Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e-announce/2008-December/msg01309.html - http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html - http://www.mediawiki.org/wiki/Manual:%24wgShowExceptionDetails - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html - http://secunia.com/advisories/33349
CVE ID: CVE-2008-5689 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T11:04:44.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-242266-1 - http://www.securitytracker.com/id?1021464 - http://securityreason.com/securityalert/4801 - https://oval.cisecurity.org/repository/search/definition/oval
d?1021464 - http://securityreason.com/securityalert/4801 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47449 - http://www.trapkit.de/advisories/TKADV2008-015.txt - http://www.exploit-db.com/exploits/15962 - http://www.vupen.com/english/advisories/2008/3454 - http://www.securityfocus.com/archive/1/499352/100/0/threaded - http://www.securityfocus.com/bid/32904 - http://secunia.com/advisories/33160
CVE ID: CVE-2008-5690 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T11:04:44.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allows local users to cause a denial of service (authentication failure) via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the store_cred function in pam_krb5. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3428 - http://secunia.com/advisories/33042 - http://sunsolve.sun.com/search/document.do?assetk
m/english/advisories/2008/3428 - http://secunia.com/advisories/33042 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-244866-1 - http://www.securityfocus.com/bid/32793 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-112908-33-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5792 - http://www.securitytracker.com/id?1021390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47291 - http://support.avaya.com/elmodocs2/security/ASA-2008-515.htm - http://secunia.com/advisories/33313
CVE ID: CVE-2008-5691 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T11:04:44.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Phoenician Casino FlashAX ActiveX control 1.0.0.7 allows remote attackers to execute arbitrary code via a long argument to the SetID method. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4795 - http://www.securityfocus.com/bid/32901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47448 - https://www.exploit-db.com/exploits/7505
CVE ID: CVE-2008-5692 State: PUBLISHED Published: 2008-12-19T18:00:00 Last Updated: 2024-08-07T11:04:44.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4799 - http://docs.ipswitch.com/WS_FTP_Server611/ReleaseNotes/index.htm?k_id=ipswitch_ftp_documents_worldwide_ws_ftpserverv611releasenotes#link
itch.com/WS_FTP_Server611/ReleaseNotes/index.htm?k_id=ipswitch_ftp_documents_worldwide_ws_ftpserverv611releasenotes#link12 - http://www.vupen.com/english/advisories/2008/0473 - http://aluigi.altervista.org/adv/wsftpweblog-adv.txt - http://www.securityfocus.com/bid/27654 - http://www.securityfocus.com/archive/1/487697/100/200/threaded - http://www.securityfocus.com/archive/1/487686/100/200/threaded - http://secunia.com/advisories/28822
CVE ID: CVE-2008-5693 State: PUBLISHED Published: 2008-12-19T18:00:00 Last Updated: 2024-08-07T11:04:44.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4799 - http://aluigi.altervista.org/adv/wsftpweblog-adv.txt - http://www.securityfocus.com/bid/27654 - http://www.securityfocus.com/archive/1/487697/100/200/threaded - http://www.securityfocus.com/archive/1/4
om/bid/27654 - http://www.securityfocus.com/archive/1/487697/100/200/threaded - http://www.securityfocus.com/archive/1/487686/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/47677
CVE ID: CVE-2008-5694 State: PUBLISHED Published: 2008-12-19T18:00:00 Last Updated: 2024-08-07T11:04:43.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treated as an issue in Sandbox. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47688 - http://www.by-f10.com/bug.txt - http://www.securityfocus.com/archive/1/487903/100
e.ibmcloud.com/vulnerabilities/47688 - http://www.by-f10.com/bug.txt - http://www.securityfocus.com/archive/1/487903/100/200/threaded
CVE ID: CVE-2008-5695 State: PUBLISHED Published: 2008-12-19T18:00:00 Last Updated: 2024-08-07T11:04:44.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manage_options and upload_files capabilities to execute arbitrary code by uploading a PHP script and adding this script's pathname to active_plugins. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4798 - http://www.securityfocus.com/bid/27633 - https://www.exploit-db.com/exploits/5066 -
rityreason.com/securityalert/4798 - http://www.securityfocus.com/bid/27633 - https://www.exploit-db.com/exploits/5066 - http://www.buayacorp.com/files/wordpress/wp-blog-option-overwrite.txt - http://secunia.com/advisories/28789 - http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html - http://mu.wordpress.org/forums/topic.php?id=7534&page&replies=1
CVE ID: CVE-2008-5696 State: PUBLISHED Published: 2008-12-19T18:00:00 Last Updated: 2024-08-07T11:04:44.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console, which allows remote attackers to reconfigure the Apache HTTP Server via console operations. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47104 - http://secunia.com/advisories/32989 - http://www.vupen.com/english/advisories/2008/3368 - http://www.securityfocus.com/bid/32657 - http://www.securitytracker
http://www.vupen.com/english/advisories/2008/3368 - http://www.securityfocus.com/bid/32657 - http://www.securitytracker.com/id?1021350 - http://www.novell.com/support/viewContent.do?externalId=7001907
