Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1668 State: PUBLISHED Published: 2008-08-13T18:00:00 Last Updated: 2024-08-07T08:32:01.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd entry is available for a user, which allows remote attackers to gain privileges, as demonstrated by a login attempt for an LDAP account when nsswitch.conf does not specify LDAP for passwd information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020682 - http://www.vupen.com/
Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020682 - http://www.vupen.com/english/advisories/2008/2364 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01525562 - http://www.securityfocus.com/bid/30666 - http://www.openwall.com/lists/oss-security/2008/08/20/4 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44414 - http://secunia.com/advisories/31471 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01525562
CVE ID: CVE-2008-1669 State: PUBLISHED Published: 2008-05-08T00:00:00 Last Updated: 2024-08-07T08:32:01.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30276 - http://secunia.com/advisories/30962 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html - http://www.securityfocus.com/archive/1/491740/100/0/threaded - http://
pensuse-security-announce/2008-07/msg00012.html - http://www.securityfocus.com/archive/1/491740/100/0/threaded - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2 - https://issues.rpath.com/browse/RPL-2518 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html - http://www.redhat.com/support/errata/RHSA-2008-0237.html - http://www.vupen.com/english/advisories/2008/1451/references - http://www.vupen.com/english/advisories/2008/1452/references - http://www.mandriva.com/security/advisories?name=MDVSA-2008:167 - http://www.ubuntu.com/usn/usn-618-1 - http://secunia.com/advisories/30982 - http://www.securityfocus.com/bid/29076 - http://secunia.com/advisories/3011
18-1 - http://secunia.com/advisories/30982 - http://www.securityfocus.com/bid/29076 - http://secunia.com/advisories/30116 - http://www.redhat.com/support/errata/RHSA-2008-0233.html - http://secunia.com/advisories/30110 - http://www.debian.org/security/2008/dsa-1575 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10065 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html - http://www.vupen.com/english/advisories/2008/2222/references - http://secunia.com/advisories/30515 - https://usn.ubuntu.com/614-1/ - http://www.securitytracker.com/id?1019974 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:105 - http://secuni
p://www.securitytracker.com/id?1019974 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:105 - http://secunia.com/advisories/30101 - http://secunia.com/advisories/30164 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0162 - http://secunia.com/advisories/30108 - http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4 - http://secunia.com/advisories/30252 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00357.html - http://www.redhat.com/support/errata/RHSA-2008-0211.html - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html - http://secunia.com/advisories/30769 - http://secunia.com/advisories/30077 - http://lists.vmware.com/
May/msg00294.html - http://secunia.com/advisories/30769 - http://secunia.com/advisories/30077 - http://lists.vmware.com/pipermail/security-announce/2008/000023.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42242 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:104 - http://secunia.com/advisories/30260 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html - http://secunia.com/advisories/31246 - http://secunia.com/advisories/30818 - http://secunia.com/advisories/30112 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
CVE ID: CVE-2008-1670 State: PUBLISHED Published: 2008-04-28T17:00:00 Last Updated: 2024-08-07T08:32:01.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1371/references - http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html - http://www.securityfocus.com/bid/28937 - https://exchange.xforce.ibmcloud.com/vulnerabi
announce/2008-05/msg00000.html - http://www.securityfocus.com/bid/28937 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42038 - http://www.securitytracker.com/id?1019929 - http://www.kde.org/info/security/advisory-20080426-1.txt - http://secunia.com/advisories/29980
CVE ID: CVE-2008-1671 State: PUBLISHED Published: 2008-04-28T17:00:00 Last Updated: 2024-08-07T08:32:00.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: start_kdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service and possibly execute arbitrary code via "user-influenceable input" (probably command-line arguments) that cause start_kdeinit to send SIGUSR1 signals to other processes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30113 - ftp://ftp.kde.org/pub/kde/security_patches/post-kde-3.5.5-kinit.diff - http://security.gentoo.org/glsa/glsa-200804-30.xml - http://lists.open
/kde/security_patches/post-kde-3.5.5-kinit.diff - http://security.gentoo.org/glsa/glsa-200804-30.xml - http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html - http://www.securitytracker.com/id?1019924 - http://secunia.com/advisories/29977 - http://www.ubuntu.com/usn/usn-608-1 - http://secunia.com/advisories/29951 - http://www.vupen.com/english/advisories/2008/1370/references - http://www.securityfocus.com/bid/28938 - http://www.kde.org/info/security/advisory-20080426-2.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2008:097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42039
CVE ID: CVE-2008-1672 State: PUBLISHED Published: 2008-05-29T16:00:00 Last Updated: 2024-08-07T08:32:01.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses "particular cipher suites," which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004 - http://secunia.com/advisories/30852 - https://www.redhat.com/archives/fedora-p
rity&y=2008&m=slackware-security.562004 - http://secunia.com/advisories/30852 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42667 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400 - http://secunia.com/advisories/30460 - http://secunia.com/advisories/30825 - http://www.vupen.com/english/advisories/2008/1680 - http://www.securityfocus.com/archive/1/492932/100/0/threaded - http://www.ubuntu.com/usn/usn-620-1 - http://secunia.com/advisories/30868 - http://www.openssl.org/news/secadv_20080528.txt - http://security.gentoo.org/glsa/glsa-200806-08.xml - http://sourceforge.net/project/shownotes.
