Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4210 State: PUBLISHED Published: 2008-09-29T17:00:00 Last Updated: 2024-08-07T10:08:34.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-
Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 - http://secunia.com/advisories/32485 - http://www.securityfocus.com/bid/31368 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=7b82dc0e64e93f430182f36b46b79fcee87d3532 - http://secunia.com/advisories/32237 - http://www.redhat.com/support/errata/RHSA-2008-0957.html - http://rhn.redhat.com/errata/RHSA-2008-0972.html - http://www.openwall.com/lists/oss-security/2008/09/24/8 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
ity-announce/2008-12/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6386 - http://secunia.com/advisories/33280 - http://www.debian.org/security/2008/dsa-1653 - http://www.openwall.com/lists/oss-security/2008/09/24/5 - http://secunia.com/advisories/32356 - http://secunia.com/advisories/32918 - http://www.ubuntu.com/usn/usn-679-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9511 - http://secunia.com/advisories/32759 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:220 - http://secunia.com/advisories/32344 - https://bugzilla.redhat.com/show_bug.cgi?id=463661 - http://bugzilla.kernel.
220 - http://secunia.com/advisories/32344 - https://bugzilla.redhat.com/show_bug.cgi?id=463661 - http://bugzilla.kernel.org/show_bug.cgi?id=8420 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 - http://www.redhat.com/support/errata/RHSA-2008-0973.html - http://www.redhat.com/support/errata/RHSA-2008-0787.html - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html - http://secunia.com/advisories/32799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45539 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://secunia.com/advisories/33201
CVE ID: CVE-2008-4211 State: PUBLISHED Published: 2008-10-10T10:00:00 Last Updated: 2024-08-07T10:08:34.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted Microsoft Excel file that triggers an out-of-bounds memory access, related to "handling of columns." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31681 - http://lists.apple.com/archives/secu
es: - CVE Program Container: References: - http://www.securityfocus.com/bid/31681 - http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45784 - http://www.vupen.com/english/advisories/2008/3232 - http://www.securityfocus.com/bid/31707 - http://secunia.com/advisories/32222 - http://www.securitytracker.com/id?1021027 - http://support.apple.com/kb/HT3318 - http://www.vupen.com/english/advisories/2008/2780 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://secunia.com/advisories/32756
CVE ID: CVE-2008-4212 State: PUBLISHED Published: 2008-10-10T10:00:00 Last Updated: 2024-08-07T10:08:34.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in rlogind in the rlogin component in Mac OS X 10.4.11 and 10.5.5 applies hosts.equiv entries to root despite what is stated in documentation, which might allow remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31681 - http://www.securityfocus.com/bid/31708 - http://www.securitytracker.com/id?1021028 - http://secunia.com/advisories/32222 - http://www.vupen.com/english/advisories/2008/2780 - https:/
acker.com/id?1021028 - http://secunia.com/advisories/32222 - http://www.vupen.com/english/advisories/2008/2780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45785 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216
CVE ID: CVE-2008-4214 State: PUBLISHED Published: 2008-10-10T10:00:00 Last Updated: 2024-08-07T10:08:35.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Script Editor in Mac OS X 10.4.11 and 10.5.5 allows local users to cause the scripting dictionary to be written to arbitrary locations, related to an "insecure file operation" on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45786 - http://secunia.com/advisories/32222 - http://www.securityfocus.com/bid/31716 - http://www.securitytracker.com/id?1021029 - http://www.vupen.
dvisories/32222 - http://www.securityfocus.com/bid/31716 - http://www.securitytracker.com/id?1021029 - http://www.vupen.com/english/advisories/2008/2780 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216
CVE ID: CVE-2008-4215 State: PUBLISHED Published: 2008-10-10T10:00:00 Last Updated: 2024-08-07T10:08:34.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Weblog in Mac OS X Server 10.4.11 does not properly check an error condition when a weblog posting access control list is specified for a user that has multiple short names, which might allow attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31681 - http://www.securityfocus.com/bid/31718 - http://secunia.com/advisories/32222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45787 - http://www.vupen.com/english/advisories/2008
sories/32222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45787 - http://www.vupen.com/english/advisories/2008/2780 - http://www.securitytracker.com/id?1021030 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216
CVE ID: CVE-2008-4216 State: PUBLISHED Published: 2008-11-17T18:00:00 Last Updated: 2024-08-07T10:08:34.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from accessing local URLs, which allows remote attackers to obtain sensitive information via vectors that "launch local files." Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html - http://www.securitytracker.com/id?1021227 - http://secunia.com/advisories/32706 - http://www.securityfocus.com/bid/32291 - http://support.apple.com/kb/HT3298
CVE ID: CVE-2008-4217 State: PUBLISHED Published: 2008-12-17T01:00:00 Last Updated: 2024-08-07T10:08:34.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in BOM in Apple Mac OS X before 10.5.6 allows remote attackers to execute arbitrary code via the headers in a crafted CPIO archive, leading to a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://www.securityfocus.com/bid/32876 - http://secunia.com/advisories/33179 - http://www.securitytracker.com/id?1021399 - http://www.securityfocus.com/bid/32839
http://secunia.com/advisories/33179 - http://www.securitytracker.com/id?1021399 - http://www.securityfocus.com/bid/32839 - http://support.apple.com/kb/HT3338 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html
