Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1027 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:08:57.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Filing Protocol (AFP) Server in Apple Mac OS X before 10.5.3 does not verify that requested files and directories are inside shared folders, which allows remote attackers to read arbitrary files via unspecified AFP traffic. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42703 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://securitytracker.com/id?1020130 - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-an
ttp://securitytracker.com/id?1020130 - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29490 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1028 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:08:57.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in AppKit in Apple Mac OS X before 10.5 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document file, as demonstrated by opening the document with TextEdit. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020131 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42705 - http://lis
50A.html - http://secunia.com/advisories/30430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42705 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.securityfocus.com/bid/29487 - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1030 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:08:57.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the CFDataReplaceBytes function in the CFData API in CoreFoundation in Apple Mac OS X before 10.5.3 allows context-dependent attackers to execute arbitrary code or cause a denial of service (crash) via an invalid length argument, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020135 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/securit
s-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42709 - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29491 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1031 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:08:57.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreGraphics in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document, related to an uninitialized variable. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020136 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.securityfocus.com/bid/29480 - https:/
://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.securityfocus.com/bid/29480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42710 - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1032 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:08:57.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via an (1) Automator, (2) Help, (3) Safari, or (4) Terminal content type for a downloadable object, which does not trigger a "potentially unsafe" warning message in (a) the Download Validation feature in Mac OS X 10.4 or (b) the Quarantine feature in Mac OS X 10.5. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29481 - http://www.us-ce
ditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29481 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://securitytracker.com/id?1020137 - http://www.vupen.com/english/advisories/2008/1697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42711 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1033 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:08:57.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3, when debug logging is enabled and a printer requires a password, allows attackers to obtain sensitive information (credentials) by reading the log data, related to "authentication environment variables." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42713 - http://www.securityfocus.com/bid/29484 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://securitytracker.com/id?1020145 - http:/
us.com/bid/29484 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://securitytracker.com/id?1020145 - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1034 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:08:57.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in Help Viewer in Apple Mac OS X before 10.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted help:topic URL that triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42716 - http://securitytracker.com/id?1020138 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce
/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.securityfocus.com/bid/29483 - http://www.vupen.com/english/advisories/2008/1697 - http://www.kb.cert.org/vuls/id/566875 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1035 State: PUBLISHED Published: 2008-06-03T20:00:00 Last Updated: 2024-08-07T08:08:57.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or possibly execute arbitrary code via an "ATTACH;VALUE=URI:S=osumi" line in a .ics file, which triggers a "resource liberation" bug. NOTE: CVE-2008-2007 was originally used for this issue, but this is the appropriate identifier. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1601 - http://www.coresecurity.com/?
- CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1601 - http://www.coresecurity.com/?action=item&id=2219 - http://www.securityfocus.com/bid/28633 - http://www.securityfocus.com/archive/1/492682/100/0/threaded - http://www.securityfocus.com/archive/1/492638/100/100/threaded - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://www.securityfocus.com/bid/29486 - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.securityfocus.com/archive/1/492414/100/0/threaded - http://www.securitytracker.com/id?1020095 - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityf
d - http://www.securitytracker.com/id?1020095 - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/29412
CVE ID: CVE-2008-1036 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:08:57.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-0296.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42717 - http://secunia.com/advisories/34777
a/RHSA-2009-0296.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42717 - http://secunia.com/advisories/34777 - http://www.securityfocus.com/bid/29488 - http://securitytracker.com/id?1020139 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.debian.org/security/2009/dsa-1762 - http://secunia.com/advisories/34290 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10824 - http://www.vupen.com/english/advisories/2008/1697 - http://www.ubuntu.com/usn/USN-747-1 - http://www.securityfocus.com/bid/29412 - http://wiki.rpat
h/advisories/2008/1697 - http://www.ubuntu.com/usn/USN-747-1 - http://www.securityfocus.com/bid/29412 - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0064
CVE ID: CVE-2008-1037 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the file listing function in the web management interface in Packeteer PacketShaper and PolicyCenter 8.2.2 allows remote attackers to inject arbitrary web script or HTML via the FILELIST parameter to an arbitrary component, which triggers injection into an Error Report page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29119 - http://www.securityfocus.com/bid/27982 - http://www.securityfocus.com/archive/1/488712/100/0/threaded - http:
