Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4298 State: PUBLISHED Published: 2008-09-27T00:00:00 Last Updated: 2024-08-07T10:08:34.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests with duplicate request headers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32069 - http://bugs.gentoo.org/show_bug.cgi?id=238180 - http://secunia.com/advisories/32972 - http://www.openwall.com/lists/oss-security/2008/09/26/5 - http://trac.lighttpd.net/trac/changeset/2305 - http://wiki.rpa
http://www.openwall.com/lists/oss-security/2008/09/26/5 - http://trac.lighttpd.net/trac/changeset/2305 - http://wiki.rpath.com/Advisories:rPSA-2008-0309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45471 - http://secunia.com/advisories/32834 - http://www.securityfocus.com/bid/31434 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0309 - http://secunia.com/advisories/32132 - http://www.lighttpd.net/security/lighttpd_sa_2008_07.txt - http://www.securityfocus.com/archive/1/497932/100/0/threaded - http://www.vupen.com/english/advisories/2008/2741 - http://www.debian.org/security/2008/dsa-1645 - http://secunia.com/advisories/32480 - http://lists.opensuse.org/opensuse-security-announce/
org/security/2008/dsa-1645 - http://secunia.com/advisories/32480 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://trac.lighttpd.net/trac/ticket/1774 - http://security.gentoo.org/glsa/glsa-200812-04.xml
CVE ID: CVE-2008-4299 State: PUBLISHED Published: 2008-09-29T17:00:00 Last Updated: 2024-08-07T10:08:34.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in the Microsoft Internet Authentication Service (IAS) Helper COM Component in iashlpr.dll allows remote attackers to cause a denial of service (browser crash) via a large integer value in the first argument to the PutProperty method. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496695/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/4555
http://www.securityfocus.com/archive/1/496695/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45556 - http://securityreason.com/securityalert/4323
CVE ID: CVE-2008-4300 State: PUBLISHED Published: 2008-09-29T17:00:00 Last Updated: 2024-08-07T10:08:35.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services (IIS) allows remote attackers to cause a denial of service (browser crash) via a long string in the second argument to the GetObject method. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496696/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45584 - http://securityreason.com/securit
1/496696/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45584 - http://securityreason.com/securityalert/4325
CVE ID: CVE-2008-4301 State: PUBLISHED Published: 2008-09-29T17:00:00 Last Updated: 2024-08-07T10:08:35.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in iisext.dll in Microsoft Internet Information Services (IIS) allows remote attackers to set a password via a string argument to the SetPassword method. NOTE: this issue could not be reproduced by a reliable third party. In addition, the original researcher is unreliable. Therefore the original disclosure is probably erroneous Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496694/100/0/threaded - http://www.attrition.org/pipermail/vim/2008-Octo
ences: - http://www.securityfocus.com/archive/1/496694/100/0/threaded - http://www.attrition.org/pipermail/vim/2008-October/002081.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45587
CVE ID: CVE-2008-4302 State: PUBLISHED Published: 2008-09-29T17:00:00 Last Updated: 2024-08-07T10:08:35.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/09/16/10 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=comm
wall.com/lists/oss-security/2008/09/16/10 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=6a860c979b35469e4d77da781a96bdb2ca05ae64 - http://secunia.com/advisories/32485 - http://secunia.com/advisories/32237 - http://www.redhat.com/support/errata/RHSA-2008-0957.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45191 - http://www.debian.org/security/2008/dsa-1653 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10547 - https://bugzilla.redhat.com/show_bug.cgi?id=462434 - http://secunia.com/advisories/32759 - http://lkml.org/lkml/2007/7/20/168 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2 - htt
advisories/32759 - http://lkml.org/lkml/2007/7/20/168 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://www.securityfocus.com/bid/31201 - http://www.juniper.net/security/auto/vulnerabilities/vuln31201.html
CVE ID: CVE-2008-4303 State: PUBLISHED Published: 2008-12-23T18:13:00 Last Updated: 2024-08-07T10:08:35.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitrary SQL commands via the loginForm parameter to general/login.php, and unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19449 - http://bugs.gentoo.org/show_bug.cgi?id=235052 - http://www.securityfocus.com/bid/32964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47520 - http://security.gentoo.org/glsa/glsa-200812-20.xml - http://sec
s://exchange.xforce.ibmcloud.com/vulnerabilities/47520 - http://security.gentoo.org/glsa/glsa-200812-20.xml - http://secunia.com/advisories/33258
CVE ID: CVE-2008-4304 State: PUBLISHED Published: 2008-12-23T18:13:00 Last Updated: 2024-08-07T10:08:35.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified input related to the SSL_CLIENT_CERT environment variable. NOTE: in some environments, SSL_CLIENT_CERT always has a base64-encoded string value, which may impose constraints on injection for typical shells. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=235052 - http://www.securityfocus.com/bid/32964 - https://exchange.xforce.ib
s: - http://bugs.gentoo.org/show_bug.cgi?id=235052 - http://www.securityfocus.com/bid/32964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47522 - http://security.gentoo.org/glsa/glsa-200812-20.xml - http://secunia.com/advisories/33258
