Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4375 State: PUBLISHED Published: 2008-10-01T15:00:00 Last Updated: 2024-08-07T10:17:09.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4334 - http://www.securityfocus.com/bid/31100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45025 - https://www.exploit-db.com/exploits/6412
CVE ID: CVE-2008-4376 State: PUBLISHED Published: 2008-10-01T15:00:00 Last Updated: 2024-08-07T10:17:08.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via the mid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44983 - http://www.securityfocus.com/bid/31083 - https://www.exploit-db.com/exploits/6404 - http://securityreason.com/securityalert/4328
CVE ID: CVE-2008-4377 State: PUBLISHED Published: 2008-10-01T15:00:00 Last Updated: 2024-08-07T10:17:08.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the sideid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/47979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44981 - http://securityreason.com/securityalert/4335 - http://www.securityfocus.com/bid/31084 - https://www.exploit-db.com/exploits/6405 - http://secunia.com/advisories/31819
CVE ID: CVE-2008-4378 State: PUBLISHED Published: 2008-10-01T15:00:00 Last Updated: 2024-08-07T10:17:09.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44991 - https://www.exploit-db.com/exploits/8918 - https://www.exploit-db.com/exploits/6403 - http://securityreason.com/securityalert/4336
CVE ID: CVE-2008-4379 State: PUBLISHED Published: 2008-10-01T15:00:00 Last Updated: 2024-08-07T10:17:09.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6403 - http://securityreason.com/securityalert/4336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44992
CVE ID: CVE-2008-4380 State: PUBLISHED Published: 2008-10-01T15:00:00 Last Updated: 2024-08-07T10:17:09.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, related to the filter for configuration properties and "/x" characters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4329 - https://www.exploit-db.com/exploits/6394 - http://secunia.com/advisories/31752 - http://www.securityfocus.com/bid/31047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44995 - http://www.sybsecurity.com/adviso
rityfocus.com/bid/31047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44995 - http://www.sybsecurity.com/advisors/SYBSEC-ADV16-Samsung_DVR_SHR_2040_HTTPD_Remote_Denial_Of_Service
CVE ID: CVE-2008-4381 State: PUBLISHED Published: 2008-10-02T18:00:00 Last Updated: 2024-08-07T10:17:08.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45639 - http://securityreason.com/securityalert/4345 - http://www.openwall.com/lists/oss-security/2008/10/03/8 - http://www.securityfocus.com/archive/1/496830/100/0/threaded - http://www.openwall.com
lists/oss-security/2008/10/03/8 - http://www.securityfocus.com/archive/1/496830/100/0/threaded - http://www.openwall.com/lists/oss-security/2008/10/03/7 - http://www.securityfocus.com/archive/1/496926/100/0/threaded
CVE ID: CVE-2008-4382 State: PUBLISHED Published: 2008-10-02T18:00:00 Last Updated: 2024-08-07T10:17:08.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Konqueror in KDE 3.5.9 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496849/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45645
CVE ID: CVE-2008-4383 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1.966.R01 allows remote attackers to execute arbitrary code via a long Session cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30652 - http://www.securitytracker.com/id?1020657 -
VE Program Container: References: - http://www.securityfocus.com/bid/30652 - http://www.securitytracker.com/id?1020657 - http://www.layereddefense.com/alcatel12aug.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44400 - http://securityreason.com/securityalert/4347 - http://secunia.com/advisories/31435 - http://www.securityfocus.com/archive/1/495343/100/0/threaded - http://www1.alcatel-lucent.com/psirt/statements/2008002/OmniSwitch.htm - http://www.vupen.com/english/advisories/2008/2346
CVE ID: CVE-2008-4384 State: PUBLISHED Published: 2008-10-07T18:27:00 Last Updated: 2024-08-07T10:17:09.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32140 - http://www.securityfocus.com/bid/31604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45699 - http://www.kb.cert.org/vuls/id/848873 - http://www.vupen.com/english/advisories/2
e.ibmcloud.com/vulnerabilities/45699 - http://www.kb.cert.org/vuls/id/848873 - http://www.vupen.com/english/advisories/2008/2749
CVE ID: CVE-2008-4385 State: PUBLISHED Published: 2008-10-14T20:00:00 Last Updated: 2024-08-07T10:17:09.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab, sysreqlab.dll, sysreqlabsli.dll, or sysreqlab2.dll) and (2) a certain Java applet in RLApplet.class in sysreqlab2.jar or sysreqlab.jar. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32236 - http://www.system
Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32236 - http://www.systemrequirementslab.com/bulletins/security_bulletin_1.html - http://www.sec-consult.com/files/20081016-0_sysreqlab.txt - http://www.securityfocus.com/bid/31752 - http://www.kb.cert.org/vuls/id/166651 - http://www.securityfocus.com/archive/1/497400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45873
