Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tp://www.securitytracker.com/id?1020544 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=74454a6a286bfce4bb23d89bd465f856fa6a6e19 - http://www.securityfocus.com/bid/30351 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html - http://secunia.com/advisories/31202 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43979
CVE ID: CVE-2008-3248 State: PUBLISHED Published: 2008-10-21T16:00:00 Last Updated: 2024-08-07T09:28:41.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32332 - http://www.securitytracker.com/id?1021074 - http://www.securityfocus.com/bid/31678 - http://seer.entsupport.symantec.com/docs/3
www.securitytracker.com/id?1021074 - http://www.securityfocus.com/bid/31678 - http://seer.entsupport.symantec.com/docs/310872.htm - http://www.securityfocus.com/archive/1/497626/100/0/threaded - http://www.security-objectives.com/advisories/SECOBJADV-2008-04.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/46008 - http://www.symantec.com/avcenter/security/Content/2008.10.20.html - http://www.security-objectives.com/advisories/SECOBJSADV-2008-04.txt - http://www.vupen.com/english/advisories/2008/2875
CVE ID: CVE-2008-3249 State: PUBLISHED Published: 2008-07-21T17:00:00 Last Updated: 2024-08-07T09:28:42.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in Lenovo System Update before 3.14 does not properly validate the certificate when establishing an SSL connection, which allows remote attackers to install arbitrary packages via an SSL certificate whose X.509 headers match a public certificate used by IBM. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30379 - http://www.security-objectives.com/advisories/SECOBJADV-2008-01.txt - http://www.securityfocus.com/bid/29366 - http://www.securityfocus.com/archive/1/492579 -
sories/SECOBJADV-2008-01.txt - http://www.securityfocus.com/bid/29366 - http://www.securityfocus.com/archive/1/492579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42638 - http://securitytracker.com/id?1020112
CVE ID: CVE-2008-3250 State: PUBLISHED Published: 2008-07-21T17:00:00 Last Updated: 2024-08-07T09:28:42.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL commands via the filter parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43872 - http://secunia.com/advisories/31139 - http://www.securityfocus.com/bid/30277 - https://www.exploit-db.com/exploits/6113 - https://www.exploit-db.com/exploits/6097
CVE ID: CVE-2008-3251 State: PUBLISHED Published: 2008-07-21T17:00:00 Last Updated: 2024-08-07T09:28:41.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the opp parameter to tampereunited/opponent.php; or the id parameter to (2) index.php, (3) player.php, (4) matchdetails.php, or (5) additionalpage.php in tampereunited/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6088 - http://securityreason.com/securityalert/4018 - http://www.vupen.com/english/advisories/2008/2121/references - https://exchange.xf
curityreason.com/securityalert/4018 - http://www.vupen.com/english/advisories/2008/2121/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43849 - http://www.securityfocus.com/bid/30260 - http://tpl-design.com/index.php - http://secunia.com/advisories/31111
CVE ID: CVE-2008-3252 State: PUBLISHED Published: 2008-07-21T17:00:00 Last Updated: 2024-08-07T09:28:41.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large number of lines starting with a period. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43844 - http://secunia.com/advisories/31307 - https://bugzilla.redhat.com/show_bug.cgi?id=454483 - http://secunia.com/advisories/31080 - http://www.debian.org/security/2008/dsa-1622 - http://www.secur
ug.cgi?id=454483 - http://secunia.com/advisories/31080 - http://www.debian.org/security/2008/dsa-1622 - http://www.securityfocus.com/bid/30231 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00565.html - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00485.html
CVE ID: CVE-2008-3253 State: PUBLISHED Published: 2008-07-22T16:00:00 Last Updated: 2024-08-07T09:28:42.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the XenAPI HTTP interfaces in Citrix XenServer Express, Standard, and Enterprise Edition 4.1.0; Citrix XenServer Dell Edition (Express and Enterprise) 4.1.0; and HP integrated Citrix XenServer (Select and Enterprise) 4.1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43857 - http://support.citrix.com/article/CTX117814 - http:
