Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5082 State: PUBLISHED Published: 2009-01-30T19:00:00 Last Updated: 2024-08-07T10:40:16.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 through 7.3 and Dogtag Certificate System 1.0 returns successfully even when token enrollment did not use the hardware key, which allows remote authenticated users with enrollment privileges to bypass intended authentication policies by performing enrollment with a software key. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33508 - https://bugzilla.redhat.com/show_
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33508 - https://bugzilla.redhat.com/show_bug.cgi?id=475998 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48331 - http://www.vupen.com/english/advisories/2009/0145 - https://rhn.redhat.com/errata/RHSA-2009-0007.html - http://secunia.com/advisories/33693
CVE ID: CVE-2008-5083 State: PUBLISHED Published: 2019-11-07T23:18:28 Last Updated: 2024-08-07T10:40:17.257Z Vendors: JON Products: JON Problem Types: unauthorized access private property Description: In JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBoss ON. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-5083 - https://access.redhat.com/security/cve/cve-2008-5083
CVE ID: CVE-2008-5084 State: REJECTED Published: 2021-05-26T21:10:47 Last Updated: 2021-05-26T21:10:47 Description: No description available.
CVE ID: CVE-2008-5085 State: REJECTED Published: 2021-05-26T21:09:00 Last Updated: 2021-05-26T21:09:00 Description: No description available.
CVE ID: CVE-2008-5086 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T10:40:17.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33217 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8765 - http://secunia.com/advisories/33198 - http://osvdb.org/50919 - http://secunia.com/advisories/33292 - http://www.securityfocus.com/bid/32905 - ht
ories/33198 - http://osvdb.org/50919 - http://secunia.com/advisories/33292 - http://www.securityfocus.com/bid/32905 - http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00938.html - http://www.ubuntu.com/usn/usn-694-1 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://www.redhat.com/support/errata/RHSA-2009-0382.html - https://www.redhat.com/archives/libvir-list/2008-December/msg00522.html - https://bugzilla.redhat.com/show_bug.cgi?id=476560 - http://secunia.com/advisories/34397
CVE ID: CVE-2008-5087 State: PUBLISHED Published: 2008-11-14T19:00:00Z Last Updated: 2024-09-16T22:20:03.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in TYPO3 Another Backend Login (wrg_anotherbelogin) extension before 0.0.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31266 - http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/
CVE ID: CVE-2008-5088 State: PUBLISHED Published: 2008-11-14T19:00:00 Last Updated: 2024-08-07T10:40:16.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) email.php and (2) question.php, a different vector than CVE-2008-1909. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4599 - http://www.securityfocus.com/bid/31279 - https://www.exploit-db.com/exploits/6510
CVE ID: CVE-2008-5089 State: PUBLISHED Published: 2008-11-14T19:00:00 Last Updated: 2024-08-07T10:40:17.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the (1) Pages.Save, (2) PrintReport, or (3) Canvas.Save method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45219 - http://vuln.sg/ddarviewer2501314-en.html - http://www.vupen.com/english/advisories/2008/2612 - http://secunia.com/advisorie
p://vuln.sg/ddarviewer2501314-en.html - http://www.vupen.com/english/advisories/2008/2612 - http://secunia.com/advisories/31894 - http://www.securityfocus.com/bid/31227
CVE ID: CVE-2008-5090 State: PUBLISHED Published: 2008-11-14T19:00:00 Last Updated: 2024-08-07T10:40:17.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the preg_replace function with the eval switch. Additional Analyst Notes: - CVE Program Container: References: - http://www.anelectron.com/board/index.php?tid=3282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45270 - http://www.securityfocus.com/archive/1/496552/100/0/threaded - http://www.gulftech.org/?node=research&article_id=00131-092
tp://www.securityfocus.com/archive/1/496552/100/0/threaded - http://www.gulftech.org/?node=research&article_id=00131-09202008 - http://securityreason.com/securityalert/4598 - http://secunia.com/advisories/31978 - https://www.exploit-db.com/exploits/6499 - http://www.securityfocus.com/bid/31268
