Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/www.exploit-db.com/exploits/6244 - http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44444 - https://www.exploit-db.com/exploits/6317
CVE ID: CVE-2008-3705 State: PUBLISHED Published: 2008-08-19T19:10:00 Last Updated: 2024-08-07T09:45:19.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the CLogger::WriteFormated function in echoware/Logger.cpp in EchoVNC Linux before 1.1.2 allows remote echoServers to execute arbitrary code via a large (1) group or (2) user list, aka a "very crowded echoServer" attack. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30722 - http://sourceforge.net/project/shownotes.php?release_id=620019&group_id=133100 - https://exchange.xforc
.com/bid/30722 - http://sourceforge.net/project/shownotes.php?release_id=620019&group_id=133100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44501 - http://secunia.com/advisories/31526
CVE ID: CVE-2008-3706 State: PUBLISHED Published: 2008-08-19T19:10:00 Last Updated: 2024-08-07T09:45:19.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL commands via the adid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44500 - http://secunia.com/advisories/31515 - http://securityreason.com/securityalert/4162 - https://www.exploit-db.com/exploits/6249 - http://www.securityfocus.com/bid/30711
CVE ID: CVE-2008-3707 State: PUBLISHED Published: 2008-08-19T19:10:00 Last Updated: 2024-08-07T09:45:19.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to execute arbitrary PHP code via a URL in the script_path parameter to (1) flat_read.php, (2) post.php, (3) process_post.php, (4) process_search.php, (5) forum.php, (6) process_subscribe.php, (7) read.php, (8) search.php, (9) subscribe.php in path/; and (10) add_ban.php, (11) add_ban_form.php, (12) add_board.php, (13) add_vip.php, (14) add_vip_form.php, (15) copy_ban.php, (16) copy_vip.php, (17) delete_ban.php, (18) delete_boar
hp, (13) add_vip.php, (14) add_vip_form.php, (15) copy_ban.php, (16) copy_vip.php, (17) delete_ban.php, (18) delete_board.php, (19) delete_messages.php, (20) delete_vip.php, (21) edit_ban.php, (22) edit_board.php, (23) edit_vip.php, (24) index.php, (25) lock_messages.php, (26) login.php, (27) modify_ban_list.php, (28) modify_vip_list.php, (29) move_messages.php, (30) process_add_board.php, (31) process_ban.php, (32) process_delete_ban.php, (33) process_delete_board.php, (34) process_delete_messages.php, (35) process_delete_vip.php, (36) process_edit_board.php, (37) process_lock_messages.php, (38) process_login.php, (39) process_move_messages.php, (40) process_sticky_messages.php, (41) proces
lock_messages.php, (38) process_login.php, (39) process_move_messages.php, (40) process_sticky_messages.php, (41) process_vip.php, and (42) sticky_messages.php in path/adminopts. NOTE: the include/common.php vector is covered by CVE-2006-2871. NOTE: some of these vectors might not be vulnerabilities under proper installation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44474 - http://www.securityfocus.com/bid/30688 - http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt - http://www.attrition.org/pipermail/vim/2008-August/002052.html
CVE ID: CVE-2008-3708 State: PUBLISHED Published: 2008-08-19T19:10:00 Last Updated: 2024-08-07T09:45:19.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) news/index.dot and (2) getting_started/macros/macros_detail.dot. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31516 - http://securityreason.com/securityalert/4163 - http://www.securityfocus.com/bid/30703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44491 - https://www.exploit-db.com/exploits/6247
CVE ID: CVE-2008-3709 State: PUBLISHED Published: 2008-08-19T19:10:00 Last Updated: 2024-08-07T09:53:00.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to inject arbitrary web script or HTML via the (1) lOptionsOptions, (2) lNavAdminOptions, or (3) lNavReturn parameter to options.php; or the (4) lNavReturn parameter to subscribe.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30688 - http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt - http://www.attrition.org/pipermail/vim/2008-August/002052.html - https:
urity.org/0808-exploits/cyboards-rfilfixss.txt - http://www.attrition.org/pipermail/vim/2008-August/002052.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44476
CVE ID: CVE-2008-3710 State: PUBLISHED Published: 2008-08-19T19:10:00 Last Updated: 2024-08-07T09:52:59.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) script_path parameter to (a) options.php and the (2) lang_code parameter to (b) copy_vip.php and (c) process_edit_board.php in adminopts/. NOTE: some of these vectors might not be vulnerabilities under proper installation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30688 - http://packetstorms
ional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30688 - http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt - http://www.attrition.org/pipermail/vim/2008-August/002052.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44475
CVE ID: CVE-2008-3711 State: PUBLISHED Published: 2008-08-19T19:10:00 Last Updated: 2024-08-07T09:52:59.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a browse action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44523 - http://www.securityfocus.com/bid/30714 - http://securityreason.com/securityalert/4167 - https://www.exploit-db.com/exploits/6255
CVE ID: CVE-2008-3712 State: PUBLISHED Published: 2008-08-19T19:10:00 Last Updated: 2024-08-07T09:53:00.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.2 and 4.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) query string to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php and the (2) mosConfig_sitename parameter to administrator/popups/index3pop.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44502 - ht