nces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43857 - http://support.citrix.com/article/CTX117814 - http://www.securitytracker.com/id?1020515 - http://www.securityfocus.com/bid/30265 - http://secunia.com/advisories/31133 - http://www.vupen.com/english/advisories/2008/2117/references
CVE ID: CVE-2008-3254 State: PUBLISHED Published: 2008-07-22T16:00:00 Last Updated: 2024-08-07T09:28:41.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in preCMS 1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a UserProfil action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43882 - https://www.exploit-db.com/exploits/6096 - http://secunia.com/advisories/31138 - http://www.securityfocus.com/bid/30278
CVE ID: CVE-2008-3255 State: PUBLISHED Published: 2008-07-22T16:00:00 Last Updated: 2024-08-07T09:28:42.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30283 - http://jvn.jp/en/jp/JVN49704543/index.html - http://secunia.com/advisories/31042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43879 - http://www.ln-lab.net/lunar-night.lab/page-dl_webproxy/design-whiteecuni
CVE ID: CVE-2008-3256 State: PUBLISHED Published: 2008-07-22T16:00:00 Last Updated: 2024-08-07T09:28:41.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30294 - https://www.exploit-db.com/exploits/6099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43908
CVE ID: CVE-2008-3257 State: PUBLISHED Published: 2008-07-22T16:00:00 Last Updated: 2024-08-07T09:28:41.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2008-July/002035.html - http://www.attrition.org/pipermail/vim/2008-July/002036.html - https://www.exploit-db.com/exploits/6089 - http://www.ora
http://www.attrition.org/pipermail/vim/2008-July/002036.html - https://www.exploit-db.com/exploits/6089 - http://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html - https://support.bea.com/application_content/product_portlets/securityadvisories/2793.html - http://secunia.com/advisories/31146 - http://www.securityfocus.com/bid/30273 - http://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html - http://www.securitytracker.com/id?1020520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43885 - http://www.kb.cert.org/vuls/id/716387 - http://www.vupen.com/english/advisories/2008/2145/references
CVE ID: CVE-2008-3258 State: PUBLISHED Published: 2008-07-22T16:00:00 Last Updated: 2024-08-07T09:28:42.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Zoph before 0.7.0.5 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30298 - http://secunia.com/advisories/31125 - http://sourceforge.net/project/shownotes.php?group_id=69353&release_id=614672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44036
CVE ID: CVE-2008-3259 State: PUBLISHED Published: 2008-07-22T16:00:00 Last Updated: 2024-08-07T09:28:41.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the X11 forwarding port via a bind to a single IP address, as demonstrated on the HP-UX platform. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2148 - http://www.securityfocus.com/bid/30339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43940 - http://secunia.com/advisories/31179 - http://op
bid/30339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43940 - http://secunia.com/advisories/31179 - http://openssh.com/security.html - http://www.securitytracker.com/id?1020537 - http://www.openssh.com/txt/release-5.1
CVE ID: CVE-2008-3260 State: PUBLISHED Published: 2008-07-22T17:00:00 Last Updated: 2024-08-07T09:28:41.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via (1) the cwd parameter in a rqMkHtml action to document/rqmkhtml.php, or the query string to (2) announcements/announcements.php, (3) calendar/agenda.php, (4) course/index.php, (5) course_description/index.php, (6) document/document.php, (7) exercise/exercise.php, (8) group/group_space.php, (9) phpbb/newtopic.php, (10) phpbb/reply.php, (11) phpbb/viewtopic.php, (12) wiki/wiki.php, or (
group/group_space.php, (9) phpbb/newtopic.php, (10) phpbb/reply.php, (11) phpbb/viewtopic.php, (12) wiki/wiki.php, or (13) work/work.php in claroline/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/494539/100/0/threaded - http://securityreason.com/securityalert/4020 - http://www.securityfocus.com/bid/30269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43854 - http://claroline.svn.sourceforge.net/viewrc/claroline/branches/1.8/claroline/?sortby=date#dirlist - http://sourceforge.net/project/shownotes.php?release_id=613634 - http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.9_and_1.8.10 - htt
se_id=613634 - http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.9_and_1.8.10 - http://secunia.com/advisories/31116
