Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3642 State: PUBLISHED Published: 2008-10-10T10:00:00 Last Updated: 2024-08-07T09:45:18.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ColorSync in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via an image with a crafted ICC profile. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html - http://www.securityfocus.com/bid/31715 - http://www.securityfocus.com/bid/31681 - http://www.securitytracker.com/id?1021023 - http://secunia.com/advisories/32706 - http://secu
urityfocus.com/bid/31681 - http://www.securitytracker.com/id?1021023 - http://secunia.com/advisories/32706 - http://secunia.com/advisories/32222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45778 - http://support.apple.com/kb/HT3298 - http://www.vupen.com/english/advisories/2008/2780 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216
CVE ID: CVE-2008-3643 State: PUBLISHED Published: 2008-10-10T10:00:00 Last Updated: 2024-08-07T09:45:18.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Finder in Mac OS X 10.5.5 allows user-assisted attackers to cause a denial of service (continuous termination and restart) via a crafted Desktop file that generates an error when producing its icon, related to an "error recovery issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45780 - http://www.securitytracker.com/id?1021024 - http://secunia.com/advisories/32222 - http://www.securi
nerabilities/45780 - http://www.securitytracker.com/id?1021024 - http://secunia.com/advisories/32222 - http://www.securityfocus.com/bid/31720 - http://www.vupen.com/english/advisories/2008/2780 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216
CVE ID: CVE-2008-3644 State: PUBLISHED Published: 2008-11-17T18:00:00 Last Updated: 2024-08-07T09:45:18.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html - http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html - http://www.vupen.com/english/advisories/2008/3232 - http://secunia.com/advisories/32706 - http://www.s
v/msg00002.html - http://www.vupen.com/english/advisories/2008/3232 - http://secunia.com/advisories/32706 - http://www.securityfocus.com/bid/32291 - http://support.apple.com/kb/HT3318 - http://www.securitytracker.com/id?1021226 - http://support.apple.com/kb/HT3298 - http://secunia.com/advisories/32756
CVE ID: CVE-2008-3645 State: PUBLISHED Published: 2008-10-10T10:00:00 Last Updated: 2024-08-07T09:45:18.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the local IPC component in the EAPOLController plugin for configd (Networking component) in Mac OS X 10.4.11 and 10.5.5 allows local users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31681 - http://www.securitytracker.com/id?1021025 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45781 - http://secunia.com/advisories/32222 - http://www.securityfocus.com/bid/31711 - http://www.vupen.com/engli
lities/45781 - http://secunia.com/advisories/32222 - http://www.securityfocus.com/bid/31711 - http://www.vupen.com/english/advisories/2008/2780 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216
CVE ID: CVE-2008-3646 State: PUBLISHED Published: 2008-10-10T10:00:00 Last Updated: 2024-08-07T09:45:19.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when mail is sent from a local command-line tool, which allows remote attackers to send mail to local Mac OS X users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45876 - http://secunia.com/advisories/32222 - http://www.securityfocus.com/bid/31721 - http://www.vupen.com/english/advisories/2008/2780 - http://lists.apple.com/arc
http://www.securityfocus.com/bid/31721 - http://www.vupen.com/english/advisories/2008/2780 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216
CVE ID: CVE-2008-3647 State: PUBLISHED Published: 2008-10-10T10:00:00 Last Updated: 2024-08-07T09:45:18.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PSNormalizer in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a PostScript file with a crafted bounding box comment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45783 - http://www.securityfocus.com/bid/31719 - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/32222 - http://www.vup
urityfocus.com/bid/31719 - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/32222 - http://www.vupen.com/english/advisories/2008/2780 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216
CVE ID: CVE-2008-3648 State: PUBLISHED Published: 2008-08-12T23:00:00 Last Updated: 2024-08-07T09:45:18.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44423 - http://www.securitytracker.com/id?1020711 - http://packetstormsecurity.org/0808-advisories/Nslookup-Crash.txt - http://www.securityfocus.com/bid/30636 - http://www.nullcode.com.ar/ncs/crash/nsloo.htm
CVE ID: CVE-2008-3649 State: PUBLISHED Published: 2008-08-13T00:00:00 Last Updated: 2024-08-07T09:45:18.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote attackers to execute arbitrary SQL commands via the Cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2254 - http://securityreason.com/securityalert/4149 - http://secunia.com/advisories/31292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44121 - http://www.securityfocus.com/bid/30453 - https://www.exploit-db.com/exploits/6167