CVE ID: CVE-2008-4305 State: PUBLISHED Published: 2008-12-23T18:13:00 Last Updated: 2024-08-07T10:08:34.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and earlier allows remote authenticated administrators to inject arbitrary PHP code into include/settings.php via the URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19449 - http://bugs.gentoo.org/show_bug.cgi?id=235052 - http://www.securityfocus.com/bid/32964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47521 - http://security.gentoo.org/glsa/glsa-200812-20.xml - http://secunia.com/a
ge.xforce.ibmcloud.com/vulnerabilities/47521 - http://security.gentoo.org/glsa/glsa-200812-20.xml - http://secunia.com/advisories/33258
CVE ID: CVE-2008-4306 State: PUBLISHED Published: 2008-11-04T20:00:00 Last Updated: 2024-08-07T10:08:34.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10718 - http://secunia.com/advisories/32521 - http://osvdb.org/49569 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00040.html - https://www.redhat.c
g00000.html - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00040.html - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00014.html - http://www.redhat.com/support/errata/RHSA-2008-1016.html - http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm - http://www.ubuntu.com/usn/usn-660-1 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321 - http://security.gentoo.org/glsa/glsa-200812-02.xml - http://www.securityfocus.com/archive/1/498385/100/0/threaded - https://issues.rpath.com/browse/RPL-2887 - http://secunia.com/advisories/32854 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:243 - http://secunia.com/advisories/32970
dvisories/32854 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:243 - http://secunia.com/advisories/32970 - http://secunia.com/advisories/32530 - http://www.debian.org/security/2008/dsa-1670 - http://secunia.com/advisories/32753 - http://secunia.com/advisories/33109 - http://rhn.redhat.com/errata/RHSA-2008-1021.html
CVE ID: CVE-2008-4307 State: PUBLISHED Published: 2009-01-13T16:00:00 Last Updated: 2024-08-07T10:08:35.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34962 - http://openwall.com/lists/oss-security/2009/01/13/1 - http://secunia.com/advisories/37471 - http://rhn.redhat.com/
962 - http://openwall.com/lists/oss-security/2009/01/13/1 - http://secunia.com/advisories/37471 - http://rhn.redhat.com/errata/RHSA-2009-0459.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7728 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.debian.org/security/2009/dsa-1794 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=c4d7c402b788b73dc24f1e54a57f89d3dc5eb7bc - http://www.ubuntu.com/usn/usn-751-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26 - http://secunia.com/advisories/35015 - http://secunia.com/advisories/35011 - http://www.securityfocus.com/archive/1/5079
http://secunia.com/advisories/35015 - http://secunia.com/advisories/35011 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=456282 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9233 - http://secunia.com/advisories/34981 - http://secunia.com/advisories/34917 - http://www.debian.org/security/2009/dsa-1787 - http://rhn.redhat.com/errata/RHSA-2009-0473.html - http://www.redhat.com/support/errata/RHSA-2009-0451.html - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2008-4308 State: PUBLISHED Published: 2009-02-26T23:00:00 Last Updated: 2024-08-07T10:08:35.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN66905322/index.html - http://www.vupen.com/english/advisories/2009/0541 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000010.html - https://issues.apache.org/bugzilla/show_bug.cgi?id=40771 - htt
://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000010.html - https://issues.apache.org/bugzilla/show_bug.cgi?id=40771 - http://secunia.com/advisories/34057 - http://www.securityfocus.com/archive/1/501250 - http://www.securityfocus.com/bid/33913 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2008-4309 State: PUBLISHED Published: 2008-10-31T20:00:00 Last Updated: 2024-08-07T10:08:35.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service (crash) via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow, related to the number of responses or repeats. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33631 - http://secunia.com/advisories/32664 - http://secunia.com/advisories/32560 - http:
http://secunia.com/advisories/33631 - http://secunia.com/advisories/32664 - http://secunia.com/advisories/32560 - http://support.apple.com/kb/HT3549 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - http://www.vmware.com/security/advisories/VMSA-2009-0001.html - http://www.vupen.com/english/advisories/2009/0301 - http://secunia.com/advisories/33746 - http://www.redhat.com/support/errata/RHSA-2008-0971.html - http://secunia.com/advisories/35074 - http://secunia.com/advisories/35679 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9860 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://secuni
3Aorg.mitre.oval%3Adef%3A9860 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://secunia.com/advisories/33003 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-262908-1 - http://secunia.com/advisories/32539 - http://secunia.com/advisories/32711 - http://www.debian.org/security/2008/dsa-1663 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46262 - http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/tags/Ext-5-2-5-1/net-snmp/agent/snmp_agent.c?r1=17271&r2=17272&pathrev=17272 - http://www.openwall.com/lists/oss-security/2008/10/31/1 - http://lists.apple.c