ner: References: - http://secunia.com/advisories/31528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44503 - http://www.securityfocus.com/archive/1/495507/100/0/threaded - http://www.securityfocus.com/bid/30708 - http://securityreason.com/securityalert/4164
CVE ID: CVE-2008-3713 State: PUBLISHED Published: 2008-08-19T19:10:00 Last Updated: 2024-08-07T09:53:00.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via the pro_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44524 - http://www.securityfocus.com/bid/30726 - https://www.exploit-db.com/exploits/6258 - http://securityreason.com/securityalert/4165 - http://www.vupen.com/english/advisories/2008/2414
CVE ID: CVE-2008-3714 State: PUBLISHED Published: 2008-08-19T19:10:00 Last Updated: 2024-08-07T09:52:59.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web script or HTML via the query_string, a different vulnerability than CVE-2006-3681 and CVE-2006-1945. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32939 - http://secunia.com/advisories/31519 - http://secunia.com/advisories/33002 - http://secunia.com/advisories/31759 - http://www.debian.org/security/2008/dsa-1679 - http://www.vupen.com/english/advisories/2008/2399
.com/advisories/31759 - http://www.debian.org/security/2008/dsa-1679 - http://www.vupen.com/english/advisories/2008/2399 - http://www.securitytracker.com/id?1020704 - http://sourceforge.net/tracker/index.php?func=detail&aid=2001151&group_id=13764&atid=113764 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44504 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:203 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00107.html - http://www.securityfocus.com/bid/30730 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00355.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495432 - http://awstats.sourceforge.net/docs/aws
tember/msg00355.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495432 - http://awstats.sourceforge.net/docs/awstats_changelog.txt - http://www.ubuntu.com/usn/usn-686-1
CVE ID: CVE-2008-3715 State: PUBLISHED Published: 2008-08-19T19:10:00 Last Updated: 2024-08-07T09:53:00.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in inc-core-admin-editor-previouscolorsjs.php in the FlexCMS 2.5 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the PreviousColorsString parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495508/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44521 - http://securityreason.com/securityalert/4166 - http://www.securityfocus.com/bid/30709 -
loud.com/vulnerabilities/44521 - http://securityreason.com/securityalert/4166 - http://www.securityfocus.com/bid/30709 - http://secunia.com/advisories/31532
CVE ID: CVE-2008-3716 State: PUBLISHED Published: 2008-08-19T19:10:00 Last Updated: 2024-08-07T09:52:59.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Harmoni before 1.6.0 allows remote attackers to make administrative modifications via a (1) save or (2) delete action to an unspecified component. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6427 - http://sourceforge.net/project/shownotes.php?release_id=619864 - http://www.securityfocus.com/bid/30706 - http://sourceforge.net/tracker/index.php?func=detail&aid=2040513&grou
=619864 - http://www.securityfocus.com/bid/30706 - http://sourceforge.net/tracker/index.php?func=detail&aid=2040513&group_id=82171&atid=1098812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44483 - http://secunia.com/advisories/31503
CVE ID: CVE-2008-3717 State: PUBLISHED Published: 2008-08-19T19:10:00 Last Updated: 2024-08-07T09:53:00.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=2040324&group_id=82171&atid=1098812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44485 - http://sourceforge.net/project/shownotes.php?release_id=619864 - http://www.securityfocus.com/bid/30706 - http://secunia.com/advisories/31503
CVE ID: CVE-2008-3718 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:52:59.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) id parameter to show_topic.php and the (2) user parameter to profile.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44526 - http://securityreason.com/securityalert/4168 - https://www.exploit-db.com/exploits/6260
CVE ID: CVE-2008-3719 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:52:59.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in SFS Affiliate Directory allows remote attackers to execute arbitrary SQL commands via the id parameter in a deadlink action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6270 - http://www.securityfocus.com/bid/30741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44536 - http://secunia.com/advisories/31537 - http://packetstorm.linuxsecurity.com/0808-exploits/affildir-sql.txt
CVE ID: CVE-2008-3720 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:52:59.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the id vector is already covered by CVE-2007-5679. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6250 - http://securityreason.com/securityalert/4169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44506 - http://www.vupen.com/english/advisories/2008/2411
CVE ID: CVE-2008-3721 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:53:00.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in user_language.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the language_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44505 - https://www.exploit-db.com/exploits/6250 - http://securityreason.com/securityalert/4169 - http://www.vupen.com/english/advisories/2008/2411
