Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/bugs.debian.org/496409 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44907 - http://www.securityfocus.com/bid/30969 - http://dev.gentoo.org/~rbu/security/debiantemp/scratchbox2
CVE ID: CVE-2008-4985 State: PUBLISHED Published: 2008-11-06T11:00:00 Last Updated: 2024-08-07T10:31:28.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: vdrleaktest in Video Disk Recorder (aka vdr-dbg or vdr) 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/show_bug.cgi?id=235827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44880 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/vdr-dbg - http://uvw.ru/repo
s://bugs.gentoo.org/show_bug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/vdr-dbg - http://uvw.ru/report.lenny.txt - http://bugs.debian.org/496421
CVE ID: CVE-2008-4986 State: PUBLISHED Published: 2008-11-06T11:00:00 Last Updated: 2024-08-07T10:31:28.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: wims 3.62 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/env#####, (b) /tmp/sed#####, and (c) /tmp/referer-home.log temporary files, related to the (1) coqweb and (2) account.sh scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.debian.org/496387 - http://www.securityfocus.com/bid/32244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46510 - http:
org/496387 - http://www.securityfocus.com/bid/32244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46510 - http://dev.gentoo.org/~rbu/security/debiantemp/wims
CVE ID: CVE-2008-4987 State: PUBLISHED Published: 2008-11-06T11:00:00 Last Updated: 2024-08-07T10:31:28.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/ldconfig.tmp, (b) /tmp/ldconf.tmp, and (c) /tmp/ld.so.conf temporary files, related to the (1) get-maptools.sh and (2) get_shapelib.sh scripts. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44920 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00307.html - http://www.openwall.com/lists/oss-secur
//www.redhat.com/archives/fedora-package-announce/2008-September/msg00307.html - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.debian.org/496383 - http://www.securityfocus.com/bid/31030 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00199.html - http://uvw.ru/report.lenny.txt - https://bugzilla.redhat.com/show_bug.cgi?id=460429 - http://secunia.com/advisories/31677 - http://dev.gentoo.org/~rbu/security/debiantemp/xastir
CVE ID: CVE-2008-4988 State: PUBLISHED Published: 2008-11-06T11:00:00Z Last Updated: 2024-09-17T01:26:39.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://dev.gentoo.org/~rbu/security/debiantemp/xcal - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.debian.org/496393
CVE ID: CVE-2008-4989 State: PUBLISHED Published: 2008-11-13T00:00:00 Last Updated: 2024-08-07T10:31:28.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN). Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:227 - http://www.ubuntu.com/usn/usn-678-2 - http://secunia.com/advisories/33694 - http://secu
advisories?name=MDVSA-2008:227 - http://www.ubuntu.com/usn/usn-678-2 - http://secunia.com/advisories/33694 - http://security.gentoo.org/glsa/glsa-200901-10.xml - http://www.redhat.com/support/errata/RHSA-2008-0982.html - https://usn.ubuntu.com/678-1/ - http://www.securityfocus.com/archive/1/498431/100/0/threaded - http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3215 - http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3217 - http://wiki.rpath.com/Advisories:rPSA-2008-0322 - http://secunia.com/advisories/32687 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00293.html - http://www.gnu.org/software/gnutls/security.html - https://issues.rp
dora-package-announce/2008-November/msg00293.html - http://www.gnu.org/software/gnutls/security.html - https://issues.rpath.com/browse/RPL-2886 - http://secunia.com/advisories/35423 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html - http://www.securityfocus.com/bid/32232 - http://www.securitytracker.com/id?1021167 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-260528-1 - http://secunia.com/advisories/33501 - http://secunia.com/advisories/32879 - http://www.vupen.com/english/advisories/2009/1567 - http://secunia.com/advisories/32619 - http://www.vupen.com/english/advisories/2008/3086 - http://secunia.com/advisories/32681 - http://lists.opensuse.org/open
http://www.vupen.com/english/advisories/2008/3086 - http://secunia.com/advisories/32681 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11650 - http://www.debian.org/security/2009/dsa-1719 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00222.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46482
CVE ID: CVE-2008-4990 State: PUBLISHED Published: 2009-02-02T22:00:00 Last Updated: 2024-08-07T10:31:28.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/enomalism2.pid temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500573/100/0/threaded - http://secunia.com/advisories/33724 - http://www.securityfocus.com/bid/33544 - http://groups.google.com/group/enomalism/msg/11c2f51b3734b0ab?dmode=source
CVE ID: CVE-2008-4991 State: PUBLISHED Published: 2008-11-06T19:00:00 Last Updated: 2024-08-07T10:31:28.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in LOCKON CO.,LTD. EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, and 1.5.0-beta2 and earlier; and Community Edition 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the parameter. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN19072922/index.html - http://www.ipa.go.jp/security/english/vuln/200811_EC-CUBE_en.html - http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000075.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/
