Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2123 State: PUBLISHED Published: 2008-05-09T18:00:00 Last Updated: 2024-08-07T08:49:57.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20 allows remote attackers to inject arbitrary web script or HTML via (1) a "<>" sequence in the ~service parameter to wgate.dll, or (2) Javascript splicing in the query string, a different vector than CVE-2006-5114. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30128 - http://www.securityfocus.com/bid/29103 - http://www.vupen.com/english/advisories/2008/1466/references - http://www.secu
http://www.securityfocus.com/bid/29103 - http://www.vupen.com/english/advisories/2008/1466/references - http://www.securitytracker.com/id?1019998 - http://www.portcullis-security.com/275.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/42281
CVE ID: CVE-2008-2124 State: PUBLISHED Published: 2008-05-09T18:00:00 Last Updated: 2024-08-07T08:49:58.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42257 - http://secunia.com/advisories/30103 - http://www.securityfocus.com/bid/29095 - https://www.exploit-db.com/exploits/5553
CVE ID: CVE-2008-2125 State: PUBLISHED Published: 2008-05-09T18:00:00 Last Updated: 2024-08-07T08:49:58.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewalbums.php in Musicbox 2.3.6 and 2.3.7 allows remote attackers to execute arbitrary SQL commands via the artistId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29100 - https://www.exploit-db.com/exploits/5560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42259 - http://secunia.com/advisories/30107
CVE ID: CVE-2008-2126 State: PUBLISHED Published: 2008-05-09T18:00:00 Last Updated: 2024-08-07T08:49:58.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Tux CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) q parameter to index.php and the (2) returnURL parameter to tux-login.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/44917 - http://marc.info/?l=bugtraq&m=121019103418967&w=2 - http://secunia.com/advisories/30121 - http://www.securityfocus.com/bid/29090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42252
CVE ID: CVE-2008-2127 State: PUBLISHED Published: 2008-05-09T18:00:00 Last Updated: 2024-08-07T08:49:57.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or HTML via the what parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42258 - https://www.exploit-db.com/exploits/5558 - http://www.securityfocus.com/bid/29099
CVE ID: CVE-2008-2128 State: PUBLISHED Published: 2008-05-09T18:00:00 Last Updated: 2024-08-07T08:49:59.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in templates/header.php in CMS Faethon 2.2 Ultimate allows remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter, a different vulnerability than CVE-2006-5588 and CVE-2006-3185. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42376
CVE ID: CVE-2008-2129 State: PUBLISHED Published: 2008-05-09T18:00:00 Last Updated: 2024-08-07T08:49:58.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Galleristic 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5554 - http://www.securityfocus.com/bid/29096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42253 - http://secunia.com/advisories/30123
CVE ID: CVE-2008-2130 State: PUBLISHED Published: 2008-05-09T18:00:00 Last Updated: 2024-08-07T08:49:58.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in poll_vote.php in iGaming CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/29059.pl - http://www.securityfocus.com/bid/29059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42229
CVE ID: CVE-2008-2131 State: PUBLISHED Published: 2008-05-09T18:00:00 Last Updated: 2024-08-07T08:49:58.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the "quick reply button." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42241 - http://securityreason.com/securityalert/3862 - http://www.securityfocus.com/bid/29075 - http://www.securityfocus.com/archive/1/491713/100/0/threaded - http://secun
2 - http://www.securityfocus.com/bid/29075 - http://www.securityfocus.com/archive/1/491713/100/0/threaded - http://secunia.com/advisories/30091 - http://mvnforum.cvs.sourceforge.net/mvnforum/mvnforum/srcweb/mvnplugin/mvnforum/user/viewthread.jsp?r1=1.316&r2=1.317 - http://users.own-hero.net/~decoder/advisories/mvnforum-jsxss.txt
CVE ID: CVE-2008-2132 State: PUBLISHED Published: 2008-05-09T18:00:00 Last Updated: 2024-08-07T08:49:58.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in step1.asp in Systementor PostcardMentor allows remote attackers to execute arbitrary SQL commands via the cat_fldAuto parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5556 - http://www.securityfocus.com/bid/29094 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42256 - http://secunia.com/advisories/30127
CVE ID: CVE-2008-2133 State: PUBLISHED Published: 2008-05-09T18:00:00 Last Updated: 2024-08-07T08:49:58.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter in a new entry, as demonstrated by a CSS property in the STYLE attribute of a DIV element, a different vulnerability than CVE-2008-1873. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42238 - http://secunia.com/advisories/30061 - http://www.mrzayas.es/2008/05/04/multiples-vulnerabilidad
/vulnerabilities/42238 - http://secunia.com/advisories/30061 - http://www.mrzayas.es/2008/05/04/multiples-vulnerabilidades-en-nuket-3x/ - http://truzone.org/modules.php?name=Forums&file=viewtopic&t=55141 - http://www.securityfocus.com/bid/29080