CVE ID: CVE-2008-4387 State: PUBLISHED Published: 2008-11-10T16:00:00 Last Updated: 2024-08-07T10:17:09.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49721 - http://www.securityfocus.com/bid/32186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46440 - http://www.vupen.com/english/advisories/2008/3106 - http://www.kb.cert.org/vuls/id/277313
CVE ID: CVE-2008-4388 State: PUBLISHED Published: 2009-01-20T16:00:00Z Last Updated: 2024-09-16T19:14:36.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/194505 - http://www.symantec.com/avcenter/security/Content/2009.01.15.html - http://www.securityfocus.com/bid/33247 - http://securitytracker.com/id?1021609
CVE ID: CVE-2008-4389 State: PUBLISHED Published: 2010-06-17T16:00:00 Last Updated: 2024-08-07T10:17:09.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec AppStream 5.2.x and Symantec Workspace Streaming (SWS) 6.1.x before 6.1 SP4 do not properly perform authentication, which allows remote Workspace Streaming servers and man-in-the-middle attackers to download arbitrary executable files onto a client system, and execute these files, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40611 - http://www.vupen.com/english/advisories/2010/1511 - http://www.kb.cert.org/vuls/id/221257 - http://secunia.com
d/40611 - http://www.vupen.com/english/advisories/2010/1511 - http://www.kb.cert.org/vuls/id/221257 - http://secunia.com/advisories/40233 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100616_00 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59504
CVE ID: CVE-2008-4390 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:17:09.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32666 - http://www.kb.cert.org/vuls/id/528993 - http://www.kb.cert.org/vuls/id/MAPG-7HJKSA - http://secunia.com/advisories/33032 - http://www.linksys.com/servlet/Satell
http://www.kb.cert.org/vuls/id/MAPG-7HJKSA - http://secunia.com/advisories/33032 - http://www.linksys.com/servlet/Satellite?blobcol=urldata&blobheadername1=Content-Type&blobheadername2=Content-Disposition&blobheadervalue1=text%2Fplain&blobheadervalue2=inline%3B+filename%3DWVC54GC-V1.0_non-RoHS-v1.25_fw_ver.txt&blobkey=id&blobtable=MungoBlobs&blobwhere=1193776031728&ssbinary=true&lid=8104724130B17
CVE ID: CVE-2008-4391 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:17:09.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/639345 - http://www.securityfocus.com/bid/32665 - http://www.kb.cert.org/vuls/id/WDON-7M2U52 - http://secunia.com/advisories/33032
CVE ID: CVE-2008-4392 State: PUBLISHED Published: 2009-02-19T16:00:00 Last Updated: 2024-08-07T10:17:09.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority (SOA) query. Additional Analyst Notes: - CVE Program Container: References: - http://www.your.org/dnscache/djbdns.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/48807 - http://secunia.com/advisories/33855 - http://www.securityfocus.com/bid/33818
xforce.ibmcloud.com/vulnerabilities/48807 - http://secunia.com/advisories/33855 - http://www.securityfocus.com/bid/33818 - http://www.your.org/dnscache/
CVE ID: CVE-2008-4393 State: PUBLISHED Published: 2008-10-07T18:27:00 Last Updated: 2024-08-07T10:17:09.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VeriSign Kontiki Delivery Management System (DMS) 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to zodiac/servlet/zodiac. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2008/Oct/0054.html - https://customersupport.kontiki.com/software/patch-20102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45670 - http://secunia.com/advisories/32156 - http://www.irmplc.com/researc
exchange.xforce.ibmcloud.com/vulnerabilities/45670 - http://secunia.com/advisories/32156 - http://www.irmplc.com/researchlab/advisories/170 - http://www.securityfocus.com/bid/31580
CVE ID: CVE-2008-4394 State: PUBLISHED Published: 2008-10-10T10:00:00 Last Updated: 2024-08-07T10:17:09.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, which allows local users to execute arbitrary code via a modified Python module that is loaded by the (1) ys-apps/portage, (2) net-mail/fetchmail, (3) app-editors/leo ebuilds, and other ebuilds. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32228 - http://security.gentoo.org/glsa/glsa-200810-02.xml - http://www.securityfocus.com/bid/31670 - ht
.com/advisories/32228 - http://security.gentoo.org/glsa/glsa-200810-02.xml - http://www.securityfocus.com/bid/31670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45792
CVE ID: CVE-2008-4395 State: PUBLISHED Published: 2008-11-06T11:00:00 Last Updated: 2024-08-07T10:17:09.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs. Additional Analyst Notes: - CVE Program Container: References: - http://www.mail-archive.com/frugalware-git%40frugalware.org/msg22366.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46437 - http://www.ubuntu.com/usn/usn-662-2 - https://bugs.launchpad.net/bugs/cve/2008-4395 - http://bugs.gentoo.org/show_bug.cgi?id
://www.ubuntu.com/usn/usn-662-2 - https://bugs.launchpad.net/bugs/cve/2008-4395 - http://bugs.gentoo.org/show_bug.cgi?id=239371 - http://www.ubuntu.com/usn/usn-662-1 - http://secunia.com/advisories/32509 - http://www.securitytracker.com/id?1021142 - http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git%3Ba=commitdiff%3Bh=49945b423c2f7e33b4c579ca460df6a806ee8f9f - https://bugs.launchpad.net/ubuntu/+source/linux/+bug/275860 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html - http://www.securityfocus.com/bid/32118
