Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4930 State: PUBLISHED Published: 2008-11-04T20:00:00Z Last Updated: 2024-09-16T23:10:27.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which allows remote attackers to cause that file to be processed as HTML by Internet Explorer's content inspection, aka "Incomplete protection against MIME-sniffing." NOTE: this could be leveraged for XSS and other attacks. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2008-10/0203.html - http://archives.neohapsis.com/archives/fu
ferences: - http://archives.neohapsis.com/archives/bugtraq/2008-10/0203.html - http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0472.html - http://www.openwall.com/lists/oss-security/2008/11/01/2
CVE ID: CVE-2008-4931 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the account module in firmCHANNEL Digital Signage 3.24, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the action parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32549 - http://www.securityfocus.com/archive/1/498042/100/0/threaded - http://securityreason.com/securityalert/4566 - http://osvdb.org/49564
CVE ID: CVE-2008-4932 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web document root. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46300 - http://www.securityfocus.com/archive/1/497961/100/0/threa
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46300 - http://www.securityfocus.com/archive/1/497961/100/0/threaded - http://www.securityfocus.com/bid/32013 - http://securityreason.com/securityalert/4565 - https://www.exploit-db.com/exploits/6898
CVE ID: CVE-2008-4933 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to the hfsplus_cat_build_key_uni function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32998 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:234 - http://git.kernel.org/?p=linux/kernel/git/sta
/32998 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:234 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=efc7ffcb4237f8cb9938909041c4ed38f6e1bf40 - http://secunia.com/advisories/33641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46405 - http://www.securityfocus.com/bid/32093 - http://www.redhat.com/support/errata/RHSA-2009-0014.html - http://secunia.com/advisories/33556 - http://www.debian.org/security/2008/dsa-1687 - http://rhn.redhat.com/errata/RHSA-2009-0264.html - http://secunia.com/advisories/32918 - http://secunia.com/advisories/33858 - http://www.ubuntu.com/usn/usn-679-1 - https://oval.cisecurity.org/repository/search/defi
/secunia.com/advisories/33858 - http://www.ubuntu.com/usn/usn-679-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11061 - http://www.openwall.com/lists/oss-security/2008/11/03/2 - http://secunia.com/advisories/32510 - http://secunia.com/advisories/33180 - http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc1 - http://secunia.com/advisories/33704 - http://www.debian.org/security/2008/dsa-1681 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html
CVE ID: CVE-2008-4934 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which allows attackers to cause a denial of service (system crash) via a crafted hfsplus filesystem image. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32998 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46327 - htt
.mandriva.com/security/advisories?name=MDVSA-2008:234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46327 - http://www.redhat.com/support/errata/RHSA-2009-0014.html - http://secunia.com/advisories/33556 - http://www.debian.org/security/2008/dsa-1687 - http://rhn.redhat.com/errata/RHSA-2009-0264.html - http://secunia.com/advisories/32918 - http://secunia.com/advisories/33858 - http://www.ubuntu.com/usn/usn-679-1 - http://www.openwall.com/lists/oss-security/2008/11/03/2 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=649f1ee6c705aab644035a7998d7b574193a598a - http://secunia.com/advisories/32510 - http://secunia.com/advisories/33180 - https://oval.c
ab644035a7998d7b574193a598a - http://secunia.com/advisories/32510 - http://secunia.com/advisories/33180 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11635 - http://www.securityfocus.com/bid/32096 - http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc1 - http://www.debian.org/security/2008/dsa-1681
CVE ID: CVE-2008-4935 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview#####.pgm temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://dev.gentoo.org/~rbu/security/debiantemp/aview - http://security.gentoo.org/glsa/glsa-200812-14.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/44837 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://www.securityfocus.com/bid/30885 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.deb
2008/10/30/2 - http://www.securityfocus.com/bid/30885 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.debian.org/496422 - http://secunia.com/advisories/33139 - https://bugs.gentoo.org/235808
CVE ID: CVE-2008-4936 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/show_bug.cgi?id=235806 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44833 - http://uvw.ru/report.lenny.txt - http://dev.gentoo.org/~rbu/security/debiantemp/mgetty-fax - http://secunia.com/advis