CVE ID: CVE-2008-5697 State: PUBLISHED Published: 2008-12-22T15:00:00 Last Updated: 2024-08-07T11:04:44.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: The skype_tool.copy_num method in the Skype extension BETA 2.2.0.95 for Firefox allows remote attackers to write arbitrary data to the clipboard via a string argument. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6690 - http://securityreason.com/securityalert/4797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45739 - http://www.securityfocus.com/bid/31613
CVE ID: CVE-2008-5698 State: PUBLISHED Published: 2008-12-22T15:00:00 Last Updated: 2024-08-07T11:04:44.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (application crash) via an invalid document.load call that triggers use of a deleted object. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31696 - http://secunia.com/advisories/32208 - http://www.vupen.com/english/advisories/2008/2915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
sories/32208 - http://www.vupen.com/english/advisories/2008/2915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45804 - http://securityreason.com/securityalert/4796 - https://www.exploit-db.com/exploits/6718
CVE ID: CVE-2008-5699 State: PUBLISHED Published: 2008-12-22T15:00:00 Last Updated: 2024-08-07T11:04:44.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: The name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv_50 through snv_104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33218 - http://securitytracker.com/id?1021477 - http://osvdb.org/50934 - http://www.securityfocus.com/bid/32921 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-242006-1
CVE ID: CVE-2008-5700 State: PUBLISHED Published: 2008-12-22T15:00:00 Last Updated: 2024-08-07T11:04:44.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-0331.html - http://www.redhat.com/support/errata/RHSA-2009-0326.html - http://secunia.com/advisories/33706 - http://lists.opensuse.org/opensuse-security-announce/2009-02/m
SA-2009-0326.html - http://secunia.com/advisories/33706 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html - http://secunia.com/advisories/37471 - http://www.redhat.com/support/errata/RHSA-2009-0053.html - http://secunia.com/advisories/33756 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=f2f1fa78a155524b849edf359e42a3001ea652c0 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - https://bugzilla.redhat.com/show_bug.cgi?id=474495 - http://secunia.com/advisories/33758 - http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm - http://secunia.com/advisories/34252 - http://openwall.com/lists/oss-security/2008/12/0
docs2/security/ASA-2009-114.htm - http://secunia.com/advisories/34252 - http://openwall.com/lists/oss-security/2008/12/09/2 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/47669 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10948 - http://secunia.com/advisories/34981 - https://usn.ubuntu.com/714-1/ - http://www.debian.org/security/2009/dsa-1787 - http://www.ubuntu.com/usn/usn-715-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.9 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8606 - http://secunia.com/advisories/33854 - htt
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8606 - http://secunia.com/advisories/33854 - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/34762
CVE ID: CVE-2008-5701 State: PUBLISHED Published: 2008-12-22T15:00:00 Last Updated: 2024-08-07T11:04:44.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64-bit MIPS platforms allows local users to cause a denial of service (system crash) via an o32 syscall with a small syscall number, which leads to an attempted read operation outside the bounds of the syscall table. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2008/12/09/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47190 - http://www.kernel.org/pub/linux/kernel/v2.
y/2008/12/09/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47190 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc8 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=e807f9574e37a3f202e677feaaad1b7c5d2c0db8 - http://www.debian.org/security/2009/dsa-1794 - http://secunia.com/advisories/33078 - http://secunia.com/advisories/35011 - http://secunia.com/advisories/34981 - http://www.securityfocus.com/bid/32716 - http://www.debian.org/security/2009/dsa-1787
CVE ID: CVE-2008-5702 State: PUBLISHED Published: 2008-12-22T15:00:00 Last Updated: 2024-08-07T11:04:44.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer underflow in the ibwdt_ioctl function in drivers/watchdog/ib700wdt.c in the Linux kernel before 2.6.28-rc1 might allow local users to have an unknown impact via a certain /dev/watchdog WDIOC_SETTIMEOUT IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35390 - http://openwall.com/lists/oss-security/2008/12/17/20 - http://openwall.com/lists/oss-security/2008/12/17/6 - http://secunia.com/advisories/33706 - https://oval.cisecurity.org/repository/search/definition/oval
urity/2008/12/17/6 - http://secunia.com/advisories/33706 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11344 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html - http://secunia.com/advisories/33756 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc1 - http://lkml.org/lkml/2008/10/5/173 - http://www.debian.org/security/2009/dsa-1794 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html - http://www.redhat.com/support/errata/RHSA-2009-0014.html - http://secunia.com/advisories/35011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47667 - http://secunia.com/advisories/33556 -
om/advisories/35011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47667 - http://secunia.com/advisories/33556 - http://bugzilla.kernel.org/show_bug.cgi?id=11399 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=7c2500f17d65092d93345f3996cf82ebca17e9ff - http://secunia.com/advisories/34981 - https://usn.ubuntu.com/714-1/ - http://www.debian.org/security/2009/dsa-1787 - http://www.ubuntu.com/usn/usn-715-1 - http://openwall.com/lists/oss-security/2008/12/17/9 - http://openwall.com/lists/oss-security/2008/12/10/2
