Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
yst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-2607 - http://www.securityfocus.com/bid/29670 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1 - http://secunia.com/advisories/33937 - http://secunia.com/advisories/30664 - http://www.securityfocus.com/archive/1/493550/100/0/threaded - http://secunia.com/advisories/31025 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11246 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.vupen.com/english/advisories/2008/1833 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201 - http://
tml - http://www.vupen.com/english/advisories/2008/1833 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201 - http://security.gentoo.org/glsa/glsa-200806-07.xml - http://secunia.com/advisories/30715 - http://secunia.com/advisories/30666 - http://secunia.com/advisories/30627 - http://secunia.com/advisories/30637 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:116 - ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2362.diff - http://securitytracker.com/id?1020245 - http://www.vupen.com/english/advisories/2008/1803 - http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.ht
avaya.com/elmodocs2/security/ASA-2008-249.htm - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html - http://secunia.com/advisories/30772 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=720 - http://secunia.com/advisories/30659 - http://secunia.com/advisories/31109 - http://www.vupen.com/english/advisories/2008/1983/references - http://secunia.com/advisories/30671 - http://secunia.com/advisories/30809 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:179 - http://lists.freedesktop.org/archives/xorg/2008-June/036026.html - http://rhn.redhat.com/errata/RHSA-2008-0504.html - http://secunia.com/advisories/30843 - http://www.debian.org/sec
tml - http://rhn.redhat.com/errata/RHSA-2008-0504.html - http://secunia.com/advisories/30843 - http://www.debian.org/security/2008/dsa-1595 - http://www.ubuntu.com/usn/usn-616-1 - http://secunia.com/advisories/32099 - https://issues.rpath.com/browse/RPL-2619 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html - http://www.securityfocus.com/archive/1/493548/100/0/threaded - http://secunia.com/advisories/30630 - http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml
CVE ID: CVE-2008-2363 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:58:01.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29421 - http://security.gentoo.org/glsa/glsa-200807-15.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2008:201 - https://bugzil
ty.gentoo.org/glsa/glsa-200807-15.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2008:201 - https://bugzilla.redhat.com/show_bug.cgi?id=446902 - http://secunia.com/advisories/31315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42750 - http://bugs.gentoo.org/show_bug.cgi?id=224051 - http://bugzilla.gnome.org/show_bug.cgi?id=535413 - http://marc.info/?l=oss-security&m=121207185600564&w=2 - http://www.novell.com/linux/security/advisories/2008_13_sr.html - http://secunia.com/advisories/30717
CVE ID: CVE-2008-2364 State: PUBLISHED Published: 2008-06-13T18:00:00 Last Updated: 2024-08-07T08:58:02.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://secunia.com/advisories/34259 - http://secunia.com/advisories/34219 - h
-security-announce/2009-03/msg00004.html - http://secunia.com/advisories/34259 - http://secunia.com/advisories/34219 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11713 - http://secunia.com/advisories/31026 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://secunia.com/advisories/31651 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-247666-1 - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/32838 - http://www.securityfocus.com/archive/1/498567/100/0/threaded - http://secunia.com/advisories/31904 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html - http://rhn.redhat.com/errata/RHSA
s/31904 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html - http://rhn.redhat.com/errata/RHSA-2008-0967.html - http://www.securityfocus.com/bid/29653 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://secunia.com/advisories/34418 - http://secunia.com/advisories/30621 - http://secunia.com/advisories/32685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42987 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html - http://secunia.com/advisories/31416 - http://www.securitytracker.com/id?1020267 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=666154&r2=666153&pathrev=666154 - http://www.ubuntu.co
he.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=666154&r2=666153&pathrev=666154 - http://www.ubuntu.com/usn/USN-731-1 - http://www.vupen.com/english/advisories/2009/0320 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432 - http://www-01.ibm.com/support/docview.wss?uid=swg27008517 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9577 - http://secunia.com/advisories/32222 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6084 - http://www.redhat.com/support/errata/RHSA-2008-0966.html - http://secunia.com/advisories/33156 - http://secunia.com/advisories/33797 - http:/
