Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2075 State: PUBLISHED Published: 2008-05-05T16:00:00 Last Updated: 2024-08-07T08:49:57.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup - http://www.securityfocus.com/archive/1/491513/100/0/threaded - http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125&r2=126 - http://www.wendzel.de/?sub=showpost&blogid=5&postid=56 - http://secunia.com/ad
wvc/astrocam/v2.x/pic.php?r1=125&r2=126 - http://www.wendzel.de/?sub=showpost&blogid=5&postid=56 - http://secunia.com/advisories/30039 - http://www.securityfocus.com/bid/28998 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42122 - http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup - http://securityreason.com/securityalert/3852
CVE ID: CVE-2008-2076 State: PUBLISHED Published: 2008-05-05T16:00:00 Last Updated: 2024-08-07T08:49:57.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the style parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42128 - http://www.securityfocus.com/bid/29007 - https://www.exploit-db.com/exploits/5528
CVE ID: CVE-2008-2077 State: PUBLISHED Published: 2008-05-05T16:00:00 Last Updated: 2024-08-07T08:49:57.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to "data form list view." Additional Analyst Notes: - CVE Program Container: References: - http://www.plainblack.com/getwebgui/advisories/webgui-7_4_35-stable-released - http://www.securityfocus.com/bid/28988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42118 - http://secunia.com/advisories/29985 - http://sourceforge.net/project/shownotes.php?release_id=595907&group_id=51417
CVE ID: CVE-2008-2078 State: PUBLISHED Published: 2008-05-05T16:00:00 Last Updated: 2024-08-07T08:49:57.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecified vectors related to the AWT Event Queue. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=596393 - http://secunia.com/advisories/30043 - http://www.securityfocus.com/bid/29016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42136
CVE ID: CVE-2008-2079 State: PUBLISHED Published: 2008-05-05T16:00:00 Last Updated: 2024-08-07T08:49:57.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future. Additional Analyst Notes: - CVE Program Container: References: - http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-60.html - http://lists.opensuse.org/opensuse-secu
ferences: - http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-60.html - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://www.ubuntu.com/usn/USN-671-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42267 - http://www.securitytracker.com/id?1019995 - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/31687 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10133 - http://secunia.com/advisories/31226 - http://www.redhat.com/support/errata/RHSA-2009-1289.html - http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html - http://www.redhat.com/support/errata/RHSA-2008-0768.html - http://secu
ev.mysql.com/doc/refman/4.1/en/news-4-1-24.html - http://www.redhat.com/support/errata/RHSA-2008-0768.html - http://secunia.com/advisories/30134 - http://secunia.com/advisories/32769 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:149 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-24.html - http://secunia.com/advisories/32222 - http://www.vupen.com/english/advisories/2008/1472/references - http://secunia.com/advisories/31066 - http://support.apple.com/kb/HT3865 - http://dev.mysql.com/doc/refman/6.0/en/news-6-0-5.html - http://secunia.com/advisories/36701 - http://www.redhat.com/support/errata/RHSA-200
/doc/refman/6.0/en/news-6-0-5.html - http://secunia.com/advisories/36701 - http://www.redhat.com/support/errata/RHSA-2008-0505.html - http://www.vupen.com/english/advisories/2008/2780 - http://www.securityfocus.com/bid/29106 - http://www.redhat.com/support/errata/RHSA-2008-0510.html - http://bugs.mysql.com/bug.php?id=32167 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:150 - http://www.debian.org/security/2008/dsa-1608 - http://secunia.com/advisories/36566 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216
CVE ID: CVE-2008-2080 State: PUBLISHED Published: 2008-05-06T15:00:00 Last Updated: 2024-08-07T08:49:58.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CDF) library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags. Additional Analyst Notes: - CVE Program Container: References: - http://cdf.gsfc.nasa.gov/CDF32_buffer_overflow.html - http://www.coresecurity.com/?action=item&id=2260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42219 - http://www.vupen.com/english/advis
m/?action=item&id=2260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42219 - http://www.vupen.com/english/advisories/2008/1440/references - http://www.securitytracker.com/id?1019965 - http://security.gentoo.org/glsa/glsa-200805-14.xml - http://www.securityfocus.com/bid/29045 - http://secunia.com/advisories/30053 - http://secunia.com/advisories/30169
CVE ID: CVE-2008-2081 State: PUBLISHED Published: 2008-05-05T17:00:00 Last Updated: 2024-08-07T08:49:57.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the module parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42022 - https://www.exploit-db.com/exploits/5499 - http://ircrash.com/english/index.php?topic=29.0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42021
CVE ID: CVE-2008-2082 State: PUBLISHED Published: 2008-05-05T17:00:00 Last Updated: 2024-08-07T08:49:57.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web script or HTML via the module parameter, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28943 - https://www.exploit-db.com/exploits/5499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42020 - http://ircrash.com/english/index.php?topic=29.0