- http://uvw.ru/report.lenny.txt - http://dev.gentoo.org/~rbu/security/debiantemp/mgetty-fax - http://secunia.com/advisories/33051 - http://bugs.debian.org/496403 - http://www.securityfocus.com/bid/30927 - http://security.gentoo.org/glsa/glsa-200812-08.xml
CVE ID: CVE-2008-4937 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: senddoc in OpenOffice.org (OOo) 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr.##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-677-2 - http://secunia.com/advisories/32856 - http://bugs.debian.org/496361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44829 - http://www.securityfocus.com/bid/30925 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - htt
d/30925 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://www.ubuntu.com/usn/usn-677-1 - http://security.gentoo.org/glsa/glsa-200812-13.xml - http://dev.gentoo.org/~rbu/security/debiantemp/openoffice.org-common - https://bugs.gentoo.org/235824 - http://secunia.com/advisories/33140 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:070
CVE ID: CVE-2008-4938 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####, (b) /tmp/#####.intro, (c) /tmp/aegis.#####.ae, (d) /tmp/aegis.#####, (e) /tmp/aegis.#####.1, (f) /tmp/aegis.#####.2, (g) /tmp/aegis.#####.log, and (h) /tmp/aegis.#####.out temporary files, related to the (1) bng_dvlpd.sh, (2) bng_rvwd.sh, (3) awt_dvlp.sh, (4) awt_intgrtn.sh, and (5) aegis.cgi scripts. Additional Analyst Notes: - CVE Program Container: References: - http://dev.gentoo.org/~rbu/security/debiantemp/
cripts. Additional Analyst Notes: - CVE Program Container: References: - http://dev.gentoo.org/~rbu/security/debiantemp/aegis - https://exchange.xforce.ibmcloud.com/vulnerabilities/44835 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496402 - http://www.securityfocus.com/bid/30883 - http://uvw.ru/report.lenny.txt - http://secunia.com/advisories/31970 - http://sourceforge.net/tracker/index.php?func=detail&aid=2079025&group_id=224&atid=100224 - http://bugs.debian.org/496402 - http://dev.gentoo.org/~rbu/security/debiantemp/aegis-web - http://bugs.debian.org/496400
CVE ID: CVE-2008-4939 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: apertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####.lex.cc, (b) /tmp/#####.deformat.l, (c) /tmp/#####.reformat.l, (d) /tmp/#####docxorig, (e) /tmp/#####docxsalida.zip, (f) /tmp/#####xlsxembed, (g) /tmp/#####xlsxorig, and (h) /tmp/#####xslxsalida.zip temporary files, related to the (1) apertium-gen-deformat, (2) apertium-gen-reformat, and (3) apertium scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2
Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44854 - http://bugs.debian.org/496395 - http://dev.gentoo.org/~rbu/security/debiantemp/apertium - http://www.securityfocus.com/bid/30896 - http://uvw.ru/report.lenny.txt
CVE ID: CVE-2008-4940 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: xmlfile.py in aptoncd 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/aptoncd temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/496390 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://dev.gentoo.org/~rbu/security/debiantemp/aptoncd - https://exchange.xforce.ibmcloud.com/vulnerabilities/44756 - http://www.securityfocus.com/bid/30882
CVE ID: CVE-2008-4941 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/arb_fdnaml_*, (b) /tmp/arb_pids_*, (c) /tmp/arbdsmz.html, and (d) /tmp/arbdsmz.htm temporary files, related to the (1) arb_fastdnaml and (2) dszmconnect.pl scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://www.securityfocus.com/bid/30895 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://bugs.de
tyfocus.com/bid/30895 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://bugs.debian.org/496396 - http://dev.gentoo.org/~rbu/security/debiantemp/arb-common - https://exchange.xforce.ibmcloud.com/vulnerabilities/44844
CVE ID: CVE-2008-4942 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: audiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/audiolink.db.tmp and (2) /tmp/audiolink.tb.tmp temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44757 - http://dev.gentoo.org/~rbu/security/debiantemp/audiolink - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://www.securityfocus.com/b
/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://www.securityfocus.com/bid/30886 - http://bugs.debian.org/496433
CVE ID: CVE-2008-4943 State: PUBLISHED Published: 2008-11-05T14:51:00Z Last Updated: 2024-09-16T23:27:00.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/error.txt, (b) /tmp/errores.txt, and possibly other temporary files, related to the (1) creabulmafact, (2) creabulmacont, and possibly (3) actualizabulmacont, (4) installbulmages-db, and (5) actualizabulmafact scripts. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/496382 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 -
.org/496382 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/bulmages-servers
