Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0727 State: PUBLISHED Published: 2008-03-18T00:00:00 Last Updated: 2024-08-07T07:54:23.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long password and (2) remote authenticated users to execute arbitrary code via a long DBPATH value. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41203 - http://www.securityfocus.com/bid/28198 - http://www.securityfocus.com/archive/1/489548/100/0/threaded
rabilities/41203 - http://www.securityfocus.com/bid/28198 - http://www.securityfocus.com/archive/1/489548/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41202 - http://www.zerodayinitiative.com/advisories/ZDI-08-012/ - http://www-1.ibm.com/support/docview.wss?uid=swg1IC55208 - http://www.zerodayinitiative.com/advisories/ZDI-08-011/ - http://www.securityfocus.com/archive/1/489547/100/0/threaded - http://www-1.ibm.com/support/docview.wss?uid=swg1IC55210 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC55207 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC55209 - http://secunia.com/advisories/29272 - http://securityreason.com/securityalert/3749
CVE ID: CVE-2008-0728 State: PUBLISHED Published: 2008-02-12T19:00:00 Last Updated: 2024-08-07T07:54:22.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption." Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:088 - http://secunia.com/advisories/29048 - http://support.novell.com/techcenter/psdb/512985d2cd3090bfb93dcb7b551179cf.html - http://sourceforge.net/project/shownotes.php?release_id=575703 - http://secunia.com/advisories/29026 - http://bugs.gentoo.org/show_bug
orge.net/project/shownotes.php?release_id=575703 - http://secunia.com/advisories/29026 - http://bugs.gentoo.org/show_bug.cgi?id=209915 - http://www.vupen.com/english/advisories/2008/0924/references - http://www.vupen.com/english/advisories/2008/0503 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/40474 - http://www.vupen.com/english/advisories/2008/0606 - http://secunia.com/advisories/28907 - http://security.gentoo.org/glsa/glsa-200802-09.xml - http://docs.info.apple.com/article.html?artnum=307562
ries/28907 - http://security.gentoo.org/glsa/glsa-200802-09.xml - http://docs.info.apple.com/article.html?artnum=307562 - http://secunia.com/advisories/29001 - http://kolab.org/security/kolab-vendor-notice-19.txt - http://secunia.com/advisories/29060
CVE ID: CVE-2008-0729 State: PUBLISHED Published: 2008-02-12T20:00:00 Last Updated: 2024-08-07T07:54:22.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion and device crash) via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39998 - http://www.securityfocus.com/archive/1/487607/100/0/
ces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39998 - http://www.securityfocus.com/archive/1/487607/100/0/threaded - https://www.exploit-db.com/exploits/4978 - http://securityreason.com/securityalert/3630 - http://www.securityfocus.com/archive/1/492225/100/0/threaded - http://www.securityfocus.com/bid/27442
CVE ID: CVE-2008-0730 State: PUBLISHED Published: 2008-02-12T20:00:00 Last Updated: 2024-08-07T07:54:23.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0452 - http://secunia.com/advisories/28931 - http://www.securityfocus.com/bid/27770 - https://oval.ci
sh/advisories/2008/0452 - http://secunia.com/advisories/28931 - http://www.securityfocus.com/bid/27770 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5545 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-201315-1
CVE ID: CVE-2008-0731 State: PUBLISHED Published: 2008-02-12T20:00:00Z Last Updated: 2024-09-16T23:36:06.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not properly handle failure of an AppArmor change_hat system call, which might allow attackers to trigger the unconfining of an apparmored task. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28806 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html
CVE ID: CVE-2008-0732 State: PUBLISHED Published: 2008-02-12T20:00:00Z Last Updated: 2024-09-17T00:20:57.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28838 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
CVE ID: CVE-2008-0733 State: PUBLISHED Published: 2008-02-13T00:00:00 Last Updated: 2024-08-07T07:54:23.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40520 - http://www.securityfocus.com/bid/27747 - http://www.securityfocus.com/archive/1/487988/100/0/threaded
CVE ID: CVE-2008-0734 State: PUBLISHED Published: 2008-02-13T00:00:00 Last Updated: 2024-08-07T07:54:23.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the cuid cookie parameter to admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5088 - http://www.securityfocus.com/bid/27710 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40415
CVE ID: CVE-2008-0735 State: PUBLISHED Published: 2008-02-13T00:00:00 Last Updated: 2024-08-07T07:54:23.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mod/gallery/ajax/gallery_data.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5105 - http://www.securityfocus.com/bid/27764 - http://secunia.com/advisories/28950
CVE ID: CVE-2008-0736 State: PUBLISHED Published: 2008-02-13T00:00:00 Last Updated: 2024-08-07T07:54:23.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and possibly other 4.x and 3.x versions, allows remote attackers to obtain the path via a certain value of the FedExAccount parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27454 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39941 - https://www.exploit-db.com/exploits/4988 - http://www.vupen.com/english/advisories/2008/0314 - http://www.securityfocus.com/archive/1/487058/100/0/threaded - http://www.cand
.vupen.com/english/advisories/2008/0314 - http://www.securityfocus.com/archive/1/487058/100/0/threaded - http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1 - http://securityreason.com/securityalert/3600