CVE ID: CVE-2008-5091 State: PUBLISHED Published: 2008-11-14T19:00:00 Last Updated: 2024-08-07T10:40:17.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an "invalid extensibleMatch filter." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30947 - http://www.novell.com/support/viewContent.do?externalId=3426981 - http://www.securitytracker.com/id?1020788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43590 - http://www.novell.com/documentation
racker.com/id?1020788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43590 - http://www.novell.com/documentation/edir873/sp10_readme/netware/readme.txt - http://www.novell.com/support/viewContent.do?externalId=3477912 - https://bugzilla.novell.com/show_bug.cgi?id=373853 - http://www.vupen.com/english/advisories/2008/2462
CVE ID: CVE-2008-5092 State: PUBLISHED Published: 2008-11-14T19:00:00 Last Updated: 2024-08-07T10:40:17.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30947 - http://www.novell.com/support/viewContent.do?externalId=3426981 - http://www.securitytracker.com/id?1020786 - http://www.vupen.com/english/advisories/2008/2462
CVE ID: CVE-2008-5093 State: PUBLISHED Published: 2008-11-14T19:00:00 Last Updated: 2024-08-07T10:40:17.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46667 - http://www.novell.com/support/viewContent.do?externalId=3426981 - http://www.securitytracker.com/id?1020785 - http://www.vupen.com/english/advisories/2008/2462
CVE ID: CVE-2008-5094 State: PUBLISHED Published: 2008-11-14T19:00:00 Last Updated: 2024-08-07T10:40:17.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30947 - http://www.novell.com/support/viewContent.do?externalId=3426981 - http://www.securitytracker.com/id?1020787 - http://www.vupen.com/english/advisories/2008/2462
CVE ID: CVE-2008-5095 State: PUBLISHED Published: 2008-11-14T19:00:00 Last Updated: 2024-08-07T10:40:17.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30947 - http://www.securitytracker.com/id?1020792 - http://www.securitytracker.com/id?1020793 - http://www.novell.com/support/viewContent.do?externalId=7001157&sliceId=1
CVE ID: CVE-2008-5096 State: PUBLISHED Published: 2008-11-14T19:00:00 Last Updated: 2024-08-07T10:40:17.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the TYPO3 File List (file_list) extension 0.2.1 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45258 - http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/
CVE ID: CVE-2008-5097 State: PUBLISHED Published: 2008-11-14T19:00:00 Last Updated: 2024-08-07T10:40:16.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in MyFWB 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2649 - http://secunia.com/advisories/31954 - https://www.exploit-db.com/exploits/6501 - http://www.securityfocus.com/archive/1/496553/100/0/threaded - http://www.securityfocus.com/bid/31269 - http://securityreason.com/securityalert/4597
CVE ID: CVE-2008-5098 State: PUBLISHED Published: 2008-11-17T18:00:00 Last Updated: 2024-08-07T10:40:17.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-2904. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1021223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46583 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-242186-1 - http://secunia.com/advisories/32670 - http://www.vupen.com/english/advisori
/search/document.do?assetkey=1-26-242186-1 - http://secunia.com/advisories/32670 - http://www.vupen.com/english/advisories/2008/3152 - http://osvdb.org/49836 - http://www.securityfocus.com/bid/32285
CVE ID: CVE-2008-5099 State: PUBLISHED Published: 2008-11-17T18:00:00 Last Updated: 2024-08-07T10:40:17.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Logical Domain Manager (aka LDoms Manager or ldm) 1.0 through 1.0.3 displays the value of the OpenBoot PROM (OBP) security-password variable in cleartext, which allows local users to bypass the SPARC firmware's password protection, and gain privileges or obtain data access, via the "ldm ls -l" command, a different vulnerability than CVE-2008-4992. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2008-460.htm - http://sunsolve.sun.com/search/document.do?assetke
