Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://support.apple.com/kb/HT2163 - http://secunia.com/advisories/31090 - http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities - http://www.mandriva.com/security/advisories?name=MDVSA-2008:141 - http://secunia.com/advisories/30875 - http://www.vupen.com/english/advisories/2008/1981/references - http://www.vupen.com/english/advisories/2008/1907/references - ht
ww.vupen.com/english/advisories/2008/1981/references - http://www.vupen.com/english/advisories/2008/1907/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9606 - http://www.debian.org/security/2008/dsa-1618 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-2727 - http://secunia.com/advisories/31687 - http://secunia.com/advisories/30894 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43350 - http://secunia.com/advisories/31062 - http://secunia.com/advisories/31256 - http://www.securityfocus.com/archive/1/493688/100/0/threaded - http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/ - http://slackware.c
0/0/threaded - http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/ - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.securitytracker.com/id?1020347 - http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html - http://www.redhat.com/archives/fedora-security-commits/2008-June/msg00005.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206 - https://bugs.launchpad.net/ubuntu/+source/ruby1.8/+bug/241657 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html - http://www.mandriva.
1.8/+bug/241657 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:140 - http://secunia.com/advisories/30802 - http://secunia.com/advisories/30831 - http://www.redhat.com/support/errata/RHSA-2008-0561.html - https://issues.rpath.com/browse/RPL-2626 - http://www.debian.org/security/2008/dsa-1612 - http://security.gentoo.org/glsa/glsa-200812-17.xml - http://secunia.com/advisories/33178 - http://www.securityfocus.com/bid/29903 - http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html - http://secunia.com/advisories/30867 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:142 - http://w
.html - http://secunia.com/advisories/30867 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:142 - http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/ - http://www.ruby-forum.com/topic/157034 - http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/ - http://www.ubuntu.com/usn/usn-621-1 - http://secunia.com/advisories/31181
CVE ID: CVE-2008-2726 State: PUBLISHED Published: 2008-06-24T19:00:00 Last Updated: 2024-08-07T09:14:14.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2; and (2) the rb_ary_replace function in 1.6.x allows context-dependent attackers to trigger memory corruption, aka the "beg + rlen" issue. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change. Additional Analyst Notes:
uby. The CVE description should be regarded as authoritative, although it is likely to change. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://support.apple.com/kb/HT2163 - http://secunia.com/advisories/31090 - http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities - http://www.mandriva.com/security/advisories?name=MDVSA-2008:141 - http://secunia.com/advisories/30875 - http://www.vupen.com/english/advisories/2008/1981/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43351 - http://www.vupen.com/english/advisories/2008/1907/references - http://www.debia
rce.ibmcloud.com/vulnerabilities/43351 - http://www.vupen.com/english/advisories/2008/1907/references - http://www.debian.org/security/2008/dsa-1618 - http://secunia.com/advisories/31687 - http://secunia.com/advisories/30894 - http://secunia.com/advisories/31062 - http://secunia.com/advisories/31256 - http://www.securityfocus.com/archive/1/493688/100/0/threaded - http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/ - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.securitytracker.com/id?1020347 - http://www.rubyinside.com/ju
ves/security-announce/2008//Jun/msg00002.html - http://www.securitytracker.com/id?1020347 - http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html - http://www.redhat.com/archives/fedora-security-commits/2008-June/msg00005.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206 - https://bugs.launchpad.net/ubuntu/+source/ruby1.8/+bug/241657 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:140 - http://secunia.com/advisories/30802 - http://secunia.com/advisories/30831 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9959 - http://svn.ru
ries/30831 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9959 - http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=17460 - http://www.redhat.com/support/errata/RHSA-2008-0561.html - https://issues.rpath.com/browse/RPL-2626 - http://www.debian.org/security/2008/dsa-1612 - http://security.gentoo.org/glsa/glsa-200812-17.xml - http://secunia.com/advisories/33178 - http://www.securityfocus.com/bid/29903 - http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html - http://secunia.com/advisories/30867 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:142 - http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vuln
.com/security/advisories?name=MDVSA-2008:142 - http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/ - http://www.ruby-forum.com/topic/157034 - http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/ - http://www.ubuntu.com/usn/usn-621-1 - http://secunia.com/advisories/31181
CVE ID: CVE-2008-2727 State: REJECTED Published: 2008-09-02T14:00:00 Last Updated: 2008-09-11T09:00:00 Description: No description available.
CVE ID: CVE-2008-2728 State: REJECTED Published: 2008-09-02T14:00:00 Last Updated: 2008-09-11T09:00:00 Description: No description available.