CVE ID: CVE-2008-0737 State: PUBLISHED Published: 2008-02-13T00:00:00 Last Updated: 2024-08-07T07:54:23.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and other 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the helpfield parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27454 - http://secunia.com/advisories/28662 - https://www.exploit-db.com/exploits/4988 - http://www.vupen.com/english/advisories/2008/0314 - http://www.securityfocus.com/archive/1/487058/100/0/threaded - http://www.candypres
n.com/english/advisories/2008/0314 - http://www.securityfocus.com/archive/1/487058/100/0/threaded - http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1 - http://securityreason.com/securityalert/3600
CVE ID: CVE-2008-0738 State: PUBLISHED Published: 2008-02-13T00:00:00 Last Updated: 2024-08-07T07:54:23.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the (1) idcust parameter to (a) ajax_getTiers.asp and (b) ajax_getCust.asp in ajax/, and the (2) tableName parameter to (c) ajax/ajax_tableFields.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28662 - http:/
formation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28662 - http://www.vupen.com/english/advisories/2008/0314 - http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1
CVE ID: CVE-2008-0739 State: PUBLISHED Published: 2008-02-13T00:00:00 Last Updated: 2024-08-07T07:54:23.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and earlier 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the FedExAccount parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28662 - http://www.vupen.com/english/advisories/2008/0314 - http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1
CVE ID: CVE-2008-0740 State: PUBLISHED Published: 2008-02-13T00:00:00 Last Updated: 2024-08-07T07:54:23.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartext information to http_plugin.log, which might allow local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg27007951 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK48785 - http://www-1.ibm.com/support/docview.wss?uid=swg27006876 - http://osvdb.org/42878 - http://
ocview.wss?uid=swg1PK48785 - http://www-1.ibm.com/support/docview.wss?uid=swg27006876 - http://osvdb.org/42878 - http://www.securityfocus.com/bid/27400 - http://www.vupen.com/english/advisories/2008/0241
CVE ID: CVE-2008-0741 State: PUBLISHED Published: 2008-02-13T00:00:00 Last Updated: 2024-08-07T07:54:23.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019254 - http://www-1.ibm.com/support/docview.wss?uid=swg27006876 - http://www.securityfocus.com/bid/27400 - http://www.vupen.com/english/advisories/2008/0241 - http://secunia.com/advisories/28588 - http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&
ish/advisories/2008/0241 - http://secunia.com/advisories/28588 - http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK52709&uid=swg1PK58871&loc=en_US&cs=utf-8&lang=
CVE ID: CVE-2008-0742 State: PUBLISHED Published: 2008-02-13T01:00:00 Last Updated: 2024-08-07T07:54:23.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. (dot dot) in the (1) subpage parameter in (a) categories.inc.php, (b) news.inc.php, (c) other.inc.php, (d) permissions.inc.php, (e) templates.inc.php, and (f) users.inc.php in pnadmin/; and (2) the page parameter to (g) pnadmin/index.php. NOTE: vector 2 is only exploitable by administrators. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/ex
itable by administrators. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5082 - http://securityreason.com/securityalert/3647 - http://www.securityfocus.com/bid/27688 - http://www.securityfocus.com/archive/1/487773/100/0/threaded
CVE ID: CVE-2008-0743 State: PUBLISHED Published: 2008-02-13T01:00:00 Last Updated: 2024-08-07T07:54:23.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in members_help.php in Joovili 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hlp parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487779/100/0/threaded - http://securityreason.com/securityalert/3640 - http://www.securityfocus.com/bid/27693
CVE ID: CVE-2008-0744 State: PUBLISHED Published: 2008-02-13T01:00:00 Last Updated: 2024-08-07T07:54:23.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user_login.asp in PreProjects.com Pre Hotels & Resorts Management System allows remote attackers to execute arbitrary SQL commands via the login page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27450 - http://securityreason.com/securityalert/3644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39935 - http://www.securityfocus.com/archive/1/487053/100/100/threaded
CVE ID: CVE-2008-0745 State: PUBLISHED Published: 2008-02-13T19:00:00 Last Updated: 2024-08-07T07:54:23.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5089 - http://www.securityfocus.com/bid/27712
CVE ID: CVE-2008-0746 State: PUBLISHED Published: 2008-02-13T19:00:00 Last Updated: 2024-08-07T07:54:23.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Gallery (com_gallery) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2008-February/001901.html - http://www.attrition.org/pipermail/vim/2008-February/001902.html - http://www.securityfocus.com/bid/27695 - https://www.exploit-db.com/exploits/5084
CVE ID: CVE-2008-0747 State: PUBLISHED Published: 2008-02-13T19:00:00 Last Updated: 2024-08-07T07:54:23.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute arbitrary code via a long URL in a .asx file, a different vulnerability than CVE-2007-5487. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5085 - http://securityreason.com/securityalert/3642 - http://www.securityfocus.com/archive/1/487806/100/0/threaded - http://www.vupen.com/english/advisories/2008/0502 - http://secunia.com/advisories/28855 - http://www.