es/29119 - http://www.securityfocus.com/bid/27982 - http://www.securityfocus.com/archive/1/488712/100/0/threaded - http://www.securitytracker.com/id?1019501 - http://securityreason.com/securityalert/3701
CVE ID: CVE-2008-1038 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mod/mod.extmanager.php in DBHcms 1.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the extmanager_install parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27996 - https://www.exploit-db.com/exploits/5189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40835 - http://secunia.com/advisories/29110
CVE ID: CVE-2008-1039 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands via the QID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40839 - http://www.securityfocus.com/bid/27989 - https://www.exploit-db.com/exploits/5185 - http://secunia.com/advisories/29102
CVE ID: CVE-2008-1040 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27966 - http://www.vupen.com/english/advisories/2008/0662 - http://secunia.com/advisories/29088 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200804e.h
//secunia.com/advisories/29088 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200804e.html
CVE ID: CVE-2008-1041 State: PUBLISHED Published: 2008-02-27T19:00:00Z Last Updated: 2024-09-17T00:15:56.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mwhois.php in Matt Wilson Matt's Whois (MWhois) allows remote attackers to inject arbitrary web script or HTML via the domain parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.org/0802-exploits/mattswhois-xss.txt - http://www.securityfocus.com/bid/27974 - http://secunia.com/advisories/29093
CVE ID: CVE-2008-1042 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/body.inc.php in Linux Web Shop (LWS) php Download Manager 1.0 and 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the content parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29089 - https://www.exploit-db.com/exploits/5183 - http://www.securityfocus.com/bid/27961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40795
CVE ID: CVE-2008-1043 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 BETA allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40794 - http://www.securityfocus.com/bid/27963 - http://www.securityfocus.com/archive/1/494140/100/0/threaded
CVE ID: CVE-2008-1044 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Quantum Streaming Player (Quantum Streaming IE Player) ActiveX control (aka QSP2IE.QSP2IE) in qsp2ie07076007.dll 7.7.6.7 and qsp2ie07074039.dll 7.7.4.39 in Move Media Player allows remote attackers to execute arbitrary code via a long argument to the UploadLogs method, a different vector than CVE-2007-4722. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27995 - http://list
n. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27995 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060460.html - http://www.vupen.com/english/advisories/2008/0684 - http://secunia.com/advisories/29108 - https://www.exploit-db.com/exploits/5190
CVE ID: CVE-2008-1045 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the resource parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27986 - http://secunia.com/advisories/29121 - http://securityreason.com/securityalert/3702 - http://www.securityfocus.com/archive/1/488708/100/0/threaded
CVE ID: CVE-2008-1046 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code via a URL in the op[footer_body] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5176
CVE ID: CVE-2008-1047 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tiki-edit_article.php in TikiWiki before 1.9.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29092 - http://tikiwiki.org/ReleaseNotes1910 - http://www.securityfocus.com/bid/27968 - http://www.vupen.com/english/advisories/2008/0661 - http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=1498
CVE ID: CVE-2008-1048 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:56.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in manager/xmedia.php in Plume CMS 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40841 - http://www.securitytracker.com/id?1019507 - http://www.digitrustgroup.com/advisories/web-application-security-plume-cms.html - http://secunia.com/advisories/29116 - http://www.securityfocus.com/bid/27999
CVE ID: CVE-2008-1049 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.psoft.net/misc/hs_ss_technical_update.html - http://www.securityfocus.com/bid/28002 - http://secunia.com/advisories/29084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40846 - http://www.securitytracker.com/id?1019506
CVE ID: CVE-2008-1050 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbcat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488706/100/0/threaded - http://www.securityfocus.com/bid/27973 - http://securityreason.com/securityalert/3703
CVE ID: CVE-2008-1051 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers to execute arbitrary PHP code via a URL in the content parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5175 - http://www.securityfocus.com/bid/27952
CVE ID: CVE-2008-1052 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488745/100/0/threaded - http://secunia.com/advisories/29096 - http://aluigi.altervista.org/adv/surgeftpizza-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerab
advisories/29096 - http://aluigi.altervista.org/adv/surgeftpizza-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/40843 - http://securityreason.com/securityalert/3704 - http://www.securityfocus.com/bid/27993
CVE ID: CVE-2008-1053 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a (1) viewarticle or (2) printpage action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40848 - http://www.securityfocus.com/bid/27991
CVE ID: CVE-2008-1054 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin SurgeMail 38k4 and earlier, and beta 39a, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via an HTTP request with multiple long headers to webmail.exe and unspecified other CGI executables, which triggers an overflow when assigning values to environment variables. NOTE: some of these details are obtained from third party information. Additional Analyst Not
to environment variables. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3705 - http://aluigi.altervista.org/adv/surgemailz-adv.txt - http://secunia.com/advisories/29105 - http://www.vupen.com/english/advisories/2008/0678 - http://www.securitytracker.com/id?1019500 - http://www.securityfocus.com/archive/1/488741/100/0/threaded - http://www.securityfocus.com/bid/27992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40834
CVE ID: CVE-2008-1055 State: PUBLISHED Published: 2008-02-27T19:00:00 Last Updated: 2024-08-07T08:08:57.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3705 - http://aluigi.altervista.org/adv/surgemailz-adv.txt - http://secunia.com/advisories/29137 - http://secunia.com/advisories/29105 - http://www
ista.org/adv/surgemailz-adv.txt - http://secunia.com/advisories/29137 - http://secunia.com/advisories/29105 - http://www.vupen.com/english/advisories/2008/0678 - http://www.securitytracker.com/id?1019500 - http://www.securityfocus.com/archive/1/488741/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/40833 - http://www.securityfocus.com/bid/27990