/support/errata/RHSA-2008-0966.html - http://secunia.com/advisories/33156 - http://secunia.com/advisories/33797 - http://www.securityfocus.com/archive/1/494858/100/0/threaded - http://secunia.com/advisories/31404 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00055.html - http://security.gentoo.org/glsa/glsa-200807-06.xml - http://www.vupen.com/english/advisories/2008/2780 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:237 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00153.html - http://www.vupen.com/english/advisories/2008/1798 - http://lists.apple.com/archives/security-a
08-August/msg00153.html - http://www.vupen.com/english/advisories/2008/1798 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:195 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK67579 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0328 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b033
e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.or
ad.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3
ttpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde3
682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2008-2365 State: PUBLISHED Published: 2008-06-30T21:00:00 Last Updated: 2024-08-07T08:58:02.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versi
etting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43567 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f5b40e363ad6041a96e3da32281d8faa191597b9 - http://www.securitytracker.com/id?1020362 - http://sources.redhat.com/cgi-bin/cvsweb.cgi/~checkout~/tests/ptrace-tests/tests/late-ptrace-may-attach-check.c?cvsroot=systemtap - http://www.securityfocus.com/bid/29945 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=5ecfbae
securityfocus.com/bid/29945 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=5ecfbae093f0c37311e89b29bfc0c9d586eace87 - http://www.openwall.com/lists/oss-security/2008/07/14/1 - http://securityreason.com/securityalert/3965 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10749 - http://secunia.com/advisories/30850 - https://bugzilla.redhat.com/show_bug.cgi?id=449359 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f358166a9405e4f1d8e50d8f415c26d95505b6de - http://secunia.com/advisories/31107 - http://www.openwall.com/lists/oss-security/2008/06/26/1 - http://www.ubuntu.com/usn/usn-6
secunia.com/advisories/31107 - http://www.openwall.com/lists/oss-security/2008/06/26/1 - http://www.ubuntu.com/usn/usn-625-1 - http://rhn.redhat.com/errata/RHSA-2008-0508.html - http://marc.info/?l=linux-kernel&m=117863520707703&w=2
CVE ID: CVE-2008-2366 State: PUBLISHED Published: 2008-06-16T18:26:00 Last Updated: 2024-08-07T08:58:02.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterprise Linux (RHEL) 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the ORIGIN symbol for use in the RPATH library path. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=450532 - http://secunia.com/advisories/30633 - http://www.securityfocus.com/bid/29695 - https://ov
t.com/show_bug.cgi?id=450532 - http://secunia.com/advisories/30633 - http://www.securityfocus.com/bid/29695 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43322 - http://www.redhat.com/support/errata/RHSA-2008-0538.html - http://securitytracker.com/id?1020278
CVE ID: CVE-2008-2367 State: PUBLISHED Published: 2009-01-20T16:00:00 Last Updated: 2024-08-07T08:58:01.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=451998 - http://secunia.com/advisories/33540 - http://www.vupen.com/english/advisories/2009/0145 - http://www.securityfocus.com/bid/33288 - http://securitytracker.com/id?1021608 - https://rhn.redhat.com/errata/RHSA-2009-0006.htm
w.securityfocus.com/bid/33288 - http://securitytracker.com/id?1021608 - https://rhn.redhat.com/errata/RHSA-2009-0006.html - https://rhn.redhat.com/errata/RHSA-2009-0007.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48021
CVE ID: CVE-2008-2368 State: PUBLISHED Published: 2009-01-20T16:00:00 Last Updated: 2024-08-07T08:58:02.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33540 - http://www.vupen.com/english/advisories/2009/0145 - http://www.securityfocus.com/bid/33288 - http://securitytracker.com/id?1021608 - https://rhn.redhat.com/er
s/2009/0145 - http://www.securityfocus.com/bid/33288 - http://securitytracker.com/id?1021608 - https://rhn.redhat.com/errata/RHSA-2009-0006.html - https://bugzilla.redhat.com/show_bug.cgi?id=452000 - https://rhn.redhat.com/errata/RHSA-2009-0007.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48022
