Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2517 State: PUBLISHED Published: 2008-06-03T14:00:00 Last Updated: 2024-08-07T09:05:30.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sarab.sh script in SaraB before 0.2.4 places the dar program's encryption key on the command line, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42621 - http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34&r2=36 - http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log - http://www.vupen.com/english/advisories/2008/1659/references - http://sourc
e.net/viewvc/sarab/sarab/sarab.sh?view=log - http://www.vupen.com/english/advisories/2008/1659/references - http://sourceforge.net/project/shownotes.php?release_id=601603&group_id=91804 - http://www.securityfocus.com/bid/29364 - http://secunia.com/advisories/30394
CVE ID: CVE-2008-2518 State: PUBLISHED Published: 2008-06-03T14:00:00 Last Updated: 2024-08-07T09:05:29.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search/advanced.jsp) in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1649/references - http://secunia.com/advisories/30381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42624 - http
649/references - http://secunia.com/advisories/30381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42624 - http://www.securityfocus.com/bid/29355 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-236481-1 - http://www.securitytracker.com/id?1020110
CVE ID: CVE-2008-2519 State: PUBLISHED Published: 2008-06-03T14:00:00 Last Updated: 2024-08-07T09:05:29.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Core FTP client 2.1 Build 1565 allows remote FTP servers to create or overwrite arbitrary files via .. (dot dot) sequences in responses to LIST commands, a related issue to CVE-2002-1345. NOTE: this can be leveraged for code execution by writing to a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42605 - http://vuln.sg/coreftp211565-en.html - http://www.securityfocus.com/bid/29362 - http://www.vupen.com/e
abilities/42605 - http://vuln.sg/coreftp211565-en.html - http://www.securityfocus.com/bid/29362 - http://www.vupen.com/english/advisories/2008/1643/references - http://secunia.com/advisories/30389 - http://www.coreftp.com/forums/viewtopic.php?t=6078
CVE ID: CVE-2008-2520 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:29.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[_BIGACE][DIR][addon] parameter to (a) addon/smarty/plugins/function.captcha.php and (b) system/classes/sql/AdoDBConnection.php; and the (2) GLOBALS[_BIGACE][DIR][admin] parameter to (c) item_information.php and (d) jstree.php in system/application/util/, and (e) system/admin/plugins/menu/menuTree/plugin.php, different vectors than CVE-2006-4423. Ad
ystem/application/util/, and (e) system/admin/plugins/menu/menuTree/plugin.php, different vectors than CVE-2006-4423. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29157 - https://www.exploit-db.com/exploits/5596 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42343 - http://secunia.com/advisories/30183
CVE ID: CVE-2008-2521 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:29.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authenticated users to execute arbitrary SQL commands via the fid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42355 - https://www.exploit-db.com/exploits/5598 - http://www.securityfocus.com/bid/29167 - http://secunia.com/advisories/30210
CVE ID: CVE-2008-2522 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:30.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in members.php in Battle.net Clan Script for PHP 1.5.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showmember parameter in a members action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42354 - http://secunia.com/advisories/30211 - http://www.securityfocus.com/bid/29166
CVE ID: CVE-2008-2523 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:30.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Autopatcher server plugin in RakNet before 3.23 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30200 - http://www.jenkinssoftware.com/raknet/forum/index.php?topic=1787.0 - http://www.securityfocus.com/bid/29178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42352
CVE ID: CVE-2008-2524 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:29.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username field in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42372 - http://secunia.com/advisories/30165 - http://www.davidsopas.com/soapbox/blogphp.txt
CVE ID: CVE-2008-2525 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:30.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Event Database (aka rlmp_eventdb) extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080513-3/ - http://www.securityfocus.com/bid/29180 - http://secunia.com/advisories/30218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42361
CVE ID: CVE-2008-2526 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:30.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WT Gallery (aka wt_gallery) extension 2.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30217 - http://typo3.org/teams/security/security-bulletins/typo3-20080513-1/ - http://www.securityfocus.com/bid/29182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42363
CVE ID: CVE-2008-2527 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:29.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30205 - http://www.securityfocus.com/bid/29177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42367 - http://www
