Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/100/0/threaded - http://www.securityfocus.com/bid/30467 - http://www.ocert.org/patches/exslt_crypt.patch - http://securityreason.com/securityalert/4078 - http://security.gentoo.org/glsa/glsa-200808-06.xml - http://secunia.com/advisories/31310 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:160 - http://www.ubuntu.com/usn/usn-633-1 - http://secunia.com/advisories/31331 - http://www.securityfocus.com/archive/1/497829/100/0/threaded - http://www.securityfocus.com/archive/1/495018/100/0/threaded - http://secunia.com/advisories/31230 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00118.html - http://www.vupen.com/english/advisories/2008/2266/references - h
ves/fedora-package-announce/2008-August/msg00118.html - http://www.vupen.com/english/advisories/2008/2266/references - http://www.securitytracker.com/id?1020596 - http://www.debian.org/security/2008/dsa-1624 - http://secunia.com/advisories/31395 - http://www.ocert.org/advisories/ocert-2008-009.html
CVE ID: CVE-2008-2936 State: PUBLISHED Published: 2008-08-18T19:00:00 Last Updated: 2024-08-07T09:21:34.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the operating system supports hard links to symlinks, allows local users to append e-mail messages to a file to which a root-owned symlink points, by creating a hard link to this symlink and then sending a message. NOTE: this can be leveraged to gain privileges if there is a symlink to an init script. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-October/ms
st Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00271.html - ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.3.15.HISTORY - http://secunia.com/advisories/32231 - http://secunia.com/advisories/31469 - ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.5.4.HISTORY - http://www.debian.org/security/2008/dsa-1629 - http://secunia.com/advisories/31530 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00287.html - https://issues.rpath.com/browse/RPL-2689 - http://www.securitytracker.com/id?1020700 - http://www.securityfocus.com/archive/1/495632/100/0/threaded - http://
689 - http://www.securitytracker.com/id?1020700 - http://www.securityfocus.com/archive/1/495632/100/0/threaded - http://www.kb.cert.org/vuls/id/938323 - http://article.gmane.org/gmane.mail.postfix.announce/110 - http://securityreason.com/securityalert/4160 - http://www.securityfocus.com/bid/30691 - http://wiki.rpath.com/Advisories:rPSA-2008-0259 - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00002.html - http://secunia.com/advisories/31474 - http://www.securityfocus.com/archive/1/495882/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44460 - ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.4.8.HISTORY - https://www.exploit-db.com/exp
/44460 - ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.4.8.HISTORY - https://www.exploit-db.com/exploits/6337 - http://www.redhat.com/support/errata/RHSA-2008-0839.html - ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-2.6-20080814.HISTORY - http://secunia.com/advisories/31500 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10033 - http://secunia.com/advisories/31477 - http://secunia.com/advisories/31485 - https://usn.ubuntu.com/636-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2008:171 - http://www.securityfocus.com/archive/1/495474/100/0/threaded - http://www.vupen.com/english/advisories/2008/2
2008:171 - http://www.securityfocus.com/archive/1/495474/100/0/threaded - http://www.vupen.com/english/advisories/2008/2385 - http://security.gentoo.org/glsa/glsa-200808-12.xml
CVE ID: CVE-2008-2937 State: PUBLISHED Published: 2008-08-18T19:00:00 Last Updated: 2024-08-07T09:21:34.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Postfix 2.5 before 2.5.4 and 2.6 before 2.6-20080814 delivers to a mailbox file even when this file is not owned by the recipient, which allows local users to read e-mail messages by creating a mailbox file corresponding to another user's account name. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00271.html - http://secunia.com/advisories/32231 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:224 - ftp://ftp.porcupine.org/m
cunia.com/advisories/32231 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:224 - ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.5.4.HISTORY - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00287.html - https://issues.rpath.com/browse/RPL-2689 - http://www.securityfocus.com/archive/1/495632/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44461 - http://www.securityfocus.com/bid/30691 - http://wiki.rpath.com/Advisories:rPSA-2008-0259 - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00002.html - http://www.redhat.com/support/errata/RHSA-2011-0422.html - http://kb.juniper.net/InfoCenter/index?page=c
msg00002.html - http://www.redhat.com/support/errata/RHSA-2011-0422.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-2.6-20080814.HISTORY - http://secunia.com/advisories/31500 - http://secunia.com/advisories/31477 - http://secunia.com/advisories/31485 - http://www.vupen.com/english/advisories/2008/2385 - http://security.gentoo.org/glsa/glsa-200808-12.xml
CVE ID: CVE-2008-2938 State: PUBLISHED Published: 2008-08-13T00:00:00 Last Updated: 2024-08-07T09:21:34.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/securi