CVE ID: CVE-2008-2083 State: PUBLISHED Published: 2008-05-05T17:00:00 Last Updated: 2024-08-07T08:49:57.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5516 - http://securityreason.com/securityalert/3853 - http://secunia.com/advisories/29936 - http://advisories.echo.or.id/adv/adv88-K-159-2008.txt - http://www.securityfocus.com/bid/28970 - https://exchange.xforce.ibmcloud.c
sories.echo.or.id/adv/adv88-K-159-2008.txt - http://www.securityfocus.com/bid/28970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42269 - http://www.securityfocus.com/archive/1/491395/100/0/threaded
CVE ID: CVE-2008-2084 State: PUBLISHED Published: 2008-05-05T17:00:00 Last Updated: 2024-08-07T08:49:57.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a listarticles action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42016 - https://www.exploit-db.com/exploits/5505
CVE ID: CVE-2008-2085 State: PUBLISHED Published: 2008-05-12T16:00:00 Last Updated: 2024-08-07T08:49:57.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the (1) get_remote_ip_media and (2) get_remote_ipv6_media functions in call.cpp in SIPp 3.1 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted SIP message. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00311.html - http://secunia.com/advisories/30095 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00318.html
- http://secunia.com/advisories/30095 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00318.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=479039 - http://secunia.com/advisories/30993 - http://www.securityfocus.com/bid/29064 - http://www.vupen.com/english/advisories/2008/1447/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42234
CVE ID: CVE-2008-2086 State: PUBLISHED Published: 2008-12-05T02:00:00 Last Updated: 2024-08-07T08:49:57.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126583436323697&w=2 - http://www.redhat.com/support/errata/RHSA-2008-10
ner: References: - http://marc.info/?l=bugtraq&m=126583436323697&w=2 - http://www.redhat.com/support/errata/RHSA-2008-1018.html - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html - http://www.vupen.com/english/advisories/2009/0672 - http://www.securityfocus.com/bid/32620 - http://securityreason.com/securityalert/4693 - http://secunia.com/advisories/33015 - http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm - http://secunia.com/advisories/34889 - http://secunia.com/advisories/34233 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf - http://support.avaya.com/elmodocs2/securit
p://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf - http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5601 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html - http://marc.info/?l=bugtraq&m=123678756409861&w=2 - http://secunia.com/advisories/38539 - http://osvdb.org/50510 - http://secunia.com/advisories/35065 - http://secunia.com/advisories/33528 - http://www.vsecurity.com/bulletins/advisories/2008/JWS-props.txt - http://www.vupen.com/english/advisories/2009/0424 - http://www.securitytracker.com/id?1021318 - http://rhn.redhat.com/errata/RHSA-
.vupen.com/english/advisories/2009/0424 - http://www.securitytracker.com/id?1021318 - http://rhn.redhat.com/errata/RHSA-2008-1025.html - http://marc.info/?l=bugtraq&m=126583436323697&w=2 - http://marc.info/?l=bugtraq&m=123678756409861&w=2 - http://www.redhat.com/support/errata/RHSA-2009-0445.html - http://www.redhat.com/support/errata/RHSA-2009-0016.html - http://www.securityfocus.com/archive/1/498907/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA08-340A.html - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid= - http://secunia.com/advisories/34605 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://www.redhat.com/supp
visories/34605 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://www.redhat.com/support/errata/RHSA-2009-0015.html - http://secunia.com/advisories/32991 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1 - http://secunia.com/advisories/37386 - http://secunia.com/advisories/33710
CVE ID: CVE-2008-2087 State: PUBLISHED Published: 2008-05-06T15:00:00 Last Updated: 2024-08-07T08:49:57.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the host_id parameter, a different vector than CVE-2005-3817. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28971 - http://secunia.com/advisories/29983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42096 - https://www.exploit-db.com/exploits/5517 - http://www.securityfocus.com/archive/1
e.ibmcloud.com/vulnerabilities/42096 - https://www.exploit-db.com/exploits/5517 - http://www.securityfocus.com/archive/1/491396/100/0/threaded - http://advisories.echo.or.id/adv/adv89-K-159-2008.txt - http://securityreason.com/securityalert/3855
CVE ID: CVE-2008-2088 State: PUBLISHED Published: 2008-05-06T15:00:00 Last Updated: 2024-08-07T08:49:57.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42017 - http://www.securityfocus.com/bid/28950 - http://www.vupen.com/english/advisories/2008/1386/references
CVE ID: CVE-2008-2089 State: PUBLISHED Published: 2008-05-06T15:00:00 Last Updated: 2024-08-07T08:49:57.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (panic) via a crafted SCTP packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29973 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5165 - http://www.securitytracker.com/id?1019961 - http://www.vupen.com/english/advisories/2008/1429/references - http://www.securityfocus.com/bid/29023 - http://sunsolve.sun
p://www.vupen.com/english/advisories/2008/1429/references - http://www.securityfocus.com/bid/29023 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-236321-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42160