CVE ID: CVE-2008-4218 State: PUBLISHED Published: 2008-12-17T01:00:00 Last Updated: 2024-08-07T10:08:34.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the kernel in Apple Mac OS X before 10.5.6 on Intel platforms allow local users to gain privileges via a crafted call to (1) i386_set_ldt or (2) i386_get_ldt. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32879 - http://www.vupen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://secunia.com/advisories/33179 - http://www.securityfocus.com/bid/32839 - http://support.apple.com/kb/HT3338 - http://www.sec
unia.com/advisories/33179 - http://www.securityfocus.com/bid/32839 - http://support.apple.com/kb/HT3338 - http://www.securitytracker.com/id?1021403 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html
CVE ID: CVE-2008-4219 State: PUBLISHED Published: 2008-12-17T01:00:00 Last Updated: 2024-08-07T10:08:34.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple Mac OS X before 10.5.6 allows local users to cause a denial of service (infinite loop and system halt) by running an application that is dynamically linked to libraries on an NFS server, related to occurrence of an exception in this application. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://secunia.com/advisories/33179 - http://www.securitytracker.com/id?1021404 - http://www.s
chalerts/TA08-350A.html - http://secunia.com/advisories/33179 - http://www.securitytracker.com/id?1021404 - http://www.securityfocus.com/bid/32839 - http://support.apple.com/kb/HT3338 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://www.securityfocus.com/bid/32873
CVE ID: CVE-2008-4220 State: PUBLISHED Published: 2008-12-17T01:00:00 Last Updated: 2024-08-07T10:08:34.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the inet_net_pton API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. NOTE: this may be related to the WLB-2008080064 advisory published by SecurityReason on 20080822; however, as of 20081216, there are insufficient details to be sure. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/
: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://secunia.com/advisories/33179 - http://www.securityfocus.com/bid/32839 - http://support.apple.com/kb/HT3338 - http://www.securityfocus.com/bid/32877 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://www.securitytracker.com/id?1021406
CVE ID: CVE-2008-4221 State: PUBLISHED Published: 2008-12-17T01:00:00 Last Updated: 2024-08-07T10:08:34.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: The strptime API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted date string, related to improper memory allocation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32881 - http://www.vupen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://secunia.com/advisories/33179 - http://www.securityfo
444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://secunia.com/advisories/33179 - http://www.securityfocus.com/bid/32839 - http://support.apple.com/kb/HT3338 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://www.securitytracker.com/id?1021406
CVE ID: CVE-2008-4222 State: PUBLISHED Published: 2008-12-17T01:00:00 Last Updated: 2024-08-07T10:08:34.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: natd in network_cmds in Apple Mac OS X before 10.5.6, when Internet Sharing is enabled, allows remote attackers to cause a denial of service (infinite loop) via a crafted TCP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://secunia.com/advisories/33179 - http://www.securitytracker.com/id?1021408 - http://www.securityfocus.com/bid/32839 - http://support.apple.com/kb/HT3338 - http://www.securi
tracker.com/id?1021408 - http://www.securityfocus.com/bid/32839 - http://support.apple.com/kb/HT3338 - http://www.securityfocus.com/bid/32874 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html
CVE ID: CVE-2008-4223 State: PUBLISHED Published: 2008-12-17T01:00:00 Last Updated: 2024-08-07T10:08:34.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Podcast Producer in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to bypass authentication and gain administrative access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://secunia.com/advisories/33179 - http://www.securitytracker.com/id?1021409 - http://www.securityfocus.com/bid/32839 - http://www.securityfocus.com/bid/32870 - http://support.apple.com/kb/HT3338 -
http://www.securityfocus.com/bid/32839 - http://www.securityfocus.com/bid/32870 - http://support.apple.com/kb/HT3338 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html
CVE ID: CVE-2008-4224 State: PUBLISHED Published: 2008-12-17T01:00:00 Last Updated: 2024-08-07T10:08:34.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: UDF in Apple Mac OS X before 10.5.6 allows user-assisted attackers to cause a denial of service (system crash) via a malformed UDF volume in a crafted ISO file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3444 - http://www.securityfocus.com/bid/32872 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://www.securitytracker.com/id?1021410 - http://secunia.com/advisories/33179 - http://www.securityfocus.com/bid/32839 - http://support.apple.com/kb/HT3338
410 - http://secunia.com/advisories/33179 - http://www.securityfocus.com/bid/32839 - http://support.apple.com/kb/HT3338 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html
CVE ID: CVE-2008-4225 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T10:08:35.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32766 - http://support.apple.com/kb/HT3639 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1 - http://secunia.com/advisories/32773 - http://www.vupen.com/english/advisories/2009/1621 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-12
/32773 - http://www.vupen.com/english/advisories/2009/1621 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00513.html - http://secunia.com/advisories/32807 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00472.html - http://secunia.com/advisories/32764 - http://www.vmware.com/security/advisories/VMSA-2009-0001.html - http://www.ubuntu.com/usn/usn-673-1 - http://www.vupen.com/english/advisories/2009/0301 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1002