CVE ID: CVE-2008-3650 State: PUBLISHED Published: 2008-08-13T01:00:00 Last Updated: 2024-08-07T09:45:18.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to "unescaped output," possibly cross-site scripting (XSS), in the (1) object browser and (2) contact view. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44479 - http://lists.horde.org/archives/announce/2008/000420.html
CVE ID: CVE-2008-3651 State: PUBLISHED Published: 2008-08-13T01:00:00 Last Updated: 2024-08-07T09:45:18.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2008/2345 - http://support.apple.com/kb/HT3549 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:181 - http://sourceforge.net/mailarchive
ple.com/kb/HT3549 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:181 - http://sourceforge.net/mailarchive/message.php?msg_name=20080724084529.GA3768%40zen.inc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10453 - http://secunia.com/advisories/35074 - http://www.securityfocus.com/bid/30657 - http://secunia.com/advisories/32971 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.vupen.com/english/advisories/2008/2844 - http://marc.info/?l=ipsec-tools-devel&m=121688914101709&w=2 - http://security.gentoo.org/glsa/glsa-200812-03.x
08/2844 - http://marc.info/?l=ipsec-tools-devel&m=121688914101709&w=2 - http://security.gentoo.org/glsa/glsa-200812-03.xml - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://www.securitytracker.com/id?1020667 - https://bugzilla.redhat.com/show_bug.cgi?id=456660 - http://secunia.com/advisories/32759 - http://secunia.com/advisories/31624 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://secunia.com/advisories/31450 - http://www.vupen.com/english/advisories/2009/1297 - http://www.ubuntu.com/usn/usn-641-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44395 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http
e.ibmcloud.com/vulnerabilities/44395 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://sourceforge.net/project/shownotes.php?release_id=615380&group_id=74601 - http://www.redhat.com/support/errata/RHSA-2008-0849.html
CVE ID: CVE-2008-3652 State: PUBLISHED Published: 2008-08-13T01:00:00.000Z Last Updated: 2025-03-27T15:38:13.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption). Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://www.vupen.com/english/advisories/2009/1621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44424 - http://support.apple.com/kb/HT3549 - http://www.mandriva.com/security/advisories?name=MDVSA-200
/vulnerabilities/44424 - http://support.apple.com/kb/HT3549 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:181 - http://www.securitytracker.com/id?1020692 - http://secunia.com/advisories/35074 - http://www.vupen.com/english/advisories/2008/2378 - http://www.securityfocus.com/bid/30657 - http://secunia.com/advisories/32971 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.vupen.com/english/advisories/2008/2844 - http://security.gentoo.org/glsa/glsa-200812-03.xml - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - https://oval.cisecurity.org
200812-03.xml - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10448 - http://secunia.com/advisories/31478 - http://secunia.com/advisories/32759 - http://secunia.com/advisories/31624 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://www.ubuntu.com/usn/usn-641-1 - http://sourceforge.net/mailarchive/forum.php?thread_name=48a0c7a0.qPeWZAE0PY8bDDq%2B%25olel%40ans.pl&forum_name=ipsec-tools-devel - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://www.redhat.com/support/errata/RHSA-20
ttp://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://www.redhat.com/support/errata/RHSA-2008-0849.html
CVE ID: CVE-2008-3653 State: PUBLISHED Published: 2008-08-13T01:00:00 Last Updated: 2024-08-07T09:45:18.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before 2.0 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44422 - http://info.tikiwiki.org/tiki-read_article.php?articleId=35
CVE ID: CVE-2008-3654 State: PUBLISHED Published: 2008-08-13T01:00:00 Last Updated: 2024-08-07T09:45:18.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain "path and PHP configuration" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44421 - http://info.tikiwiki.org/tiki-read_article.php?articleId=35 - http://tikiwiki.org/ReleaseNotes20
CVE ID: CVE-2008-3655 State: PUBLISHED Published: 2008-08-13T01:00:00 Last Updated: 2024-08-07T09:45:18.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly restrict access to critical variables and methods at various safe levels, which allows context-dependent attackers to bypass intended access restrictions via (1) untrace_var, (2) $PROGRAM_NAME, and (3) syslog at safe level 4, and (4) insecure methods at safe levels 1 through 3. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31430 - http://www.securitytracker.com/id?
t Notes: - CVE Program Container: References: - http://secunia.com/advisories/31430 - http://www.securitytracker.com/id?1020656 - http://secunia.com/advisories/31697 - https://usn.ubuntu.com/651-1/ - http://support.apple.com/kb/HT3549 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0264 - http://www.debian.org/security/2008/dsa-1652 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11602 - http://secunia.com/advisories/35074 - http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm - http://www.debian.org/security/2008/dsa-1651 - https://exchange.xforce.ibmcloud.