CVE ID: CVE-2008-2134 State: PUBLISHED Published: 2008-05-09T18:00:00 Last Updated: 2024-08-07T08:49:58.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to obtain access to arbitrary user accounts, and alter or delete data, via a modified username in an unspecified cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30061 - http://www.mrzayas.es/2008/05/04/multiples-vulnerabilidades-en-nuket-3x/ - http://www.securityfocus.com/bid/29080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42239 - http://truzone.org/modules.php?name=Forums&file=viewtopic&p=3327
://exchange.xforce.ibmcloud.com/vulnerabilities/42239 - http://truzone.org/modules.php?name=Forums&file=viewtopic&p=332746
CVE ID: CVE-2008-2135 State: PUBLISHED Published: 2008-05-09T18:00:00 Last Updated: 2024-08-07T08:49:58.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) contentname parameter to showdetails.php and the (2) article parameter to printer.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/491813/100/0/threaded - http://securityreason.com/securityalert/3865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42260 - https://www.exploit-db.com/exploits/5559 - http://www.securityfocus
exchange.xforce.ibmcloud.com/vulnerabilities/42260 - https://www.exploit-db.com/exploits/5559 - http://www.securityfocus.com/bid/29098
CVE ID: CVE-2008-2136 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:49:58.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020118 - http://secunia.com/advisories/30276 - http://secunia.com/
ner: References: - http://www.securitytracker.com/id?1020118 - http://secunia.com/advisories/30276 - http://secunia.com/advisories/30962 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169 - http://secunia.com/advisories/31198 - http://secunia.com/advisories/30368 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:167 - http://secunia.com/advisories/31341 - http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3 - http://www.vupen.com/english/advisories/2008/1716/references - http://www.redhat.com/support/errata/RHSA-2008-0607.html - http://secuni
n.com/english/advisories/2008/1716/references - http://www.redhat.com/support/errata/RHSA-2008-0607.html - http://secunia.com/advisories/30499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42451 - http://secunia.com/advisories/30198 - http://www.debian.org/security/2008/dsa-1588 - http://secunia.com/advisories/33280 - http://secunia.com/advisories/31689 - http://www.securityfocus.com/bid/29235 - http://www.redhat.com/support/errata/RHSA-2008-0585.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6503 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11038 - http://marc.info/?l=linux-netdev&m=121031533
rity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11038 - http://marc.info/?l=linux-netdev&m=121031533024912&w=2 - http://secunia.com/advisories/30241 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:174 - http://secunia.com/advisories/31107 - http://www.redhat.com/support/errata/RHSA-2008-0973.html - http://support.avaya.com/elmodocs2/security/ASA-2008-362.htm - http://www.redhat.com/support/errata/RHSA-2008-0612.html - http://secunia.com/advisories/31628 - http://www.ubuntu.com/usn/usn-625-1 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html - http://www.redhat.com/support/errata/RHSA-2008-0787.html - http://www.vupen.com/english
nnounce/2008-May/msg00294.html - http://www.redhat.com/support/errata/RHSA-2008-0787.html - http://www.vupen.com/english/advisories/2008/1543/references - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html - http://secunia.com/advisories/30818 - http://secunia.com/advisories/33201 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
CVE ID: CVE-2008-2137 State: PUBLISHED Published: 2008-05-29T16:00:00 Last Updated: 2024-08-07T08:49:58.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42681 - http://secunia.com
: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42681 - http://secunia.com/advisories/30368 - http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3 - http://www.vupen.com/english/advisories/2008/1716/references - http://www.securitytracker.com/id?1020119 - http://secunia.com/advisories/30499 - http://www.debian.org/security/2008/dsa-1588 - http://www.securityfocus.com/bid/29397 - http://secunia.com/advisories/31107 - http://kerneltrap.org/mailarchive/git-commits-head/2008/5/8/1760604 - http://www.ubuntu.com/usn/usn-625-1
CVE ID: CVE-2008-2138 State: PUBLISHED Published: 2008-05-12T16:00:00 Last Updated: 2024-08-07T08:49:58.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read the contents of /dav_portal/portal/ by sending a request containing a trailing "%0A" (encoded line feed), then using the session ID that is generated from that request. NOTE: as of 20080512, Oracle has not commented on the accuracy of this report. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3867 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ainer: References: - http://securityreason.com/securityalert/3867 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42302 - http://www.securityfocus.com/archive/1/491865/100/0/threaded - http://www.securitytracker.com/id?1020034 - http://secunia.com/advisories/30140 - http://www.securityfocus.com/bid/29119
CVE ID: CVE-2008-2139 State: PUBLISHED Published: 2008-05-12T17:00:00 Last Updated: 2024-08-07T08:49:58.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42394 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148 - https://exchange.xforce.ibmcloud.com/v
om/vulnerabilities/42394 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42393
CVE ID: CVE-2008-2140 State: PUBLISHED Published: 2008-05-12T17:00:00 Last Updated: 2024-08-07T08:49:58.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42393