ces: - http://support.avaya.com/elmodocs2/security/ASA-2008-460.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139395-02-1 - http://securitytracker.com/id?1021224 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139397-02-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139398-01-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-243606-1 - http://secunia.com/advisories/32674 - http://www.vupen.com/english/advisories/2008/3154 - http://www.securityfocus.com/bid/32286 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139396-02-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46594
CVE ID: CVE-2008-5100 State: PUBLISHED Published: 2008-11-17T18:00:00 Last Updated: 2024-08-07T10:40:17.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for attackers to bypass Global Assembly Cache (GAC) and Code Access Security (CAS) protection mechanisms, aka MSRC ticket MSRC8566gs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498311/100/0/threaded - http://www.applicationsecurity.c
Container: References: - http://www.securityfocus.com/archive/1/498311/100/0/threaded - http://www.applicationsecurity.co.il/.NET-Framework-Rootkits.aspx - http://securityreason.com/securityalert/4605 - http://www.applicationsecurity.co.il/LinkClick.aspx?fileticket=ycIS1bewMBI%3d&tabid=161&mid=555
CVE ID: CVE-2008-5101 State: PUBLISHED Published: 2008-11-17T18:00:00 Last Updated: 2024-08-07T10:40:17.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow." Additional Analyst Notes: - CVE Program Container: References: - http://prdownloads.sourceforge.net/optipng/optipng-0.6.1.1.diff?download - http://secunia.com/advisories/34259 - http://optipng.sourceforge.net/ - http://openwall.com/lists/oss-security/2008/11/12/1 - http://www.securityfocus.com/bid/32248 - http://lists.opensuse.org/opensuse-security-announce
ss-security/2008/11/12/1 - http://www.securityfocus.com/bid/32248 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html - http://security.gentoo.org/glsa/glsa-200812-01.xml - http://www.vupen.com/english/advisories/2008/3108 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46519 - http://sourceforge.net/project/shownotes.php?release_id=639631&group_id=151404 - http://secunia.com/advisories/32651
CVE ID: CVE-2008-5102 State: PUBLISHED Published: 2008-11-17T18:00:00 Last Updated: 2024-08-07T10:40:17.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements. Additional Analyst Notes: - CVE Program Container: References: - http://mail.zope.org/pipermail/zope/2008-August/174025.html - http://bugs.gentoo.org/show_bug.cgi?id=246411 - https://bugs.launchpad.net/zope2/+bug/257269 - http://www.zope.org/Products/Zope/Hotfix-2008-08-12/README.txt - http://www
tps://bugs.launchpad.net/zope2/+bug/257269 - http://www.zope.org/Products/Zope/Hotfix-2008-08-12/README.txt - http://www.zope.org/Products/Zope/Hotfix-2008-08-12/Hotfix_20080812-1.1.0.tar.gz - https://bugs.launchpad.net/zope2/+bug/257276 - http://www.vupen.com/english/advisories/2008/2418 - http://openwall.com/lists/oss-security/2008/11/12/2
CVE ID: CVE-2008-5103 State: PUBLISHED Published: 2008-11-17T18:00:00 Last Updated: 2024-08-07T10:40:17.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) python-vm-builder and (2) ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! (exclamation point) and allows attackers to bypass intended login restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32697 - http://www.securityfocus.com/bid/32292 - http://launchpadlibrarian.net/19619929/vm-builder_0.9-0ubuntu3.1.debdiff - ht
- http://www.securityfocus.com/bid/32292 - http://launchpadlibrarian.net/19619929/vm-builder_0.9-0ubuntu3.1.debdiff - http://www.ubuntu.com/usn/usn-670-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46603 - https://bugs.launchpad.net/ubuntu/+source/vm-builder/+bug/296841 - http://osvdb.org/49996
CVE ID: CVE-2008-5104 State: PUBLISHED Published: 2008-11-17T18:00:00 Last Updated: 2024-08-07T10:40:16.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ubuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10, when installed as a virtual machine by (1) python-vm-builder or (2) ubuntu-vm-builder in VMBuilder 0.9 in Ubuntu 8.10, have ! (exclamation point) as the default root password, which allows attackers to bypass intended login restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32697 - http://www.securityfocus.com/bid/32292 - http://launchpadlibrarian.net/19619929/vm-builder_0.9-0ubuntu3.1.debdiff - http://www.ubuntu.com/usn/usn-67