30205 - http://www.securityfocus.com/bid/29177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42367 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls52 - http://www.securityfocus.com/archive/1/491982/100/0/threaded
CVE ID: CVE-2008-2528 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:30.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attackers to bypass authentication and gain "access to network resources" via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29174 - http://support.citrix.com/article/CTX116930 - http://www.vupen.com/english/advisories/2008/1474/references - http://secunia.com/advisories/30175 - http://www.securitytracker.com/id?1020025 - ht
h/advisories/2008/1474/references - http://secunia.com/advisories/30175 - http://www.securitytracker.com/id?1020025 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42356
CVE ID: CVE-2008-2529 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:29.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in read.php in Advanced Links Management (ALM) 1.5.2 allows remote attackers to execute arbitrary SQL commands via the catId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5581 - http://www.securityfocus.com/bid/29137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42320
CVE ID: CVE-2008-2530 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:29.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the (1) nr parameter to (a) frontend/news.php, the (2) id parameter to (b) events3.php and (c) videos2.php in frontend/, the (3) y parameter to (d) frontend/events2.php, and the (4) ser parameter to (e) frontend/fotos2.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42325 - http://www.securityfocus.com/bid/29145 - https:
ferences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42325 - http://www.securityfocus.com/bid/29145 - https://www.exploit-db.com/exploits/5588
CVE ID: CVE-2008-2531 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:30.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search script in Build A Niche Store (BANS) 3.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42373 - http://holisticinfosec.org/content/view/64/45/ - http://secunia.com/advisories/30153 - http://www.securityfocus.com/bid/29187
CVE ID: CVE-2008-2532 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:29.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum/topic_detail.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42382 - http://www.securityfocus.com/bid/29173
CVE ID: CVE-2008-2533 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:29.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ltarget parameter to (a) admin/admin_frame.php and the (2) conf parameter to (b) gbuch.admin.php, (c) links.admin.php, (d) menue.admin.php, (e) news.admin.php, and (f) todo.admin.php in admin/module/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29130 - https://www.exploit-db.com/exploits/5578 - https://excha
ntainer: References: - http://www.securityfocus.com/bid/29130 - https://www.exploit-db.com/exploits/5578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42314
CVE ID: CVE-2008-2534 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:30.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/admin_frame.php in Phoenix View CMS Pre Alpha2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ltarget parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42315
CVE ID: CVE-2008-2535 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:29.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbitrary SQL commands via the del parameter to (1) gbuch.admin.php, (2) links.admin.php, (3) menue.admin.php, (4) news.admin.php, and (5) todo.admin.php in admin/module/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42316
CVE ID: CVE-2008-2536 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:29.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting (AIH) Script 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the t parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5601 - http://www.securityfocus.com/bid/29172 - http://secunia.com/advisories/30207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42405
CVE ID: CVE-2008-2537 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:29.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42312 - https://www.exploit-db.com/exploits/5577
CVE ID: CVE-2008-2538 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:30.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv_93, allows local users to insert cron jobs into the crontab files of arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-237864-1 - http://support.avaya.com/elmodocs2/security/ASA-2008-222.htm - http://www.vupen.com/english/advisories/2008/1714 - http://secunia.com/advisories/30482 - https://oval.cisecurity.org/repository/sear
pen.com/english/advisories/2008/1714 - http://secunia.com/advisories/30482 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4725 - http://securitytracker.com/id?1020151 - http://secunia.com/advisories/30542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42763
CVE ID: CVE-2008-2539 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:30.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sun Cluster Global File System in Sun Cluster 3.1 on Sun Solaris 8 through 10, when an underlying ufs filesystem is used, might allow local users to read data from arbitrary deleted files, or corrupt files in global filesystems, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-201341-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42762 - http://www.vupen.com/english/advisories/2008/1713 - http://www.securitytracker.c