CVE ID: CVE-2008-2729 State: PUBLISHED Published: 2008-06-30T22:00:00 Last Updated: 2024-08-07T09:14:14.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=3022d734a54cbd2b65eea9a024564821101b4a9a%3Bhp=f0f4c3432e5e1087b3a8c0e6bd4113d3c37497ff - http://www.debian.org/security/2008/dsa-1630 - http://www.redh
1101b4a9a%3Bhp=f0f4c3432e5e1087b3a8c0e6bd4113d3c37497ff - http://www.debian.org/security/2008/dsa-1630 - http://www.redhat.com/support/errata/RHSA-2008-0519.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43558 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11571 - http://secunia.com/advisories/30849 - http://www.securitytracker.com/id?1020364 - http://secunia.com/advisories/31551 - http://secunia.com/advisories/30850 - http://www.redhat.com/support/errata/RHSA-2008-0585.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:174 - http://secunia.com/advisories/31107 - https://bugzilla.redhat.com/show_bug.cgi?id=451271 - http:/
?name=MDVSA-2008:174 - http://secunia.com/advisories/31107 - https://bugzilla.redhat.com/show_bug.cgi?id=451271 - http://www.securityfocus.com/bid/29943 - http://secunia.com/advisories/31628 - http://www.ubuntu.com/usn/usn-625-1 - http://rhn.redhat.com/errata/RHSA-2008-0508.html
CVE ID: CVE-2008-2730 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:14:14.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsj90843. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43355 - http://www.vupen.com/english/advisories/2008/1933/references - http://secu
e.xforce.ibmcloud.com/vulnerabilities/43355 - http://www.vupen.com/english/advisories/2008/1933/references - http://secunia.com/advisories/30848 - http://www.securityfocus.com/bid/29935 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml - http://www.securitytracker.com/id?1020361
CVE ID: CVE-2008-2732 State: PUBLISHED Published: 2008-09-04T16:00:00 Last Updated: 2024-08-07T09:14:14.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.0 before 7.0(7)16, 7.1 before 7.1(2)71, 7.2 before 7.2(4)7, 8.0 before 8.0(3)20, and 8.1 before 8.1(1)8 allow remote attackers to cause a denial of service (device reload) via unknown vectors, aka Bug IDs CSCsq07867, CSCsq57091, CSCsk60581, and CSCsq39315. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020808 - http://www.cisco.com/en/US/
st Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020808 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml - http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa - http://secunia.com/advisories/31730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44866 - http://www.securitytracker.com/id?1020809 - http://www.securityfocus.com/bid/30998
CVE ID: CVE-2008-2733 State: PUBLISHED Published: 2008-09-04T16:00:00 Last Updated: 2024-08-07T09:14:14.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service (device reload) via a crafted authentication attempt, aka Bug ID CSCso69942. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml - https://exchange.xforce
rences: - http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/44867 - http://www.securitytracker.com/id?1020811 - http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa - http://www.securitytracker.com/id?1020810 - http://secunia.com/advisories/31730 - http://www.securityfocus.com/bid/30998
CVE ID: CVE-2008-2734 State: PUBLISHED Published: 2008-09-04T16:00:00 Last Updated: 2024-08-07T09:14:14.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service (memory consumption and VPN hang) via a crafted SSL or HTTP packet, aka Bug ID CSCso66472. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44868 - http://
nces: - http://www.securitytracker.com/id?1020812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44868 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml - http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa - http://secunia.com/advisories/31730 - http://www.securityfocus.com/bid/30998
CVE ID: CVE-2008-2735 State: PUBLISHED Published: 2008-09-04T16:00:00 Last Updated: 2024-08-07T09:14:14.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP server in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0 before 8.0(3)15 and 8.1 before 8.1(1)5, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service (device reload) via a URI in a crafted SSL or HTTP packet, aka Bug ID CSCsq19369. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020812 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml
ww.securitytracker.com/id?1020812 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml - http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa - http://secunia.com/advisories/31730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44869 - http://www.securityfocus.com/bid/30998
CVE ID: CVE-2008-2736 State: PUBLISHED Published: 2008-09-04T16:00:00 Last Updated: 2024-08-07T09:14:14.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0(3)15, 8.0(3)16, 8.1(1)4, and 8.1(1)5, when configured as a clientless SSL VPN endpoint, allows remote attackers to obtain usernames and passwords via unknown vectors, aka Bug ID CSCsq45636. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44870 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml - http://tools.cisco.com/security/center/cont
.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml - http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html - http://secunia.com/advisories/31730 - http://www.securitytracker.com/id?1020813 - http://www.securityfocus.com/bid/30998
CVE ID: CVE-2008-2737 State: REJECTED Published: 2008-08-18T20:00:00Z Last Updated: 2024-09-16T22:50:43.181Z Description: No description available.