CVE ID: CVE-2008-5703 State: PUBLISHED Published: 2008-12-22T15:00:00 Last Updated: 2024-08-07T11:04:43.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/.smswatch or (b) /tmp/gpsdrivepos temporary file, related to (1) examples/gpssmswatch and (2) src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00187.html - http://openwall.com/lists/oss-security/2008/12/17/15 - http://www.securityfocus.com/bid/32
2009-February/msg00187.html - http://openwall.com/lists/oss-security/2008/12/17/15 - http://www.securityfocus.com/bid/32887 - http://sourceforge.net/tracker/index.php?func=detail&aid=2121124&group_id=148048&atid=770280 - http://secunia.com/advisories/31694 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508597 - http://secunia.com/advisories/33825
CVE ID: CVE-2008-5704 State: PUBLISHED Published: 2008-12-22T15:00:00Z Last Updated: 2024-09-16T20:06:30.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: src/unit_test.c in gpsdrive (aka gpsdrive-scripts) 2.10~pre4 might allow local users to overwrite arbitrary files via a symlink attack on the /tmp/gpsdrive-unit-test/proc temporary file, a different vector than CVE-2008-4959 and CVE-2008-5380. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2008/12/17/15 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508597
CVE ID: CVE-2008-5705 State: PUBLISHED Published: 2008-12-22T15:00:00 Last Updated: 2024-08-07T11:04:43.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier, when user triggers are enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in an argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32420 - http://bugs.debian.org/506530 - https://www.exploit-db.com/exploits/7183 - http://openwall.com/lists/oss-security/2008/12/17/16 - https://exchange.xforce.ibmcloud.com/vulnerabi
om/exploits/7183 - http://openwall.com/lists/oss-security/2008/12/17/16 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46801 - http://securityreason.com/securityalert/4800
CVE ID: CVE-2008-5706 State: PUBLISHED Published: 2008-12-22T15:00:00 Last Updated: 2024-08-07T11:04:44.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/trigger.tmp temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/506530 - http://www.securityfocus.com/bid/32889 - https://www.exploit-db.com/exploits/7183 - http://openwall.com/lists/oss-security/2008/12/17/16 - http://securityreason.com/securityalert/4800
CVE ID: CVE-2008-5707 State: PUBLISHED Published: 2008-12-23T22:00:00 Last Updated: 2024-08-07T11:04:43.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the catno parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/497279/100/0/threaded - http://www.securityfocus.com/bid/31740
CVE ID: CVE-2008-5708 State: PUBLISHED Published: 2008-12-24T17:00:00 Last Updated: 2024-08-07T11:04:43.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45824 - http://securityreason.com/securityalert/4804 - https://www.exploit-db.com/exploits/6729 - http://www.securityfocus.com/bid/31736
CVE ID: CVE-2008-5709 State: PUBLISHED Published: 2008-12-24T17:00:00 Last Updated: 2024-08-07T11:04:43.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45747 - http://www.securityfocus.com/bid/31645 - http://www.vupen.com/english/advisories/200
bmcloud.com/vulnerabilities/45747 - http://www.securityfocus.com/bid/31645 - http://www.vupen.com/english/advisories/2008/2772 - http://www.voipshield.com/research-details.php?id=122 - http://secunia.com/advisories/32204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45749 - http://www.voipshield.com/research-details.php?id=121 - http://support.avaya.com/elmodocs2/security/ASA-2008-391.htm
CVE ID: CVE-2008-5710 State: PUBLISHED Published: 2008-12-24T17:00:00 Last Updated: 2024-08-07T11:04:44.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1.x, 4.0.3, and 5.x allow remote attackers to read (1) configuration files, (2) log files, (3) binary image files, and (4) help files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45750 - http://secunia.com/advisories/32035 - http://www.voipshield.com/research-details.php?id=123
com/vulnerabilities/45750 - http://secunia.com/advisories/32035 - http://www.voipshield.com/research-details.php?id=123 - http://www.securityfocus.com/bid/31639 - http://support.avaya.com/elmodocs2/security/ASA-2008-394.htm
CVE ID: CVE-2008-5711 State: PUBLISHED Published: 2008-12-24T17:00:00 Last Updated: 2024-08-07T11:04:43.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4805 - https://www.exploit-db.com/exploits/5102 - http://www.securityfocus.com/bid/27756
CVE ID: CVE-2008-5712 State: PUBLISHED Published: 2008-12-24T17:00:00 Last Updated: 2024-08-07T11:04:44.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1) a long COLOR attribute in an HR element; or a long (a) BGCOLOR or (b) BORDERCOLOR attribute in a (2) TABLE, (3) TD, or (4) TR element. NOTE: the FONT vector is already covered by CVE-2008-4514. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47696 - https://www.exploit-db.com/exploits/6704 - http://securityreason.com/securityalert/4806
CVE ID: CVE-2008-5713 State: PUBLISHED Published: 2008-12-24T17:00:00 Last Updated: 2024-08-07T11:04:43.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service (soft lockup) by sending a large amount of network traffic, as demonstrated by multiple simultaneous invocations of the Netperf benchmark application in UDP_STREAM mode. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33706 - http://openwall.com/lists/oss-security/2008/12/23/1 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-