CVE ID: CVE-2008-4944 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: writtercontrol in cdcontrol 1.90 allows local users to overwrite arbitrary files via a symlink attack on /tmp/v-recorder*-out temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://dev.gentoo.org/~rbu/security/debiantemp/cdcontrol - http://bugs.debian.org/496438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44839 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://www.securityfocus.com/bid
0/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://www.securityfocus.com/bid/30892
CVE ID: CVE-2008-4945 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: amlabel-cdrw in cdrw-taper 0.4 might allow local users to overwrite arbitrary files via a symlink attack involving a /tmp/amlabel-cdrw.##### temporary directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://dev.gentoo.org/~rbu/security/debiantemp/cdrw-taper - http://www.securityfocus.com/bid/30890 - http://bugs.debian.org/496380 - https://exchange.xforce.ibmcloud
p/cdrw-taper - http://www.securityfocus.com/bid/30890 - http://bugs.debian.org/496380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44842
CVE ID: CVE-2008-4946 State: PUBLISHED Published: 2008-11-05T14:51:00Z Last Updated: 2024-09-16T16:13:36.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: convirt 0.8.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/set_output temporary file, related to the (1) _template_/provision.sh, (2) Linux_CD_Install/provision.sh, (3) Fedora_PV_Install/provision.sh, (4) CentOS_PV_Install/provision.sh, (5) common/provision.sh, (6) example/provision.sh, and (7) Windows_CD_Install/provision.sh scripts in image_store/. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo
es: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/convirt - http://bugs.debian.org/496419
CVE ID: CVE-2008-4947 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: dhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://dev.gentoo.org/~rbu/security/debiantemp/dhis-server - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://bugs.debian.org/496388 - http://www.securityfocus.com/bid/30900
CVE ID: CVE-2008-4948 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddj_fest.tmp temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://bugs.debian.org/496399 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://www.securityfocus.com/bid/30904 - http://dev.gentoo.org/~rbu/security/debiantemp/digitaldj
CVE ID: CVE-2008-4949 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/cil#####, (b) /tmp/pdo#####, and (c) /tmp/pdn##### temporary files, related to the (1) patcil and (2) patdiff scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://www.securityfocus.com/bid/30908 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.debian.org/496412 - http://uvw.ru/report.lenny.txt - http://dev.gentoo.org/~rbu/security/debiantem
=235770 - http://bugs.debian.org/496412 - http://uvw.ru/report.lenny.txt - http://dev.gentoo.org/~rbu/security/debiantemp/dist - https://exchange.xforce.ibmcloud.com/vulnerabilities/44818
CVE ID: CVE-2008-4950 State: PUBLISHED Published: 2008-11-05T14:51:00Z Last Updated: 2024-09-17T01:31:42.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments within a chroot. Additional Analyst Notes: - CVE Program Container: References: - http://dev.gentoo.org/~rbu/security/debiantemp/dpkg-cross - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.c
ity/debiantemp/dpkg-cross - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.debian.org/496413
CVE ID: CVE-2008-4951 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/awstats.log, (b) /tmp/spam.log.#####, and (c) /tmp/spam_err.log temporary files, related to the (1) accesslog.php and (2) sa-wrapper scripts. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/496362 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - https://bugs.gentoo.org/show_bug.cgi?id=235812 - http://dev.gentoo.org/~rbu/security/debiantem
/show_bug.cgi?id=235770 - https://bugs.gentoo.org/show_bug.cgi?id=235812 - http://dev.gentoo.org/~rbu/security/debiantemp/dtc-common - https://exchange.xforce.ibmcloud.com/vulnerabilities/46411
CVE ID: CVE-2008-4952 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: emacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://bugs.debian.org/496428 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/emacs-jabber - https://exchange.xforce.ibmcloud.com/vulnerabilities/46409
CVE ID: CVE-2008-4953 State: PUBLISHED Published: 2008-11-05T14:51:00Z Last Updated: 2024-09-17T02:53:26.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/.firehol-tmp-#####-*-* and (2) /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824*PID-RANGE symlinks. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/fir
urity/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/firehol - http://bugs.debian.org/496424
CVE ID: CVE-2008-4954 State: PUBLISHED Published: 2008-11-05T14:51:00 Last Updated: 2024-08-07T10:31:28.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://dev.gentoo.org/~rbu/security/debiantemp/fml - http://bugs.debian.org/496370 - http://www.securityfocus.com/bid/30903