last affected version. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://secunia.com/advisories/37297 - http://www.redhat.com/support/errata/RHSA-2008-0862.html - http://www.vupen.com/english/advisories/2008/2823 - http://secunia.com/advisories/31982 - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/32120 - http://www.kb.cert.org/vuls/id/343355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44411 - http://secunia.com/advisories/31865 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html - http://secunia.com/advisories/31639 - http://lists.opensuse.org/opensuse-sec
age-announce/2008-September/msg00889.html - http://secunia.com/advisories/31639 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10587 - http://www.securitytracker.com/id?1020665 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:188 - http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm - http://www.vupen.com/english/advisories/2009/0320 - http://www.redhat.com/support/errata/RHSA-2008-0864.html - http://www.vupen.com/english/advisories/2008/2343 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - https://www.exploit-db.com/exploi
08/2343 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - https://www.exploit-db.com/exploits/6229 - http://tomcat.apache.org/security-6.html - http://www.securityfocus.com/bid/30633 - http://www.securityfocus.com/archive/1/507729/100/0/threaded - http://secunia.com/advisories/32222 - http://secunia.com/advisories/31891 - http://secunia.com/advisories/33797 - http://securityreason.com/securityalert/4148 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html - http://www.securityfocus.com/archive/1/495318/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html - http://tomcat.apache.org/
eaded - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html - http://tomcat.apache.org/security-5.html - http://www.vupen.com/english/advisories/2008/2780 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://secunia.com/advisories/32266 - http://www.redhat.com/support/errata/RHSA-2008-0648.html - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E -
//lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2008-2939 State: PUBLISHED Published: 2008-08-06T18:00:00 Last Updated: 2024-08-07T09:21:34.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc?view=rev&revision=682868 - http://secunia.com/advisories/34219 - http://marc.info/?l=bugtraq&
tp://svn.apache.org/viewvc?view=rev&revision=682868 - http://secunia.com/advisories/34219 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://support.apple.com/kb/HT3549 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-247666-1 - http://secunia.com/advisories/32838 - http://www.securityfocus.com/archive/1/498567/100/0/threaded - http://www.rapid7.com/advisories/R7-0033 - http://secunia.com/advisories/35074 - http://rhn.redhat.com/errata/RHSA-2008-0967.html - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://www.securityfocus.com/bid/30560 - http://secunia.com/advisories/32685 - http://lis
ugtraq&m=125631037611762&w=2 - http://www.securityfocus.com/bid/30560 - http://secunia.com/advisories/32685 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.ubuntu.com/usn/USN-731-1 - http://secunia.com/advisories/31673 - http://www.vupen.com/english/advisories/2009/0320 - http://www.securityfocus.com/archive/1/495180/100/0/threaded - http://www-1.ibm.com/support/docview.wss?uid=swg1PK70197 - http://www.redhat.com/support/errata/RHSA-2008-0966.html - http://secunia.com/advisories/33156 - http://secunia.com/advisories/33797 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11316 - http://www.vupen.com/english/adviso
al.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11316 - http://www.vupen.com/english/advisories/2008/2461 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:194 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK70937 - http://secunia.com/advisories/31384 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.securitytracker.com/id?1020635 - http://www.vupen.com/english/advisories/2009/1297 - http://svn.apache.org/viewvc?view=rev&revision=682871 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:124 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://wiki.rpath.com/Advisories:rPSA-2008-0327 - http://www.kb.cert.org/vu
marc.info/?l=bugtraq&m=123376588623823&w=2 - http://wiki.rpath.com/Advisories:rPSA-2008-0327 - http://www.kb.cert.org/vuls/id/663763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44223 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:195 - http://www.securityfocus.com/archive/1/498566/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7716 - http://www.vupen.com/english/advisories/2008/2315 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://svn.apache.org/viewvc?view=rev&revision=682870 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0328 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d
ttp://wiki.rpath.com/wiki/Advisories:rPSA-2008-0328 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache
hread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%4
s.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae9
5bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3