CVE ID: CVE-2008-4396 State: PUBLISHED Published: 2008-10-02T19:00:00 Last Updated: 2024-08-07T10:17:08.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Safer Networking FileAlyzer 1.6.0.0 and 1.6.0.4 beta, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via an executable with malformed version data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45516 - http://packetstormsecurity.org/0809-advisories/filealyzer-overflow.txt - http://forums.spybot.info/showthread.php?t=34737 - http://www.securityfocus.com/bid/31474 - http://lostmon.b
rflow.txt - http://forums.spybot.info/showthread.php?t=34737 - http://www.securityfocus.com/bid/31474 - http://lostmon.blogspot.com/2008/09/filealyzer-1604-stak-overflow.html
CVE ID: CVE-2008-4397 State: PUBLISHED Published: 2008-10-14T20:00:00 Last Updated: 2024-08-07T10:17:09.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45774 - http://www.vupen.com/english/advisories/2008/2777 - http://www.securitytracker.com/id?1021032 - http://www.sec
s/45774 - http://www.vupen.com/english/advisories/2008/2777 - http://www.securitytracker.com/id?1021032 - http://www.securityfocus.com/archive/1/497281/100/0/threaded - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143 - http://secunia.com/advisories/32220 - http://www.securityfocus.com/archive/1/497218 - http://securityreason.com/securityalert/4412
CVE ID: CVE-2008-4398 State: PUBLISHED Published: 2008-10-14T20:00:00 Last Updated: 2024-08-07T10:17:09.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31684 - http://www.vupen.com/english/advisories/2008/2777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45775 - http://www.securitytracker.com/id?1021032 - https://support.ca.com/irj/portal/ano
e.ibmcloud.com/vulnerabilities/45775 - http://www.securitytracker.com/id?1021032 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143 - http://secunia.com/advisories/32220 - http://www.securityfocus.com/archive/1/497218
CVE ID: CVE-2008-4399 State: PUBLISHED Published: 2008-10-14T20:00:00 Last Updated: 2024-08-07T10:17:09.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request, related to "insufficient validation." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45776 - http://www.vupen.com/english/advisories/2008/2777 - http://www.securitytracker.com/id?10210
.com/vulnerabilities/45776 - http://www.vupen.com/english/advisories/2008/2777 - http://www.securitytracker.com/id?1021032 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143 - http://secunia.com/advisories/32220 - http://www.securityfocus.com/archive/1/497218
CVE ID: CVE-2008-4400 State: PUBLISHED Published: 2008-10-14T20:00:00 Last Updated: 2024-08-07T10:17:09.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash of multiple services) via crafted authentication credentials, related to "insufficient validation." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31684 - http://www.vupen.com/english/advisories/2008/2777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45777 - http://www.securitytracker.com/i
ish/advisories/2008/2777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45777 - http://www.securitytracker.com/id?1021032 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143 - http://secunia.com/advisories/32220 - http://www.securityfocus.com/archive/1/497218
CVE ID: CVE-2008-4401 State: PUBLISHED Published: 2008-10-17T18:00:00 Last Updated: 2024-08-07T10:17:09.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with (1) the FileReference.browse operation in the FileReference upload API or (2) the FileReference.download operation in the FileReference download API, which allows remote attackers to create a browse dialog box, and possibly have unspecified other impact, via an SWF file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33390 - http://www.adobe.com/support/security/bulletin
VE Program Container: References: - http://secunia.com/advisories/33390 - http://www.adobe.com/support/security/bulletins/apsb08-18.html - http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://secunia.com/advisories/32270 - http://secunia.com/advisories/32702 - http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html - http://secunia.com/advisories/34226 - http://www.vupen.com/english/advisories/2008/2838 - http://securitytracker.com/id?1021061 - http://security.gentoo.org/glsa/glsa-200903-23.xml - http://secunia.com/advisories/32759 - http://www.redhat.com/support/errata/RHSA-2008-0945.html - http://www.redhat.com/support/errata/RHSA-2008-0980.html -
- http://www.redhat.com/support/errata/RHSA-2008-0945.html - http://www.redhat.com/support/errata/RHSA-2008-0980.html - http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 - http://secunia.com/advisories/32448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45913 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
CVE ID: CVE-2008-4402 State: PUBLISHED Published: 2008-10-03T15:00:00 Last Updated: 2024-08-07T10:17:09.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31531 - http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3087_Readme.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45608 - http://secunia.com/advisories/32097 - http:/
7_Readme.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45608 - http://secunia.com/advisories/32097 - http://www.securitytracker.com/id?1020974 - http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2439_Readme.txt - http://www.vupen.com/english/advisories/2008/2712