CVE ID: CVE-2008-2142 State: PUBLISHED Published: 2008-05-12T19:00:00 Last Updated: 2024-08-07T08:49:58.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00782.html - https://issues.rpath.com/browse/RPL-2529 - http://www.vupen.com/english/advisories/2008/1539/references - http://www.securityfocus.com/archive/1/492657/100/0/threaded - http://secu
com/english/advisories/2008/1539/references - http://www.securityfocus.com/archive/1/492657/100/0/threaded - http://secunia.com/advisories/30827 - http://www.securitytracker.com/id?1020019 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html - http://secunia.com/advisories/30199 - https://bugs.gentoo.org/show_bug.cgi?id=221197 - http://secunia.com/advisories/30303 - http://security.gentoo.org/glsa/glsa-200902-06.xml - http://secunia.com/advisories/30216 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:154 - http://www.securityfocus.com/bid/29176 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:153 - http://wiki.rpath.com/wiki/Advisories:rPSA-
id/29176 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:153 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0177 - http://secunia.com/advisories/34004 - http://lists.gnu.org/archive/html/emacs-devel/2008-05/msg00645.html - http://thread.gmane.org/gmane.emacs.devel/96903 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00736.html - http://tracker.xemacs.org/XEmacs/its/issue378 - http://www.vupen.com/english/advisories/2008/1540/references - http://secunia.com/advisories/30581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42362
CVE ID: CVE-2008-2143 State: PUBLISHED Published: 2008-05-12T19:00:00 Last Updated: 2024-08-07T08:49:58.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified versions of Microsoft Outlook Web Access (OWA) use the Cache-Control: no-cache HTTP directive instead of no-store, which might cause web browsers that follow RFC-2616 to cache sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29121 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42301 - http://www.kb.cert.org/vuls/id/829876
CVE ID: CVE-2008-2144 State: PUBLISHED Published: 2008-05-12T19:00:00 Last Updated: 2024-08-07T08:49:57.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to cause a denial of service or execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1473/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42322 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-236884-1 - http://secunia.com/advisories/30473 - http://www.securitytracker.com/id?1020003 - htt
cument.do?assetkey=1-26-236884-1 - http://secunia.com/advisories/30473 - http://www.securitytracker.com/id?1020003 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5269 - http://secunia.com/advisories/30184 - http://www.securityfocus.com/bid/29135 - http://www.vupen.com/english/advisories/2008/1709/references - http://support.avaya.com/elmodocs2/security/ASA-2008-216.htm
CVE ID: CVE-2008-2145 State: PUBLISHED Published: 2008-05-12T19:00:00 Last Updated: 2024-08-07T08:49:58.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long username in the "forgotten password" dialog. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1503 - http://www.securityfocus.com/bid/29109 - http://securityreason.com/securityalert/3868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42359 - http://www.securityfocus.com/archive/1/491814/100/0/
3868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42359 - http://www.securityfocus.com/archive/1/491814/100/0/threaded - http://secunia.com/advisories/30126 - http://www.securitytracker.com/id?1020020
CVE ID: CVE-2008-2146 State: PUBLISHED Published: 2008-05-12T20:00:00 Last Updated: 2024-08-07T08:49:58.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remote attackers to bypass intended access restrictions for certain pages. Additional Analyst Notes: - CVE Program Container: References: - http://trac.wordpress.org/changeset?old_path=tags%2F2.2.2&old=6063&new_path=tags%2F2.2.3&new=6063#file10 - http://osvdb.org/45188 - http://trac.wordpress.org/ticket/4748 - http://trac.wordpress.org/changeset/6029 - https://exchange.xforce.ibmcloud.com/vulne
//trac.wordpress.org/ticket/4748 - http://trac.wordpress.org/changeset/6029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42379
CVE ID: CVE-2008-2147 State: PUBLISHED Published: 2008-05-12T20:00:00 Last Updated: 2024-08-07T08:49:58.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42377 - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=c7cef4fdd8dd72ce0a45be3cda8ba98df5e83181 - http://trac.videolan.org/vlc/ticket/1578 - http://security.ge
%3Ba=commit%3Bh=c7cef4fdd8dd72ce0a45be3cda8ba98df5e83181 - http://trac.videolan.org/vlc/ticket/1578 - http://security.gentoo.org/glsa/glsa-200807-13.xml
CVE ID: CVE-2008-2148 State: PUBLISHED Published: 2008-05-12T21:00:00 Last Updated: 2024-08-07T08:49:57.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The utimensat system call (sys_utimensat) in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIME_NOW and UTIME_OMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169 - http://git.kernel.org/?p=linux/kernel/git/stable/li
og-2.6.25.3 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f9dfda1ad0637a89a64d001cf81478bd8d9b6306 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42342 - http://secunia.com/advisories/30198 - http://www.redhat.com/support/errata/RHSA-2008-0585.html - http://secunia.com/advisories/30241 - http://secunia.com/advisories/31107 - http://secunia.com/advisories/31628 - http://www.ubuntu.com/usn/usn-625-1 - http://www.securityfocus.com/bid/29134 - http://www.vupen.com/english/advisories/2008/1543/references - http://lists.opensuse.org
w.securityfocus.com/bid/29134 - http://www.vupen.com/english/advisories/2008/1543/references - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html - http://secunia.com/advisories/30818