ews/secadv_20080528.txt - http://security.gentoo.org/glsa/glsa-200806-08.xml - http://sourceforge.net/project/shownotes.php?release_id=615606 - http://secunia.com/advisories/31288 - http://secunia.com/advisories/30405 - http://www.securityfocus.com/bid/29405 - http://www.securitytracker.com/id?1020122 - http://www.vupen.com/english/advisories/2008/1937/references - http://secunia.com/advisories/31228 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:107 - http://www.kb.cert.org/vuls/id/520586
CVE ID: CVE-2008-1673 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T08:32:01.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for
unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html - http://secunia.com/advisories/30000 - http://secunia.com/advisories/30658 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0189 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html - http://www.securityfocus.com/bid/29589 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ddb2c43594f22843e9f3153da151deaba1a834c5 - http://lists.opensuse.org/opensuse-security-
lds/linux-2.6.git%3Ba=commit%3Bh=ddb2c43594f22843e9f3153da151deaba1a834c5 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00587.html - http://secunia.com/advisories/32104 - http://secunia.com/advisories/30982 - http://secunia.com/advisories/30580 - http://www.securityfocus.com/archive/1/493300/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42921 - http://secunia.com/advisories/30644 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html - http://secunia.com/advisories/32103
30644 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html - http://secunia.com/advisories/32103 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:113 - http://www.securitytracker.com/id?1020210 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:174 - http://secunia.com/advisories/32759 - http://www.vupen.com/english/advisories/2008/1770 - http://secunia.com/advisories/31107 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5 - http://secunia.com/advisories/32370 - http://secunia.com/advisories/31836 - http://www.ubuntu.com/usn/usn-625-1 - https://bugzilla.redhat.com/show_bug.cgi?id=443962 - http://www.debian.org/security/2008/dsa-1592
u.com/usn/usn-625-1 - https://bugzilla.redhat.com/show_bug.cgi?id=443962 - http://www.debian.org/security/2008/dsa-1592 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c - http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6
CVE ID: CVE-2008-1674 State: REJECTED Published: 2009-03-26T10:00:00Z Last Updated: 2024-09-16T18:07:59.364Z Description: No description available.
CVE ID: CVE-2008-1675 State: PUBLISHED Published: 2008-05-02T16:00:00 Last Updated: 2024-08-07T08:32:01.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1406/references - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:167 - https:
wiki.rpath.com/wiki/Advisories:rPSA-2008-0157 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:167 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html - http://www.securityfocus.com/archive/1/491732/100/0/threaded - http://secunia.com/advisories/30515 - http://www.securityfocus.com/archive/1/491566/100/0/threaded - https://usn.ubuntu.com/614-1/ - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1 - http://secunia.com/advisories/30044 - http://www.securitytracker.com/id?1019960 - http://secunia.com/advisories/30017 - https://issues.rpath.com/browse/RPL-2501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42132 - http://marc.info/?l=
s://issues.rpath.com/browse/RPL-2501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42132 - http://marc.info/?l=linux-kernel&m=120949204619718&w=2 - http://marc.info/?l=linux-kernel&m=120949582428998&w=2 - http://www.securityfocus.com/bid/29014 - http://secunia.com/advisories/30260 - http://marc.info/?l=linux-kernel&m=120949204519706&w=2 - http://wiki.rpath.com/Advisories:rPSA-2008-0157 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:109
CVE ID: CVE-2008-1676 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T08:32:01.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server or RHCS) 7.1 through 7.3, and Netscape Certificate Management System 6.x, does not recognize Certificate Authority profile constraints on Extensions, which might allow remote attackers to bypass intended restrictions and conduct man-in-the-middle attacks by submitting a certificate signing request (CSR) and using the resulting certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.co
the resulting certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43573 - http://rhn.redhat.com/errata/RHSA-2008-0500.html - http://www.securitytracker.com/id?1020427 - http://rhn.redhat.com/errata/RHSA-2008-0577.html - http://secunia.com/advisories/30929 - https://bugzilla.redhat.com/show_bug.cgi?id=445227
CVE ID: CVE-2008-1677 State: PUBLISHED Published: 2008-05-12T16:00:00 Last Updated: 2024-08-07T08:32:01.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29126 - http://www.securitytracker.com/id?1020001 - http://www.redhat.com/support/errata/RHSA-2008-0268.html - https://bugzilla.redhat
/www.securitytracker.com/id?1020001 - http://www.redhat.com/support/errata/RHSA-2008-0268.html - https://bugzilla.redhat.com/show_bug.cgi?id=444712 - http://secunia.com/advisories/30185 - http://secunia.com/advisories/30181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42332 - http://www.redhat.com/support/errata/RHSA-2008-0269.html