CVE ID: CVE-2008-2739 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:14:14.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SERVICE.DNS signature engine in the Intrusion Prevention System (IPS) in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service (device crash or hang) via network traffic that triggers unspecified IPS signatures, a different vulnerability than CVE-2008-1447. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01556.shtml - http://secunia.com/advisories/31990 - https://oval.cisecurity.org/repository/search/definition/
09186a0080a01556.shtml - http://secunia.com/advisories/31990 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6058 - http://www.vupen.com/english/advisories/2008/2670
CVE ID: CVE-2008-2742 State: PUBLISHED Published: 2008-06-17T15:00:00 Last Updated: 2024-08-07T09:14:15.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload in the mcpuk file editor (atk/attributes/fck/editor/filemanager/browser/mcpuk/connectors/php/config.php) in Achievo 1.2.0 through 1.3.2 allows remote attackers to execute arbitrary code by uploading a file with .php followed by a safe extension, then accessing it via a direct request to the file in the Achievo root directory. NOTE: this is only a vulnerability in environments that support multiple extensions, such as Apache with the mod_mime module enabled. Additional Analyst Notes: - CVE Program Conta
port multiple extensions, such as Apache with the mod_mime module enabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.achievo.org/blog/archives/631-Achievo-1.3.3-Security-Release.html - https://www.exploit-db.com/exploits/5770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42980 - http://secunia.com/advisories/30597 - http://www.securityfocus.com/bid/29621
CVE ID: CVE-2008-2743 State: PUBLISHED Published: 2008-06-17T15:00:00 Last Updated: 2024-08-07T09:14:14.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the embedded web server in Xerox 4110, 4590, and 4595 Copier/Printers allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1829/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43058 - http://www.securityfocus.com/bid/29690 - http://www.securitytracker.com/id?1020282 - http://secunia.com/advisories/30639 - http://www.xero
yfocus.com/bid/29690 - http://www.securitytracker.com/id?1020282 - http://secunia.com/advisories/30639 - http://www.xerox.com/downloads/usa/en/c/cert_XRX08_007.pdf
CVE ID: CVE-2008-2744 State: PUBLISHED Published: 2008-06-17T15:00:00 Last Updated: 2024-08-07T09:14:14.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vBulletin 3.6.10 and 3.7.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors and an "obscure method." NOTE: the vector is probably in the redirect parameter to the Admin Control Panel (admincp/index.php). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43090 - http://www.securityfocus.com/archive/1/493340/100/0/threaded - http://www.vbulletin.co
cloud.com/vulnerabilities/43090 - http://www.securityfocus.com/archive/1/493340/100/0/threaded - http://www.vbulletin.com/forum/showthread.php?t=274882 - http://securityreason.com/securityalert/3946 - http://www.securitytracker.com/id?1020322 - http://www.securityfocus.com/bid/29704
CVE ID: CVE-2008-2745 State: PUBLISHED Published: 2008-06-17T15:00:00 Last Updated: 2024-08-07T09:14:14.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) in Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code via a long parameter to the AnnoSaveToTiff method. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1795/references - https://www.exploit-db.com/exploits/5778 - https://www.exploit-db.com/exploits/5777 - http://secunia.com/advisories/30603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42982 - http:
exploits/5777 - http://secunia.com/advisories/30603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42982 - http://www.securityfocus.com/bid/29635
CVE ID: CVE-2008-2746 State: PUBLISHED Published: 2008-06-17T15:00:00 Last Updated: 2024-08-07T09:14:14.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL commands via the detail parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5796 - http://www.securityfocus.com/bid/29697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43057
CVE ID: CVE-2008-2747 State: PUBLISHED Published: 2008-06-18T19:00:00 Last Updated: 2024-08-07T09:14:14.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\SOFTWARE\Vitalwerks\DUC registry key, which allows local users to obtain obfuscated passwords and other sensitive information by reading the (1) TrayPassword, (2) Username, (3) Password, and (4) Hosts registry values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29758 - http://secunia.com/advisories/30714 - http://securityreason.com/securityalert/3952 - http://www.securityfocus.com/archive/
tp://secunia.com/advisories/30714 - http://securityreason.com/securityalert/3952 - http://www.securityfocus.com/archive/1/493367/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/43298
CVE ID: CVE-2008-2748 State: PUBLISHED Published: 2008-06-18T19:00:00 Last Updated: 2024-08-07T09:14:14.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skulltag 0.97d2-RC2 and earlier allows remote attackers to cause a denial of service (daemon hang) via a series of long, malformed connect packets, related to these packets being "parsed multiple times." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43125 - http://skulltag.com/testing/public/Skulltag%20Version%20History.txt - http://www.securityfocus.com/bid/29760 - http://aluigi.org/poc/skulltagloop.zip - http://securityreason.com/securityalert/3953 - htt
ecurityfocus.com/bid/29760 - http://aluigi.org/poc/skulltagloop.zip - http://securityreason.com/securityalert/3953 - http://www.securityfocus.com/archive/1/493386/100/0/threaded - http://secunia.com/advisories/30668
CVE ID: CVE-2008-2749 State: PUBLISHED Published: 2008-06-18T19:29:00 Last Updated: 2024-08-07T09:14:14.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE Calendar Server 6.0, when access logging (aka service.http.commandlog.all) is enabled, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30694 - http://www.vupen.com/english/advisories/2008/1857 - http://www.securitytracker.com/id?1020299 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-2
ories/2008/1857 - http://www.securitytracker.com/id?1020299 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-235521-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43127 - http://www.securityfocus.com/bid/29763
CVE ID: CVE-2008-2750 State: PUBLISHED Published: 2008-06-18T19:29:00 Last Updated: 2024-08-07T09:14:14.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel 2.6 before 2.6.26-rc6 allows remote attackers to cause a denial of service (kernel heap memory corruption and system crash) and possibly have unspecified other impact via a crafted PPPOL2TP packet that results in a large value for a certain length variable. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207 - http://www.securityfocus.com/bid/29747 - http://www.mandriva.com/security/advi