CVE ID: CVE-2008-3261 State: PUBLISHED Published: 2008-07-22T17:00:00 Last Updated: 2024-08-07T09:28:41.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/494539/100/0/threaded - http://securityreason.com/securityalert/4020 - http://www.securityfocus.com/bid/30269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43854 - http://sourceforge.net/project/shownotes.php?r
/bid/30269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43854 - http://sourceforge.net/project/shownotes.php?release_id=613634 - http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.9_and_1.8.10
CVE ID: CVE-2008-3262 State: PUBLISHED Published: 2008-07-22T17:00:00 Last Updated: 2024-08-07T09:28:41.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a requirement for the previous password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/494539/100/0/threaded - http://securityreason.com/securityalert/4020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43854 - http://sourceforge.net/project/shownotes.php?release_id
4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43854 - http://sourceforge.net/project/shownotes.php?release_id=613634 - http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.9_and_1.8.10 - http://secunia.com/advisories/31116
CVE ID: CVE-2008-3263 State: PUBLISHED Published: 2008-07-22T23:00:00 Last Updated: 2024-08-07T09:28:41.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (call-number exhaustion and CPU consumption) by quickly sending a large number of IAX2 (IAX) POKE requests. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200905-01
equests. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200905-01.xml - http://www.securityfocus.com/bid/30321 - http://secunia.com/advisories/31194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43942 - http://www.vupen.com/english/advisories/2008/2168/references - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00839.html - http://secunia.com/advisories/31178 - http://downloads.securityfocus.com/vulnerabilities/exploits/30321.pl - http://www.securityfocus.com/archive/1/494675/100/0/threaded - http://www.securitytracker.com/id?1020535 - http://downloads.digium.com/pub/security/AST-2008-010.html - http://secu
d - http://www.securitytracker.com/id?1020535 - http://downloads.digium.com/pub/security/AST-2008-010.html - http://secunia.com/advisories/34982
CVE ID: CVE-2008-3264 State: PUBLISHED Published: 2008-07-24T15:18:00 Last Updated: 2024-08-07T09:28:41.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (traffic amplification) via an IAX2 FWDOWNL request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020536 - http://security.gentoo.org/glsa/glsa-200905-0
ogram Container: References: - http://www.securitytracker.com/id?1020536 - http://security.gentoo.org/glsa/glsa-200905-01.xml - http://secunia.com/advisories/31194 - http://www.vupen.com/english/advisories/2008/2168/references - http://downloads.digium.com/pub/security/AST-2008-011.html - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00839.html - http://secunia.com/advisories/31178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43955 - http://www.securityfocus.com/bid/30350 - http://www.securityfocus.com/archive/1/494676/100/0/threaded - http://secunia.com/advisories/34982
CVE ID: CVE-2008-3265 State: PUBLISHED Published: 2008-07-24T15:18:00 Last Updated: 2024-08-07T09:28:41.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the DT Register (com_dtregister) 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventId parameter in a pay_options action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30256 - http://osvdb.org/47061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43851 - http://secunia.com/advisories/31126 - http://www.dthdevelopment.com/index.php?option=com_fireboard&Itemid=73&func=view&id=1883
/secunia.com/advisories/31126 - http://www.dthdevelopment.com/index.php?option=com_fireboard&Itemid=73&func=view&id=1883&catid=4 - https://www.exploit-db.com/exploits/6086 - http://securityreason.com/securityalert/4023
CVE ID: CVE-2008-3266 State: PUBLISHED Published: 2008-07-24T15:18:00 Last Updated: 2024-08-07T09:28:41.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in picture_pic_bv.asp in SoftAcid Hotel Reservation System (HRS) Multi allows remote attackers to execute arbitrary SQL commands via the key parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43947 - http://secunia.com/advisories/31170 - http://www.securityfocus.com/bid/30316 - http://www.vupen.com/english/advisories/2008/2154/references - http://securityreason.com/securityalert/4028 - https://www.exploit-db.com/exploits/6