tps://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2008-2940 State: PUBLISHED Published: 2008-08-14T20:00:00 Last Updated: 2024-08-07T09:21:34.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44441 - http://www.securityfocus.com/bid/30683 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%
http://www.securityfocus.com/bid/30683 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10136 - http://secunia.com/advisories/31470 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:169 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html - http://www.ubuntu.com/usn/USN-674-1 - http://www.ubuntu.com/usn/USN-674-2 - http://securitytracker.com/id?1020684 - http://secunia.com/advisories/32792 - http://secunia.com/advisories/31499 - https://bugzilla.redhat.com/show_bug.cgi?id=455235 - http://secunia.com/advisories/32316 - http://www.redhat.com/support/errata/RHSA-2008-0818.html
CVE ID: CVE-2008-2941 State: PUBLISHED Published: 2008-08-14T20:00:00 Last Updated: 2024-08-07T09:21:34.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process stop) via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44440 - http://secunia.com/advisories/31470 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:169 - http://lists.opensuse.org/opensuse-secu
sories/31470 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:169 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10636 - http://www.ubuntu.com/usn/USN-674-1 - http://securitytracker.com/id?1020683 - http://www.ubuntu.com/usn/USN-674-2 - https://bugzilla.redhat.com/show_bug.cgi?id=457052 - http://secunia.com/advisories/32792 - http://secunia.com/advisories/31499 - http://secunia.com/advisories/32316 - http://www.redhat.com/support/errata/RHSA-2008-0818.html
CVE ID: CVE-2008-2942 State: PUBLISHED Published: 2008-06-30T20:00:00 Last Updated: 2024-08-07T09:21:34.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file. Additional Analyst Notes: - CVE Program Container: References: - http://www.selenic.com/hg/rev/87c704ac92d4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43551 - http://www.securityfocus.com/bid/30072 - https://issues.rpath.com/browse/RPL-2633 - http://www.openwall.com/lists/oss-security/2008/06/30/1 - http://lists.opensuse.org/opensuse-security-announc
RPL-2633 - http://www.openwall.com/lists/oss-security/2008/06/30/1 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html - http://wiki.rpath.com/Advisories:rPSA-2008-0211 - http://www.securityfocus.com/archive/1/493881/100/0/threaded - http://security.gentoo.org/glsa/glsa-200807-09.xml - http://www.openwall.com/lists/oss-security/2008/07/01/1 - http://secunia.com/advisories/31110 - http://secunia.com/advisories/31167 - http://secunia.com/advisories/31108
CVE ID: CVE-2008-2943 State: PUBLISHED Published: 2008-06-30T21:00:00 Last Updated: 2024-08-07T09:21:34.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service (ABEND) and possibly execute arbitrary code by using ldapadd to attempt to create a duplicate ibm-globalAdminGroup LDAP database entry. NOTE: the vendor states "There is no real risk of a vulnerability," although there are likely scenarios in which a user is allowed to make administrative LDAP requests but does not have the privileges to stop the server. Additional Anal
ser is allowed to make administrative LDAP requests but does not have the privileges to stop the server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43465 - http://www.vupen.com/english/advisories/2008/1970 - http://www-1.ibm.com/support/docview.wss?uid=swg1IO09113 - http://www.securityfocus.com/bid/30010 - http://secunia.com/advisories/30786
CVE ID: CVE-2008-2944 State: PUBLISHED Published: 2008-06-30T21:00:00 Last Updated: 2024-08-07T09:21:34.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core 6 (FC6) allows local users to cause a denial of service (oops), as demonstrated by a crash when running the GNU GDB testsuite, a different vulnerability than CVE-2008-2365. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43556 - https://bugzilla.redhat.com/show_bug.cgi?id=449359 - https://bugzilla.redhat.com/show_bug.cgi?
m/vulnerabilities/43556 - https://bugzilla.redhat.com/show_bug.cgi?id=449359 - https://bugzilla.redhat.com/show_bug.cgi?id=207002
CVE ID: CVE-2008-2945 State: PUBLISHED Published: 2008-06-30T22:00:00 Last Updated: 2024-08-07T09:21:34.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715, CVE-2007-3716, and CVE-2007-4289. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-201538-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43429 - htt
lve.sun.com/search/document.do?assetkey=1-26-201538-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43429 - http://support.avaya.com/elmodocs2/security/ASA-2008-294.htm - http://www.securitytracker.com/id?1020380 - http://www.securityfocus.com/bid/29988 - http://www.vupen.com/english/advisories/2008/1967/references - http://secunia.com/advisories/30893
CVE ID: CVE-2008-2946 State: PUBLISHED Published: 2008-06-30T22:00:00 Last Updated: 2024-08-07T09:21:34.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP-DMI mapper subagent daemon (aka snmpXdmid) in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a denial of service (daemon crash) via malformed packets. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-237985-1 - http://www.securityfocus.com/bid/29965 - http://secunia.com/advisories/30863 - http://www.securitytracker.com/id?1020381 - http://www.vupen.com/english/advisories/2008/1965/references