ml - http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000075.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46509
CVE ID: CVE-2008-4992 State: PUBLISHED Published: 2008-11-07T18:00:00 Last Updated: 2024-08-07T10:31:28.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SPARC hypervisor in Sun System Firmware 6.6.3 through 6.6.5 and 7.1.3 through 7.1.3.e on UltraSPARC T1, T2, and T2+ processors allows logical domain users to access memory in other logical domains via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46407 - http://www.securitytracker.com/id?1021153 - http://secunia.com/advisories/32582 - http://www.securityfocus.com/bid/32143 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-2448
dvisories/32582 - http://www.securityfocus.com/bid/32143 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-244826-1 - http://www.vupen.com/english/advisories/2008/3047
CVE ID: CVE-2008-4993 State: PUBLISHED Published: 2008-11-07T19:00:00 Last Updated: 2024-08-07T10:31:28.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46545 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://bugs.debian.org/496367 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:016 - https://bugs.gentoo.org/show_bug.cgi?id=235805 - http://www.redhat.com/s
a.com/security/advisories?name=MDVSA-2009:016 - https://bugs.gentoo.org/show_bug.cgi?id=235805 - http://www.redhat.com/support/errata/RHSA-2009-0003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9576 - http://dev.gentoo.org/~rbu/security/debiantemp/xen-utils-3.2-1
CVE ID: CVE-2008-4994 State: PUBLISHED Published: 2008-11-07T19:00:00 Last Updated: 2024-08-07T10:31:28.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) ncsarmt and (2) ncsawrap scripts in xmcd 2.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.*pid temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/xmcd - https://exchange.xforce.ibmcloud.com/vulnerabilities/46550 - http://www.securityfocus.com/bid/32288 - http://bugs.debian.org/496416
CVE ID: CVE-2008-4995 State: PUBLISHED Published: 2008-11-07T19:00:00 Last Updated: 2024-08-07T10:31:28.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. NOTE: this vulnerability is only limited to debug mode, which is disabled by default. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/496430 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/bk2site - https://exchange.xforce.ibmcloud.com/vulnerabi
.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/bk2site - https://exchange.xforce.ibmcloud.com/vulnerabilities/46543
CVE ID: CVE-2008-4996 State: PUBLISHED Published: 2008-11-07T19:00:00Z Last Updated: 2025-01-17T15:24:30.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor disputes this vulnerability, stating that "init is [used in] a single-user context; there's no possibility that this is exploitable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://dev.gentoo.org/~rbu/security/debiantemp/initramfs-tools - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/s
ecurity/debiantemp/initramfs-tools - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.debian.org/496386
CVE ID: CVE-2008-4997 State: PUBLISHED Published: 2008-11-07T19:00:00Z Last Updated: 2024-09-17T04:08:56.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://dev.gentoo.org/~rbu/security/debiantemp/datafreedom-perl - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.debian.org/496429
CVE ID: CVE-2008-4998 State: PUBLISHED Published: 2008-11-07T19:00:00Z Last Updated: 2024-09-17T03:48:37.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494648 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - https://bugs.gentoo.org/show_bug.cgi?id=235802
CVE ID: CVE-2008-4999 State: PUBLISHED Published: 2008-11-07T19:00:00 Last Updated: 2024-08-07T10:40:16.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduce the issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40993 - http://securityreason.com/securityalert/4568 - http://www.securityfocus.com/archive/1/488803/1
m/vulnerabilities/40993 - http://securityreason.com/securityalert/4568 - http://www.securityfocus.com/archive/1/488803/100/100/threaded - http://www.securityfocus.com/archive/1/488782/100/100/threaded - http://www.securityfocus.com/bid/28004 - http://www.securityfocus.com/archive/1/488801/100/100/threaded
CVE ID: CVE-2008-5000 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:40:16.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/includes/news.inc.php in PHPX 3.5.16, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via uppercase characters in the news_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32564 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46548 - https://www.exploit-db.com/exploits/6996 - http://securityreason.com/securityalert/4572
CVE ID: CVE-2008-5001 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:40:16.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified parameters, a different issue than CVE-2008-0610. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27687 - http://sourceforge.net/project/shownotes.php?release_id=571174
r: References: - http://www.securityfocus.com/bid/27687 - http://sourceforge.net/project/shownotes.php?release_id=571174&group_id=63887 - http://www.vupen.com/english/advisories/2008/0486 - http://ultravnc.svn.sourceforge.net/viewvc/ultravnc/UltraVNC%20Project%20Root/UltraVNC/vncviewer/FileTransfer.cpp?view=log#rev183 - http://forum.ultravnc.info/viewtopic.php?p=45150#45150 - http://secunia.com/advisories/28804
CVE ID: CVE-2008-5002 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:40:16.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.