CVE ID: CVE-2008-3722 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:53:00.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the kat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44522 - http://www.securityfocus.com/bid/30712/exploit - http://www.securityfocus.com/bid/30712
CVE ID: CVE-2008-3723 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:52:59.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files via (1) a .. (dot dot), (2) a URL, or possibly (3) a full pathname in the id parameter in an admin.templates.edittemplate action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0808-exploits/phpizabi-traverse.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/445
//packetstormsecurity.org/0808-exploits/phpizabi-traverse.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44509 - http://www.securityfocus.com/bid/30707 - http://secunia.com/advisories/31533 - http://lostmon.blogspot.com/2008/08/phpizabi-v0848b-traversal-file-access.html
CVE ID: CVE-2008-3724 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:53:00.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the suchanzahl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44516 - http://www.papoo.de/cms-news-und-infos/security/patch1-10808.html - http://holisticinfosec.org/content/view/80/45/ - http://www.securityfocus.com/bid/30752 - http://www.osvdb.org/47554
CVE ID: CVE-2008-3725 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:52:59.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6271 - http://secunia.com/advisories/31491 - http://packetstorm.linuxsecurity.com/0808-exploits/adboard-sql.txt - http://www.securityfocus.com/bid/30742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44532
CVE ID: CVE-2008-3726 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:53:00.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to inject arbitrary web script or HTML via the URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44517 - http://securityreason.com/securityalert/4172 - http://www.securityfocus.com/bid/30700 - http://secunia.com/advisories/31534 - http://marc.info/?l=bugtraq&m=121881329424635&w=2 - http://www.oliverkarow.de/resea
ttp://secunia.com/advisories/31534 - http://marc.info/?l=bugtraq&m=121881329424635&w=2 - http://www.oliverkarow.de/research/mailscan.txt
CVE ID: CVE-2008-3727 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:53:00.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4172 - http://www.securityfocus.com/bid/30700 - http://secunia.com/advisories/31534 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44514 - http://marc.info/?l=bugtraq&m=121881329424635&w=2 - https://www.exploit-db.com/exploits
loud.com/vulnerabilities/44514 - http://marc.info/?l=bugtraq&m=121881329424635&w=2 - https://www.exploit-db.com/exploits/6407 - http://www.oliverkarow.de/research/mailscan.txt
CVE ID: CVE-2008-3728 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:53:00.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to determine the installation path, IP addresses, and error messages via direct requests to files under LOG/. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4172 - http://www.securityfocus.com/bid/30700 - http://secunia.com/advisories/31534 - http://marc.info/?l=bugtraq&m=121881329424
ttp://www.securityfocus.com/bid/30700 - http://secunia.com/advisories/31534 - http://marc.info/?l=bugtraq&m=121881329424635&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44518 - http://www.oliverkarow.de/research/mailscan.txt
CVE ID: CVE-2008-3729 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:53:00.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to bypass authentication and obtain administrative access via a direct request with (1) an IsAdmin=true cookie value or (2) no cookie. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4172 - http://www.securityfocus.com/bid/30700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44515 - http://marc.info/?l=bugtraq&m=121881329424635&w=2 - http://www.oliverkarow.de/rese
.ibmcloud.com/vulnerabilities/44515 - http://marc.info/?l=bugtraq&m=121881329424635&w=2 - http://www.oliverkarow.de/research/mailscan.txt
CVE ID: CVE-2008-3730 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:52:59.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Nordicwind Document Management System (NOAH) before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.nordicwind.ca/noah/bugs/inputval.html - http://www.securityfocus.com/bid/30747 - http://osvdb.org/47558 - http://secunia.com/advisories/31543 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44535
CVE ID: CVE-2008-3731 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:53:00.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Serv-U File Server 7.0.0.1, and other versions before 7.2.0.1, allows remote authenticated users to cause a denial of service (daemon crash) via an SSH session with SFTP commands for directory creation and logging. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44537 - http://www.serv-u.com/releasenotes/ - http://secunia.com/advisories/31461
CVE ID: CVE-2008-3732 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:53:00.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TTA file, which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14570 - https://www.exploit-db.com/exploits/
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14570 - https://www.exploit-db.com/exploits/6252 - http://www.securityfocus.com/bid/30718 - http://secunia.com/advisories/31512 - http://www.orange-bat.com/adv/2008/adv.08.16.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44510 - http://security.gentoo.org/glsa/glsa-200809-06.xml - http://securityreason.com/securityalert/4170 - http://www.vupen.com/english/advisories/2008/2394