h/advisories/2008/2154/references - http://securityreason.com/securityalert/4028 - https://www.exploit-db.com/exploits/6105
CVE ID: CVE-2008-3267 State: PUBLISHED Published: 2008-07-24T15:18:00 Last Updated: 2024-08-07T09:28:41.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mojoJobs.cgi in MojoJobs allows remote attackers to execute arbitrary SQL commands via the cat_a parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43933 - https://www.exploit-db.com/exploits/6110 - http://secunia.com/advisories/31164 - http://www.vupen.com/english/advisories/2008/2158/references - http://securityreason.com/securityalert/4029
CVE ID: CVE-2008-3268 State: PUBLISHED Published: 2008-07-24T15:18:00 Last Updated: 2024-08-07T09:28:42.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in phpScheduleIt 1.2.0 through 1.2.9, when useLogonName is enabled, allows remote attackers with administrator email address knowledge to bypass restrictions and gain privileges via unspecified vectors related to login names. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=614202 - http://www.securityfocus.com/bid/30300 - https://exchange.xforce.ibmcloud.com/v
roject/shownotes.php?release_id=614202 - http://www.securityfocus.com/bid/30300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43900 - http://secunia.com/advisories/31147
CVE ID: CVE-2008-3269 State: PUBLISHED Published: 2008-07-24T15:18:00 Last Updated: 2024-08-07T09:28:41.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: WRPCServer.exe in WinSoftMagic WinRemotePC (WRPC) Lite 2008 and Full 2008 allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet to TCP port 4321. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30236 - http://www.vupen.com/english/advisories/2008/2112/references - http://securityreason.com/securityalert/4030 - http://secunia.com/advisories/31102 - https://www.exploit-db.com/exploits/6077 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
ia.com/advisories/31102 - https://www.exploit-db.com/exploits/6077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43784
CVE ID: CVE-2008-3270 State: PUBLISHED Published: 2008-08-18T17:15:00 Last Updated: 2024-08-07T09:28:41.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: yum-rhn-plugin in Red Hat Enterprise Linux (RHEL) 5 does not verify the SSL certificate for a file download from a Red Hat Network (RHN) server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service (loss of updates) or force the download and installation of official Red Hat packages that were not requested. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0815.html - http://secunia.com/advisories/31472 - https://oval.cisecurity.
ttp://www.redhat.com/support/errata/RHSA-2008-0815.html - http://secunia.com/advisories/31472 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10864 - http://securitytracker.com/id?1020698 - http://www.securityfocus.com/bid/30695 - https://bugzilla.redhat.com/show_bug.cgi?id=457113
CVE ID: CVE-2008-3271 State: PUBLISHED Published: 2008-10-13T18:00:00 Last Updated: 2024-08-07T09:28:41.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a "synchronization problem" and lack of thread safety, and related to RemoteFilterValve, RemoteAddrValve, and RemoteHostValve. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://w
ve. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200806e.html - http://www.nec.co.jp/security-info/secinfo/nv09-006.html - http://www.vupen.com/english/advisories/2008/2800 - http://secunia.com/advisories/32234 - http://www.securityfocus.com/archive/1/497220/100/0/threaded - http://secunia.com/advisories/32398 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html - https://issues.apache.org/bugzilla/show_bug.cgi?id=25835 - http://www.vupen.com/english/advisories/2009/1818 - http://securityreason.com/securityalert/4396 - http://www
id=25835 - http://www.vupen.com/english/advisories/2009/1818 - http://securityreason.com/securityalert/4396 - http://www.securityfocus.com/bid/31698 - http://secunia.com/advisories/35684 - http://www.vupen.com/english/advisories/2008/2793 - http://tomcat.apache.org/security-5.html - http://www.securitytracker.com/id?1021039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45791 - http://jvn.jp/en/jp/JVN30732239/index.html - http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000069.html - http://secunia.com/advisories/32213 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62