6/100/0/threaded - http://www.vupen.com/english/advisories/2008/0502 - http://secunia.com/advisories/28855 - http://www.securityfocus.com/bid/27698
CVE ID: CVE-2008-0748 State: PUBLISHED Published: 2008-02-13T19:00:00 Last Updated: 2024-08-07T07:54:23.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a long argument to the SetLogging method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487802/100/0/threaded - http://securityreason.com/securityalert/3648 - https://www.exploit-db.com/e
yfocus.com/archive/1/487802/100/0/threaded - http://securityreason.com/securityalert/3648 - https://www.exploit-db.com/exploits/5086 - http://secunia.com/advisories/28854 - https://www.exploit-db.com/exploits/5100 - http://www.securityfocus.com/bid/27715 - http://www.vupen.com/english/advisories/2008/0483 - http://www.securityfocus.com/archive/1/487805/100/0/threaded
CVE ID: CVE-2008-0749 State: PUBLISHED Published: 2008-02-13T19:00:00 Last Updated: 2024-08-07T07:54:23.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Calimero.CMS 3.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a calimero_webpage action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27690 - http://www.osvdb.org/41573 - http://osvdb.org/ref/41/41573-calimero.txt - http://downloads.securityfocus.com/vulnerabilities/exploits/27690.html
CVE ID: CVE-2008-0750 State: PUBLISHED Published: 2008-02-13T19:00:00 Last Updated: 2024-08-07T07:54:23.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in philboard_forum.asp in Husrev BlackBoard 2.0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487781/100/0/threaded - http://www.securityfocus.com/bid/27714 - http://www.securityfocus.com/archive/1/487780/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/40368 - http://securityreason.com/securityalert/3641 - http://secunia.com/advisori
e.xforce.ibmcloud.com/vulnerabilities/40368 - http://securityreason.com/securityalert/3641 - http://secunia.com/advisories/28842
CVE ID: CVE-2008-0751 State: PUBLISHED Published: 2008-02-13T19:00:00 Last Updated: 2024-08-07T07:54:23.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to plugin/tag/. Additional Analyst Notes: - CVE Program Container: References: - http://blog.s9y.org/archives/190-Freetag-plugin-updated-to-prevent-XSS.html - http://www.bitsploit.de/uploads/Code/200802080000/ - http://secunia.com/advisories/28852 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060
0802080000/ - http://secunia.com/advisories/28852 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060122.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/40376 - http://www.securityfocus.com/bid/27697
CVE ID: CVE-2008-0752 State: PUBLISHED Published: 2008-02-13T19:00:00 Last Updated: 2024-08-07T07:54:23.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Neogallery (com_neogallery) 1.1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27692 - https://www.exploit-db.com/exploits/5083 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40357
CVE ID: CVE-2008-0753 State: PUBLISHED Published: 2008-02-13T19:00:00 Last Updated: 2024-08-07T07:54:23.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in calendar.php in Virtual War (VWar) 1.5 allows remote attackers to execute arbitrary SQL commands via the month parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487900/100/0/threaded - http://www.securityfocus.com/bid/27722 - http://securityreason.com/securityalert/3643
CVE ID: CVE-2008-0754 State: PUBLISHED Published: 2008-02-13T19:00:00 Last Updated: 2024-08-07T07:54:23.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in the Rapid Recipe (com_rapidrecipe) 1.6.5 component for Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the user_id parameter in a showuser action or (2) the category_id parameter in a viewcategorysrecipes action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28883 - http://www.securityfocus.com/archive/1/487901/100/0/threaded - http://securityreason.com/securityalert/3649 - http://www.securityfocus.c
ityfocus.com/archive/1/487901/100/0/threaded - http://securityreason.com/securityalert/3649 - http://www.securityfocus.com/bid/27724
CVE ID: CVE-2008-0755 State: PUBLISHED Published: 2008-02-13T19:00:00 Last Updated: 2024-08-07T07:54:23.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; might allow remote attackers to execute arbitrary code via format string specifiers in the queue name in a request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0498 - http://www.securityfocus.com
- CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0498 - http://www.securityfocus.com/archive/1/487955/100/0/threaded - http://secunia.com/advisories/28870 - http://www.securityfocus.com/bid/27728 - http://www.securityfocus.com/bid/27734 - http://aluigi.altervista.org/adv/cyanuro-adv.txt
CVE ID: CVE-2008-0756 State: PUBLISHED Published: 2008-02-13T19:00:00 Last Updated: 2024-08-07T07:54:23.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; allows remote attackers to cause a denial of service (daemon crash) via a connection that begins with (1) a "Send queue state" LPD command 3 or (2) a "Send queue state" LPD command 4. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0498 - http://www.securityfocus.