CVE ID: CVE-2008-1678 State: PUBLISHED Published: 2008-07-10T17:00:00 Last Updated: 2024-08-07T08:32:01.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-1075.html - http://secunia.com/advisories/42724 - http://secunia.com/advisories/34219 - htt
com/support/errata/RHSA-2009-1075.html - http://secunia.com/advisories/42724 - http://secunia.com/advisories/34219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43948 - https://bugzilla.redhat.com/show_bug.cgi?id=447268 - http://secunia.com/advisories/31026 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049 - http://www.securityfocus.com/bid/31692 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9754 - http://www.securityfocus.com/bid/31681 - https://issues.apache.org/bugzilla/show_bug.cgi?id=44975 - http://secunia.com/a
http://www.securityfocus.com/bid/31681 - https://issues.apache.org/bugzilla/show_bug.cgi?id=44975 - http://secunia.com/advisories/38761 - http://secunia.com/advisories/31416 - http://secunia.com/advisories/44183 - http://www.ubuntu.com/usn/USN-731-1 - http://bugs.gentoo.org/show_bug.cgi?id=222643 - http://secunia.com/advisories/32222 - http://secunia.com/advisories/35264 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:124 - http://svn.apache.org/viewvc?view=rev&revision=654119 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00055.html - http://security.gentoo.org/glsa/glsa-200807-06.xml - https://bugs.edge.launchpad.net/bugs/224945 - http://www.vupen.co
- http://security.gentoo.org/glsa/glsa-200807-06.xml - https://bugs.edge.launchpad.net/bugs/224945 - http://www.vupen.com/english/advisories/2008/2780 - https://bugs.edge.launchpad.net/bugs/186339 - https://kb.bluecoat.com/index?page=content&id=SA50 - http://securityreason.com/securityalert/3981 - http://marc.info/?l=openssl-dev&m=121060672602371&w=2 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://secunia.com/advisories/42733
CVE ID: CVE-2008-1679 State: PUBLISHED Published: 2008-04-21T20:00:00 Last Updated: 2024-08-07T08:32:01.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows. NOTE: this issue is due to an incomplete fix for CVE-2007-4965. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://security.gentoo.org/glsa/glsa-200807-01.xml - http://secunia.com/advisories/30872 - http
/2008-08/msg00006.html - http://security.gentoo.org/glsa/glsa-200807-01.xml - http://secunia.com/advisories/30872 - http://secunia.com/advisories/38675 - http://secunia.com/advisories/33937 - http://secunia.com/advisories/29955 - https://issues.rpath.com/browse/RPL-2424 - http://secunia.com/advisories/31687 - http://www.debian.org/security/2008/dsa-1551 - http://support.apple.com/kb/HT3438 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10583 - http://bugs.python.org/msg64682 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://secunia.com/advisories/31358 - https://oval.cisecurity.org/repository/search/definition/oval%3
eb/msg00000.html - http://secunia.com/advisories/31358 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7800 - http://www.ubuntu.com/usn/usn-632-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:164 - http://secunia.com/advisories/31518 - http://bugs.python.org/issue1179 - http://secunia.com/advisories/31365 - http://support.avaya.com/css/P8/documents/100074697 - http://secunia.com/advisories/31255 - http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900 - http://www.debian.org/security/2008/dsa-1620 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149 - http://www.mandriva.co
://www.debian.org/security/2008/dsa-1620 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41958 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 - http://secunia.com/advisories/29889
CVE ID: CVE-2008-1680 State: PUBLISHED Published: 2008-04-04T00:00:00 Last Updated: 2024-08-07T08:32:01.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenance/index.php, which reveals settings such as magic_quotes_gpc. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41745
CVE ID: CVE-2008-1681 State: PUBLISHED Published: 2008-04-04T19:00:00 Last Updated: 2024-08-07T08:32:01.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29647 - http://www.vupen.com/english/advisories/2008/1070/references - http://www.securityfocus.com/bid/28567 - http://publib.boulder.ibm.com/infocenter/cmgmt/v8r3m0/topic/com.ibm.cmgmtreadmefp.doc/aparlist.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/41585 - http://www-
/topic/com.ibm.cmgmtreadmefp.doc/aparlist.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/41585 - http://www-1.ibm.com/support/docview.wss?uid=swg27011946&aid=1 - http://www-1.ibm.com/support/docview.wss?uid=swg1IO07690
CVE ID: CVE-2008-1682 State: PUBLISHED Published: 2008-04-04T19:00:00 Last Updated: 2024-08-07T08:32:01.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in quiz/common/db_config.inc.php in the Online FlashQuiz (com_onlineflashquiz) 1.0.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5345 - http://www.securityfocus.com/bid/28574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41592
CVE ID: CVE-2008-1683 State: REJECTED Published: 2008-04-06T23:00:00 Last Updated: 2008-04-15T09:00:00 Description: No description available.
CVE ID: CVE-2008-1684 State: PUBLISHED Published: 2008-04-06T23:00:00 Last Updated: 2024-08-07T08:32:01.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41626 - http://secunia.com/advisories/29654 - http://securitytracker.com/id?1019781 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-233284-1 - https://oval.cisecurity.org/repository/sea