CVE ID: CVE-2008-2090 State: PUBLISHED Published: 2008-05-06T15:00:00 Last Updated: 2024-08-07T08:49:57.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (CPU consumption and network traffic amplification) via a crafted SCTP packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29973 - http://www.securityfocus.com/bid/29024 - http://www.vupen.com/english/advisories/2008/1429/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5258 - http://www.security
nces - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5258 - http://www.securitytracker.com/id?1019962 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-236521-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42160
CVE ID: CVE-2008-2091 State: PUBLISHED Published: 2008-05-06T16:00:00 Last Updated: 2024-08-07T08:49:57.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute arbitrary local files via the i parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41905 - https://www.exploit-db.com/exploits/5477 - http://www.vupen.com/english/advisories/2008/1341/references - http://www.securityfocus.com/bid/28873
CVE ID: CVE-2008-2092 State: PUBLISHED Published: 2008-05-06T16:00:00 Last Updated: 2024-08-07T08:49:58.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). NOTE: the severity of this issue has been disputed since there are limited attack scenarios. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=120638162819268&w=2 - http://marc.info/?l=bugtraq&m=120637551306325&w=2 - http://www.securityfocus.com/bid/28414 - http://marc.info/?l=bugtraq&m=120637257800425&w=2 - http://marc.info/?l=bugtraq&m=1206382
.securityfocus.com/bid/28414 - http://marc.info/?l=bugtraq&m=120637257800425&w=2 - http://marc.info/?l=bugtraq&m=120638296821936&w=2 - http://marc.info/?l=bugtraq&m=120645736414059&w=2 - http://secunia.com/advisories/29523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41436
CVE ID: CVE-2008-2093 State: PUBLISHED Published: 2008-05-06T16:00:00 Last Updated: 2024-08-07T08:49:57.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Profiler (com_comprofiler) component in Community Builder for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42008 - https://www.exploit-db.com/exploits/5491 - http://www.securityfocus.com/bid/28911
CVE ID: CVE-2008-2094 State: PUBLISHED Published: 2008-05-06T16:00:00 Last Updated: 2024-08-07T08:49:57.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28879 - http://securityreason.com/securityalert/3856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41943 - http://www.securityfocus.com/archive/1/491150/100/0/threaded
CVE ID: CVE-2008-2095 State: PUBLISHED Published: 2008-05-06T16:00:00 Last Updated: 2024-08-07T08:49:58.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the FlippingBook (com_flippingbook) 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the book_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28886 - http://www.vupen.com/english/advisories/2008/1342/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41942 - https://www.exploit-db.com/exploits/5484
CVE ID: CVE-2008-2096 State: PUBLISHED Published: 2008-05-07T19:00:00 Last Updated: 2024-08-07T08:49:57.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in BackLinkSpider allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to a site-specific component name such as link.php or backlinkspider.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5546 - http://www.securityfocus.com/archive/1/491612/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42189 - http://securityreason.com/securityalert/3857 - http://www.securityfocus.com/bid/29054
CVE ID: CVE-2008-2097 State: PUBLISHED Published: 2008-06-05T20:21:00 Last Updated: 2024-08-07T08:49:57.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1744 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html - http://www.vmware.com/security/advisories/VMSA-2008-0009.html - http://secunia.com/advisories/30556 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg
08-0009.html - http://secunia.com/advisories/30556 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5640 - http://securitytracker.com/id?1020199 - http://www.securityfocus.com/bid/29547 - http://www.securityfocus.com/archive/1/493080/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5759 - http://securityreason.com/securityalert/3922 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42875 - http://secunia.com/advisories/30581
CVE ID: CVE-2008-2098 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:49:57.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the VMware Host Guest File System (HGFS) in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, VMware ACE 2 before 2.0.2 build 93057, and VMware Fusion before 1.1.2 build 87978, when folder sharing is used, allows guest OS users to execute arbitrary code on the host OS via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://www.vmware.com/security/advisories/VMSA-2008
: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://www.vmware.com/security/advisories/VMSA-2008-0008.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42753 - http://www.securitytracker.com/id?1020148 - http://www.securityfocus.com/archive/1/492831/100/0/threaded - http://www.vupen.com/english/advisories/2008/1707/references - http://secunia.com/advisories/30476
CVE ID: CVE-2008-2099 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:49:57.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, and VMware ACE 2 before 2.0.2 build 93057 on Windows allows guest OS users to execute arbitrary code on the host OS via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2008-0008.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42757 - http://www.vupen.com/english/advisories/2008/1707 - http://www.securityfocu