 State: PUBLISHED Published: 2008-07-01T18:00:00 Last Updated: 2024-08-07T08:58:01.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.4 allows user-assisted remote attackers to execute arbitrary code via a (1) .xht or (2) .xhtm file, which does not trigger a "potentially unsafe" warning message in (a) the Download Validation feature in Mac OS X 10.4 or (b) the Quarantine feature in Mac OS X 10.5. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT2163 - http://www.vupen.com/english/advisories/2008/1981/references - http://lists.apple.com/
p://support.apple.com/kb/HT2163 - http://www.vupen.com/english/advisories/2008/1981/references - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://secunia.com/advisories/30802 - http://securitytracker.com/id?1020391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43493 - http://www.securityfocus.com/bid/30018
CVE ID: CVE-2008-2310 State: PUBLISHED Published: 2008-07-01T18:00:00 Last Updated: 2024-08-07T08:58:01.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string in (1) C++ or (2) Java source code. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT2163 - http://www.vupen.com/english/advisories/2008/1981/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43494 - http://lists.apple.com/archives/security-announce/2008//Jun/msg0000
exchange.xforce.ibmcloud.com/vulnerabilities/43494 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://secunia.com/advisories/30802 - http://securitytracker.com/id?1020392 - http://www.securityfocus.com/bid/30018
CVE ID: CVE-2008-2311 State: PUBLISHED Published: 2008-07-01T18:00:00 Last Updated: 2024-08-07T08:58:01.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Launch Services in Apple Mac OS X before 10.5, when Open Safe Files is enabled, allows remote attackers to execute arbitrary code via a symlink attack, probably related to a race condition and automatic execution of a downloaded file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT2163 - http://www.vupen.com/english/advisories/2008/1981/references - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://secunia.com/advisories/30802 - http://securitytra
.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://secunia.com/advisories/30802 - http://securitytracker.com/id?1020393 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43495 - http://www.securityfocus.com/bid/30018
CVE ID: CVE-2008-2312 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T08:58:02.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - http://securitytrack
0A.html - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - http://securitytracker.com/id?1020881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45173
CVE ID: CVE-2008-2313 State: PUBLISHED Published: 2008-07-01T18:00:00 Last Updated: 2024-08-07T08:58:01.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT2163 - http://www.vupen.com/english/advisories/2008/1981/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43496 - http://securitytracker.com/id?1020394 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://sec
/securitytracker.com/id?1020394 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://secunia.com/advisories/30802 - http://www.securityfocus.com/bid/30018
CVE ID: CVE-2008-2314 State: PUBLISHED Published: 2008-07-01T18:00:00 Last Updated: 2024-08-07T08:58:01.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dock in Apple Mac OS X 10.5 before 10.5.4, when Exposé hot corners is enabled, allows physically proximate attackers to gain access to a locked session in (1) sleep mode or (2) screen saver mode via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT2163 - http://www.vupen.com/english/advisories/2008/1981/references - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://secunia.com/advisories/30802 - http://www.securityfocus.com/bid/
ives/security-announce/2008//Jun/msg00002.html - http://secunia.com/advisories/30802 - http://www.securityfocus.com/bid/30018 - http://securitytracker.com/id?1020395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43497
CVE ID: CVE-2008-2315 State: PUBLISHED Published: 2008-08-01T14:00:00 Last Updated: 2024-08-07T08:58:01.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00
Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://www.vupen.com/english/advisories/2008/2288 - http://secunia.com/advisories/32793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44173 - http://www.securityfocus.com/bid/30491 - http://secunia.com/advisories/38675 - http://secunia.com/advisories/33937 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683 - http://secunia.com/advisories/37471 - http://www.openwall.com/lists/oss-security/2008/11/05/3 - http://secunia.com/advisories/31687 - http://www.openwall.com/lists/oss-security/2008/11/05/2 - http://www.vmwa
1/05/3 - http://secunia.com/advisories/31687 - http://www.openwall.com/lists/oss-security/2008/11/05/2 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://security.gentoo.org/glsa/glsa-200807-16.xml - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://secunia.com/advisories/31358 - http://secunia.com/advisories/31332 - http://www.ubuntu.com/usn/usn-632-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:164 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/31518 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
p://secunia.com/advisories/31518 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44172 - http://secunia.com/advisories/31305 - http://bugs.gentoo.org/show_bug.cgi?id=230640 - http://secunia.com/advisories/31365 - http://support.avaya.com/css/P8/documents/100074697 - http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900 - http://bugs.gentoo.org/attachment.cgi?id=159418&action=view - http://www.debian.org/security/2008/dsa-1667 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 - http://slackware.com/security/viewer.ph
008/dsa-1667 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 - http://www.vupen.com/english/advisories/2009/3316 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445
CVE ID: CVE-2008-2316 State: PUBLISHED Published: 2008-08-01T14:00:00 Last Updated: 2024-08-07T08:58:02.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495445/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://www.vupen.com/english/advisories/2008/2288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4417