ce.ibmcloud.com/vulnerabilities/42762 - http://www.vupen.com/english/advisories/2008/1713 - http://www.securitytracker.com/id?1020152 - http://secunia.com/advisories/30483 - http://www.securityfocus.com/bid/29458
CVE ID: CVE-2008-2540 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T09:05:30.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the (1) Desktop directory on Windows or (2) Downloads directory on Mac OS X, and subsequently allows remote attackers to execute arbitrary code on Windows by leveraging an untrusted search path vulnerability in (a) Internet Explorer 7 on Windows XP or (b) the SearchPath function in Windows XP, Vista, and Server 2003 and 2008, aka
a) Internet Explorer 7 on Windows XP or (b) the SearchPath function in Windows XP, Vista, and Server 2003 and 2008, aka a "Carpet Bomb" and a "Blended Threat Elevation of Privilege Vulnerability," a different issue than CVE-2008-1032. NOTE: Apple considers this a vulnerability only because the Microsoft products can load application libraries from the desktop and, as of 20080619, has not covered the issue in an advisory for Mac OS X. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30467 - http://www.vupen.com/english/advisories/2009/1028 - http://www.securitytracker.com/id?1022047 - http://securitytracker.com/id?1020150 - http://www.securityfocu
/2009/1028 - http://www.securitytracker.com/id?1022047 - http://securitytracker.com/id?1020150 - http://www.securityfocus.com/bid/29445 - http://www.microsoft.com/technet/security/advisory/953818.mspx - http://www.vupen.com/english/advisories/2009/1029 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8509 - http://blogs.zdnet.com/security/?p=1230 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014 - http://www.dhanjani.com/archives/2008/05/safari_carpet_bomb.html - http://lists.apple.com/archives/secu
/2009/ms09-014 - http://www.dhanjani.com/archives/2008/05/safari_carpet_bomb.html - http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html - http://aviv.raffon.net/2008/05/31/SafariPwnsInternetExplorer.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42765 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-015 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6108 - http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm - http://www.vupen.com/english/advisories/2008/1706
CVE ID: CVE-2008-2541 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T09:05:30.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses, related to (1) the file month field in a LIST command; (2) the PASV command; and (3) directories, files, and links in a LIST command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493087/100/0/threaded - http://secunia.com/advisories/30518 - http://dvl
ences: - http://www.securityfocus.com/archive/1/493087/100/0/threaded - http://secunia.com/advisories/30518 - http://dvlabs.tippingpoint.com/advisory/TPTI-08-05 - http://www.securityfocus.com/bid/29528 - http://www.securityfocus.com/archive/1/493082/100/0/threaded - http://www.securityfocus.com/archive/1/493124/100/0/threaded - http://www.vupen.com/english/advisories/2008/1741/references - http://www.securitytracker.com/id?1020167 - http://www.zerodayinitiative.com/advisories/ZDI-08-035/ - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36408 - https://support.ca.com/irj/portal/anonymous/SolutionResults?aparNo=QO99987&os=NT&actionID=3 - http://www.securityfocus.com/archive/1/49308
.com/irj/portal/anonymous/SolutionResults?aparNo=QO99987&os=NT&actionID=3 - http://www.securityfocus.com/archive/1/493084/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42821 - http://www.zerodayinitiative.com/advisories/ZDI-08-036
CVE ID: CVE-2008-2542 State: PUBLISHED Published: 2008-06-05T20:21:00 Last Updated: 2024-08-07T09:05:30.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the getline function in Ppm/ppm.C in NASA Ames Research Center BigView 1.8 allows user-assisted remote attackers to execute arbitrary code via a crafted PNM file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42847 - http://www.vupen.com/english/advisories/2008/1745/references - http://secunia.com/advisories/30546 - http://www.coresecurity.com/?action=item&id=2304 - http://securityreason.com/securityalert/3924 - http://www.se
/30546 - http://www.coresecurity.com/?action=item&id=2304 - http://securityreason.com/securityalert/3924 - http://www.securityfocus.com/bid/29517 - http://www.securityfocus.com/archive/1/493112/100/0/threaded
CVE ID: CVE-2008-2543 State: PUBLISHED Published: 2008-06-05T20:21:00 Last Updated: 2024-08-07T09:05:30.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP port that is intended solely for localhost communication, and interprets some TCP application-data fields as addresses of memory to free, which allows remote attackers to cause a denial of service (daemon crash) via crafted TCP packets. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.digium.com/pub/security/AST-2008-009.html - http://www.securityfocus.com/bid
m Container: References: - http://downloads.digium.com/pub/security/AST-2008-009.html - http://www.securityfocus.com/bid/29567 - http://securitytracker.com/id?1020202 - http://www.vupen.com/english/advisories/2008/1747/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42869 - http://secunia.com/advisories/30555 - http://www.securityfocus.com/archive/1/493144/100/0/threaded - http://www.securityfocus.com/archive/1/493122/100/0/threaded
CVE ID: CVE-2008-2544 State: PUBLISHED Published: 2021-05-27T12:28:53 Last Updated: 2024-08-07T09:05:30.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=213135