agent.c?r1=17271&r2=17272&pathrev=17272 - http://www.openwall.com/lists/oss-security/2008/10/31/1 - http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://sourceforge.net/forum/forum.php?forum_id=882903 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6171 - http://secunia.com/advisories/33095 - http://www.vupen.com/english/advisories/2009/1297 - http://www.securitytracker.com/id?1021129 - http://support.apple.com/kb/HT4298 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0315 - http://support.avaya.com/elmodocs2/security/ASA-2008-467.htm - http://www.vupen.com/english/
Advisories:rPSA-2008-0315 - http://support.avaya.com/elmodocs2/security/ASA-2008-467.htm - http://www.vupen.com/english/advisories/2008/2973 - http://www.securityfocus.com/bid/32020 - http://secunia.com/advisories/33821 - http://www.vupen.com/english/advisories/2009/1771 - http://security.gentoo.org/glsa/glsa-200901-15.xml - http://www.securityfocus.com/archive/1/498280/100/0/threaded - http://marc.info/?l=bugtraq&m=125017764422557&w=2 - http://www.ubuntu.com/usn/usn-685-1 - http://marc.info/?l=bugtraq&m=125017764422557&w=2 - http://www.vupen.com/english/advisories/2008/3400 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:225
CVE ID: CVE-2008-4310 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:08:35.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request. NOTE: this issue exists because of an incomplete fix for CVE-2008-3656. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0981.html - https://bugzilla.redhat.com/show_bug.cgi?id=470252 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A102
.com/show_bug.cgi?id=470252 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10250 - http://www.openwall.com/lists/oss-security/2008/12/04/2 - http://secunia.com/advisories/33013
CVE ID: CVE-2008-4311 State: PUBLISHED Published: 2008-12-10T00:00:00 Last Updated: 2024-08-07T10:08:35.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages, related to receive_requested_reply. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=18229 - http://secunia.com/advisories/33047 - http://lists.opensuse.org/opensuse-updates/2012-10/msg00094
how_bug.cgi?id=18229 - http://secunia.com/advisories/33047 - http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47138 - http://secunia.com/advisories/34642 - https://bugzilla.redhat.com/show_bug.cgi?id=474895 - http://www.vupen.com/english/advisories/2008/3355 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00436.html - http://secunia.com/advisories/33055 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503532 - http://forums.fedoraforum.org/showthread.php?t=206797 - http://secunia.com/advisories/34360 - http://lists.fr
g=503532 - http://forums.fedoraforum.org/showthread.php?t=206797 - http://secunia.com/advisories/34360 - http://lists.freedesktop.org/archives/dbus/2008-December/010702.html - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html - http://www.securityfocus.com/bid/32674 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html
CVE ID: CVE-2008-4312 State: REJECTED Published: 2009-03-29T15:00:00Z Last Updated: 2024-09-16T18:18:17.729Z Description: No description available.
CVE ID: CVE-2008-4313 State: PUBLISHED Published: 2008-11-27T00:00:00 Last Updated: 2024-08-07T10:08:35.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021283 - https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9 - https://bugzilla.redhat.com/show_bug.cgi?id=459217 - https://oval.cisecurity.org/repository/search/definition/oval%3A
- https://bugzilla.redhat.com/show_bug.cgi?id=459217 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9556 - http://www.securityfocus.com/bid/32460 - http://www.redhat.com/support/errata/RHSA-2008-1001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46829 - http://osvdb.org/50277 - https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10 - http://secunia.com/advisories/32862
CVE ID: CVE-2008-4314 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:08:35.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans, (2) trans2, and (3) nttrans requests, related to a "cut&paste error" that causes an improper bounds check to be performed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32494 - http://secunia.com/advisories/32951 - http://secunia.com/advisories/32919 - http://secunia.com/advisories/36281 - http://osvdb.org/50230 - http://marc.info/?l=bu
p://secunia.com/advisories/32919 - http://secunia.com/advisories/36281 - http://osvdb.org/50230 - http://marc.info/?l=bugtraq&m=125003356619515&w=2 - http://www.ubuntu.com/usn/USN-680-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-249087-1 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html - http://marc.info/?l=bugtraq&m=125003356619515&w=2 - http://www.securitytracker.com/id?1021287 - http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00141.html - http://www.vupen.com/english/advisories/2008/3277 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.453684 - http://us1.samba.org/samba/security
re.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.453684 - http://us1.samba.org/samba/security/CVE-2008-4314.html - http://www.vupen.com/english/advisories/2009/2245 - http://secunia.com/advisories/32968 - http://www.vupen.com/english/advisories/2009/0067 - http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00021.html - http://us1.samba.org/samba/ftp/patches/security/samba-3.0.32-CVE-2008-4314.patch - http://secunia.com/advisories/32813
CVE ID: CVE-2008-4315 State: PUBLISHED Published: 2008-11-27T00:00:00 Last Updated: 2024-08-07T10:08:35.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=472017 - https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9 - http://www.securitytracker.com/id?1021281 - http://osvdb.org/50278 - http://www.
t.org/updates/tog-pegasus-2.7.0-7.fc9 - http://www.securitytracker.com/id?1021281 - http://osvdb.org/50278 - http://www.redhat.com/support/errata/RHSA-2008-1001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9431 - https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46830 - http://secunia.com/advisories/32862