glish/advisories/2009/0301 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10025 - http://secunia.com/advisories/33746 - http://securitytracker.com/id?1021239 - https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc9 - http://www.vupen.com/english/advisories/2009/0034 - http://secunia.com/advisories/34247 - http://support.avaya.com/elmodocs2/security/ASA-2009-067.htm - http://www.osvdb.org/49992 - http://secunia.com/advisories/36173 - http://www.vupen.com/english/advisories/2009/1522 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-251406-1 - http://security.gentoo.org/glsa/glsa-200812-06.xml - http://lists.apple.com/archives/security-an
ssetkey=1-26-251406-1 - http://security.gentoo.org/glsa/glsa-200812-06.xml - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://support.avaya.com/elmodocs2/security/ASA-2009-002.htm - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473974 - http://wiki.rpath.com/Advisories:rPSA-2008-0325 - http://www.debian.org/security/2008/dsa-1666 - http://secunia.com/advisories/32802 - http://secunia.com/advisories/35379 - http://secunia.com/advisories/32974 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6415 - http://secunia.com/advisories/33792 - http://secunia.com/advisories/36235 - http:
n/oval%3Aorg.mitre.oval%3Adef%3A6415 - http://secunia.com/advisories/33792 - http://secunia.com/advisories/36235 - http://secunia.com/advisories/32762 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1 - http://www.redhat.com/support/errata/RHSA-2008-0988.html - http://secunia.com/advisories/33417 - https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc10 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1 - https://bugzilla.redhat.com/show_bug.cgi?id=470480 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:231 - http://www.securityfocus.com/bid/32331 - http://support.apple.com/kb/HT3613 - http://www.vupen.com/english/advisories/2009/0323 - ht
ecurityfocus.com/bid/32331 - http://support.apple.com/kb/HT3613 - http://www.vupen.com/english/advisories/2009/0323 - http://secunia.com/advisories/32811 - http://www.vupen.com/english/advisories/2008/3176 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6234
CVE ID: CVE-2008-4226 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T10:08:34.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32766 - http://support.apple.com/kb/HT3639 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1 - http://www.securityfocus.com/bid/32326 - http://secunia.com/advisories/32773 - https://oval.cisecurity.org/r
1243-01-1 - http://www.securityfocus.com/bid/32326 - http://secunia.com/advisories/32773 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6360 - http://www.vupen.com/english/advisories/2009/1621 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1 - https://bugzilla.redhat.com/show_bug.cgi?id=470466 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6219 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00513.html - http://secunia.com/advisories/32807 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - https://www.redhat.com/archives/fedora-package
ttp://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00472.html - http://www.osvdb.org/49993 - http://secunia.com/advisories/32764 - http://www.vmware.com/security/advisories/VMSA-2009-0001.html - http://www.ubuntu.com/usn/usn-673-1 - http://www.vupen.com/english/advisories/2009/0301 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9888 - http://secunia.com/advisories/33746 - https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc9 - http://www.vupen.com/english/advisories/2009/0034 - http://secunia.com/advisories/34247 - http://support.avaya.com/elmodocs2/
//www.vupen.com/english/advisories/2009/0034 - http://secunia.com/advisories/34247 - http://support.avaya.com/elmodocs2/security/ASA-2009-067.htm - http://secunia.com/advisories/36173 - http://www.vupen.com/english/advisories/2009/1522 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-251406-1 - http://security.gentoo.org/glsa/glsa-200812-06.xml - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://secunia.com/advisories/32872 - http://support.avaya.com/elmodocs2/security/ASA-2009-002.htm - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-s
elmodocs2/security/ASA-2009-002.htm - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473974 - http://wiki.rpath.com/Advisories:rPSA-2008-0325 - http://www.debian.org/security/2008/dsa-1666 - http://secunia.com/advisories/32802 - http://secunia.com/advisories/35379 - http://secunia.com/advisories/32974 - http://secunia.com/advisories/33792 - http://secunia.com/advisories/36235 - http://secunia.com/advisories/32762 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1 - http://www.redhat.com/support/errata/RHSA-2008-0988.html - http://secunia.com/advisories/33417 - https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc10 - http://sun
8.html - http://secunia.com/advisories/33417 - https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc10 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:231 - http://support.apple.com/kb/HT3613 - http://www.vupen.com/english/advisories/2009/0323 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://secunia.com/advisories/32811 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://www.vupen.com/english/advisories/2008/3176 - http://securitytracker.com/id?1021238
CVE ID: CVE-2008-4227 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T10:08:34.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously used, which makes it easier for remote attackers to obtain sensitive information or hijack a connection by decrypting network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50024 - http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html - http://www.vupen.com/english/advisories/2008/3232 - http://www.se
om/archives/security-announce/2008/Nov/msg00002.html - http://www.vupen.com/english/advisories/2008/3232 - http://www.securitytracker.com/id?1021269 - http://support.apple.com/kb/HT3318 - http://www.securityfocus.com/bid/32394 - http://secunia.com/advisories/32756