CVE ID: CVE-2008-2369 State: PUBLISHED Published: 2008-08-14T20:00:00 Last Updated: 2024-08-07T08:58:01.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: manzier.pxt in Red Hat Network Satellite Server before 5.1.1 has a hard-coded authentication key, which allows remote attackers to connect to the server and obtain sensitive information about user accounts and entitlements. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020694 - http://rhn.redhat.com/errata/RHSA-2008-0630.html - http://secunia.com/advisories/31493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44452 - http://www.securityfocus.com/bid/30679
CVE ID: CVE-2008-2370 State: PUBLISHED Published: 2008-08-04T01:00:00 Last Updated: 2024-08-07T08:58:02.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30494 - http://tomcat.apache.org/security-4.html - http://www.securityfocus.com/archive/1/495022/100/0/t
tyfocus.com/bid/30494 - http://tomcat.apache.org/security-4.html - http://www.securityfocus.com/archive/1/495022/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10577 - http://www.vupen.com/english/advisories/2009/1535 - http://www.redhat.com/support/errata/RHSA-2008-0862.html - http://secunia.com/advisories/34013 - http://www.vupen.com/english/advisories/2008/2823 - http://secunia.com/advisories/37460 - http://www.vmware.com/security/advisories/VMSA-2009-0002.html - http://secunia.com/advisories/31982 - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/32120 - http://www.vmware.com/security/advisories/VMSA-2009-001
urityfocus.com/bid/31681 - http://secunia.com/advisories/32120 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/33999 - http://secunia.com/advisories/31865 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5876 - http://securityreason.com/securityalert/4099 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html - http://secunia.com/advisories/31639 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:188 - http://secunia.com/advisories/31379 - http://support.avaya.com/elmodocs2/security/ASA-
/advisories?name=MDVSA-2008:188 - http://secunia.com/advisories/31379 - http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm - http://www.vupen.com/english/advisories/2009/0320 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0864.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44156 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/35393 - http://secunia.com/advisories/57126 - http://secunia.com/advisories/32222 - http://secunia.com/advisories/36249 - http://secunia.com/advisories/31891 - http://secunia.com/a
.com/advisories/32222 - http://secunia.com/advisories/36249 - http://secunia.com/advisories/31891 - http://secunia.com/advisories/33797 - http://www.securitytracker.com/id?1020623 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html - http://www.vupen.com/english/advisories/2008/2305 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html - http://tomcat.apache.org/security-5.html - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200902e.html - http://www.vupen.com/english/advisories/2008/2780 - http://secunia.com/advisories/31381 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://marc.in
ies/2008/2780 - http://secunia.com/advisories/31381 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://www.vupen.com/english/advisories/2009/2215 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://www.vupen.com/english/advisories/2009/0503 - http://www.vupen.com/english/advisories/2009/3316 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://secunia.com/advisories/32266 - http://www.redhat.com/support/errata/RHSA-2008-0648.html - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E -
://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878
999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2008-2371 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T08:58:02.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2005 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:147 - http://secunia.com/advisories/32746 - http://bugs.ge
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:147 - http://secunia.com/advisories/32746 - http://bugs.gentoo.org/show_bug.cgi?id=228091 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://support.apple.com/kb/HT3549 - http://www.vupen.com/english/advisories/2008/2006 - http://security.gentoo.org/glsa/glsa-200811-05.xml - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/30972 - http://ubuntu.com/usn/usn-624-2 - http://secunia.com/advisories/32454 - http://secunia.com/advisories/30944 - http://secunia.com/advisories/30958 - http://secunia.com/advisories/35074 - http://www.ubuntu.com/usn/usn-628-1
/30944 - http://secunia.com/advisories/30958 - http://secunia.com/advisories/35074 - http://www.ubuntu.com/usn/usn-628-1 - http://secunia.com/advisories/39300 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00105.html - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://ftp.gnome.org/pub/GNOME/sources/glib/2.16/glib-2.16.4.changes - http://www.ubuntu.com/usn/usn-624-1 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://secunia.com/advisories/30967 - http://www.vupen.com/english/advisories/2010/0833 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00123.html - http://www.mandriva.com/security/advisories?name=