ed from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4571 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46315 - http://secunia.com/advisories/32513 - https://www.exploit-db.com/exploits/6963 - http://www.vupen.com/english/advisories/2008/2998 - http://www.securityfocus.com/bid/32073
CVE ID: CVE-2008-5003 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:40:16.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ndetail.php in Shahrood allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46295 - http://www.vupen.com/english/advisories/2008/2996 - http://securityreason.com/securityalert/4569
CVE ID: CVE-2008-5004 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:40:16.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbitrary SQL commands via a crafted cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6925 - http://www.securityfocus.com/bid/32040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46299
CVE ID: CVE-2008-5005 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:40:16.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program.
e composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10485 - http://panda.com/imap/ - http://www.openwall.com/lists/oss-security/2008/11/03/3 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00082.html - http://www.bitsec.com/en/rad/bsa-081103.txt - http://www.bitsec.com/en/rad/bsa-081103.c - http://support.avaya.com/elmodocs2/security/ASA-2009-065.htm - http://www.openwall.com/lists/oss-security/2008/11/03/5 - http://www.washington.edu/alpine/tmailbu
ty/ASA-2009-065.htm - http://www.openwall.com/lists/oss-security/2008/11/03/5 - http://www.washington.edu/alpine/tmailbug.html - http://securityreason.com/securityalert/4570 - http://www.securityfocus.com/archive/1/498002/100/0/threaded - http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002268.html - http://www.debian.org/security/2008/dsa-1685 - http://secunia.com/advisories/32483 - http://www.securityfocus.com/bid/32072 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46281 - http://secunia.com/advisories/33142 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00058.html - https://bugzilla.redhat.com/show_bug.cgi?id=469667 - http://rhn.redhat.c
-package-announce/2008-November/msg00058.html - https://bugzilla.redhat.com/show_bug.cgi?id=469667 - http://rhn.redhat.com/errata/RHSA-2009-0275.html - http://marc.info/?l=full-disclosure&m=122572590212610&w=4 - http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002267.html - http://secunia.com/advisories/33996 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:146 - http://secunia.com/advisories/32512 - http://www.openwall.com/lists/oss-security/2008/11/03/4 - http://www.vupen.com/english/advisories/2008/3042 - http://securitytracker.com/id?1021131
CVE ID: CVE-2008-5006 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:40:16.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/11/03/5 - http://www.debian.org/security/2008/dsa-1685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46604 - http:/
3/5 - http://www.debian.org/security/2008/dsa-1685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46604 - http://www.securityfocus.com/bid/32280 - http://secunia.com/advisories/33142 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:146
CVE ID: CVE-2008-5007 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:40:16.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: create_lazarus_export_tgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a (1) /tmp/lazarus.tgz temporary file or a (2) /tmp/lazarus temporary directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235828 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/lazarus-src - http://uvw.ru/report.lenny.txt - http://
ug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/lazarus-src - http://uvw.ru/report.lenny.txt - http://bugs.debian.org/496377 - http://www.securityfocus.com/bid/30917 - http://code.google.com/p/bollin/source/browse/lazarus/trunk/debian/patches/07_sh_using_tmp.dpatch?spec=svn3462&r=3462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44824
CVE ID: CVE-2008-5008 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:40:16.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/11/03/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46542 - http://security.gentoo.org/glsa/glsa-200812-05.xml - http://www.mega-nerd.com/SRC/ChangeLog - http://www.securityfocus.co
ttp://security.gentoo.org/glsa/glsa-200812-05.xml - http://www.mega-nerd.com/SRC/ChangeLog - http://www.securityfocus.com/bid/32090 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:238