/bid/32292 - http://launchpadlibrarian.net/19619929/vm-builder_0.9-0ubuntu3.1.debdiff - http://www.ubuntu.com/usn/usn-670-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46881 - https://bugs.launchpad.net/ubuntu/+source/vm-builder/+bug/296841
CVE ID: CVE-2008-5105 State: PUBLISHED Published: 2008-11-17T18:00:00 Last Updated: 2024-08-07T10:40:17.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash or hang) via certain (1) APPE, (2) CWD, (3) DELE, (4) MKD, (5) RMD, (6) RETR, (7) RNFR, (8) RNTO, (9) SIZE, and (10) STOR commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488198/100/200/threaded - http://www.securityfocus.com/bid/27817 - http://securityreason.com/securityalert/4603
CVE ID: CVE-2008-5106 State: PUBLISHED Published: 2008-11-17T18:00:00 Last Updated: 2024-08-07T10:40:17.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long argument to an arbitrary command, which triggers the overflow when the SamyFtp.binlog log file is viewed in the management console. NOTE: this may overlap CVE-2006-0441 and CVE-2006-2212. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488198/100/200/threaded - http://www.securityfocus.com/bid/27817 - http://
ces: - http://www.securityfocus.com/archive/1/488198/100/200/threaded - http://www.securityfocus.com/bid/27817 - http://securityreason.com/securityalert/4603
CVE ID: CVE-2008-5107 State: PUBLISHED Published: 2008-11-17T18:00:00 Last Updated: 2024-08-07T10:40:17.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX116228 - http://www.vupen.com/english/advisories/2008/0705/references - http://www.securityfocus.com/bid/28047
CVE ID: CVE-2008-5108 State: PUBLISHED Published: 2008-11-17T22:00:00 Last Updated: 2024-08-07T10:40:17.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe AIR 1.1 and earlier allows context-dependent attackers to execute untrusted JavaScript in an AIR application via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3189 - http://www.securityfocus.com/bid/32334 - http://www.securitytracker.com/id?1021242 - http://www.adobe.com/support/security/bulletins/apsb08-23.html - http://osvdb.org/49915 - http://secunia.com/advisories/32772
CVE ID: CVE-2008-5109 State: PUBLISHED Published: 2008-11-25T23:00:00Z Last Updated: 2024-09-16T16:57:53.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via stream-capture software. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32771 - http://www.osvdb.org/49952 - http://www.adobe.com/support/security/advisories/apsa08-11.html
CVE ID: CVE-2008-5110 State: PUBLISHED Published: 2008-11-17T22:00:00 Last Updated: 2024-08-07T10:40:17.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. NOTE: this is only a vulnerability when a separate vulnerability is present. This flaw affects syslog-ng versions prior to and including 2.0.9. Additional Analyst Notes: - CVE Program Container: References: - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 - http://security.gentoo.org/glsa/glsa-200907-10.xml - http://secunia.com/ad
ce/cki/docDisplay.do?docId=emr_na-c02286083 - http://security.gentoo.org/glsa/glsa-200907-10.xml - http://secunia.com/advisories/35748 - http://secunia.com/advisories/40551 - http://www.vupen.com/english/advisories/2010/1796 - http://www.openwall.com/lists/oss-security/2008/11/17/3 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505791
CVE ID: CVE-2008-5111 State: PUBLISHED Published: 2008-11-17T23:00:00 Last Updated: 2024-08-07T10:40:17.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the socket function in Sun Solaris 10 and OpenSolaris snv_57 through snv_91, when InfiniBand hardware is not installed, allows local users to cause a denial of service (panic) via unknown vectors, related to the socksdpv_close function. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-242806-1 - http://osvdb.org/49854 - http://secunia.com/advisories/32611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46611 - http://ww
org/49854 - http://secunia.com/advisories/32611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46611 - http://www.securityfocus.com/bid/32296 - http://securitytracker.com/id?1021231
CVE ID: CVE-2008-5112 State: PUBLISHED Published: 2008-11-17T23:00:00 Last Updated: 2024-08-07T10:40:17.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind requests, as demonstrated by ldapuserenum. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46628 - http://www.securityfocus.com/bid/32305 - http://labs.portcullis.co