m/elmodocs2/security/ASA-2008-424.htm - http://www.debian.org/security/2008/dsa-1651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44369 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.redhat.com/support/errata/RHSA-2008-0895.html - http://www.securityfocus.com/bid/30644 - http://www.redhat.com/support/errata/RHSA-2008-0897.html - http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/ - http://secunia.com/advisories/32219 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://secunia.com/advisories/32255 - http://www.vupen.com/english/advisories/2009/1297 - http://www.securityfocus.com/archive/1/495884/100/0/thr
ries/32255 - http://www.vupen.com/english/advisories/2009/1297 - http://www.securityfocus.com/archive/1/495884/100/0/threaded - http://secunia.com/advisories/32371 - http://secunia.com/advisories/32165 - http://security.gentoo.org/glsa/glsa-200812-17.xml - http://secunia.com/advisories/33178 - http://www.vupen.com/english/advisories/2008/2334 - http://secunia.com/advisories/32372 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401 - http://secunia.com/advisories/32256
CVE ID: CVE-2008-3656 State: PUBLISHED Published: 2008-08-13T01:00:00 Last Updated: 2024-08-07T09:45:18.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFileHandler in WEBrick in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted HTTP request that is processed by a backtracking regular expression. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%
nal Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9682 - http://secunia.com/advisories/31430 - http://secunia.com/advisories/31697 - https://usn.ubuntu.com/651-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/44371 - http://support.apple.com/kb/HT3549 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0264 - http://www.debian.org/security/2008/dsa-1652 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html - http://secunia.com/advisories/35074 - http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm - http://www.debian.org/security/2008/dsa-1651 - http://
- http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm - http://www.debian.org/security/2008/dsa-1651 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/30644 - http://www.redhat.com/support/errata/RHSA-2008-0897.html - http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/ - http://secunia.com/advisories/32219 - http://www.securitytracker.com/id?1020654 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://secunia.com/advisories/32255 - http://www.vupen.com/english/advisories/2009/1297 - http://www.securityfocus.com/archive/1/495884/100/0/threaded - http://secunia.com/advisories/32371 - http
es/2009/1297 - http://www.securityfocus.com/archive/1/495884/100/0/threaded - http://secunia.com/advisories/32371 - http://secunia.com/advisories/32165 - http://security.gentoo.org/glsa/glsa-200812-17.xml - http://secunia.com/advisories/33178 - http://www.vupen.com/english/advisories/2008/2334 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401 - http://secunia.com/advisories/32256
CVE ID: CVE-2008-3657 State: PUBLISHED Published: 2008-08-13T01:00:00 Last Updated: 2024-08-07T09:45:19.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not check "taintness" of inputs, which allows context-dependent attackers to bypass safe levels and execute dangerous functions by accessing a library using DL.dlopen. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31430 - http://secunia.com/advisories/31697 - https://usn.ubuntu.com/651-1/ - http://support.apple.com/kb/HT3549 - http://wiki.rpath.com/wiki/Advisor
visories/31697 - https://usn.ubuntu.com/651-1/ - http://support.apple.com/kb/HT3549 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0264 - http://www.debian.org/security/2008/dsa-1652 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9793 - http://secunia.com/advisories/35074 - http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm - http://www.debian.org/security/2008/dsa-1651 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/30644 - http://www.redhat.com/support/errata/RHSA-2008-0897.html - http://www
02.html - http://www.securityfocus.com/bid/30644 - http://www.redhat.com/support/errata/RHSA-2008-0897.html - http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/ - http://secunia.com/advisories/32219 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44372 - http://secunia.com/advisories/32255 - http://www.vupen.com/english/advisories/2009/1297 - http://www.securityfocus.com/archive/1/495884/100/0/threaded - http://secunia.com/advisories/32371 - http://secunia.com/advisories/32165 - http://security.gentoo.org/glsa/glsa-200812-17.xml - http://secunia.com/advisories/33178 - http://www.vupen.com/english/advisor
security.gentoo.org/glsa/glsa-200812-17.xml - http://secunia.com/advisories/33178 - http://www.vupen.com/english/advisories/2008/2334 - http://www.securitytracker.com/id?1020652 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401 - http://secunia.com/advisories/32256
CVE ID: CVE-2008-3658 State: PUBLISHED Published: 2008-08-15T00:00:00 Last Updated: 2024-08-07T09:45:18.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30649 - http://secunia.com/advisories/32746 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://support.apple.com/kb/HT3549 - http://security.gentoo.org/glsa/glsa-200811-05.xml
bugtraq&m=125631037611762&w=2 - http://support.apple.com/kb/HT3549 - http://security.gentoo.org/glsa/glsa-200811-05.xml - http://secunia.com/advisories/31982 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html - http://www.securityfocus.com/archive/1/501376/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2009:024 - http://www.vupen.com/english/advisories/2008/3275 - http://wiki.rpath.com/Advisories:rPSA-2009-0035 - http://www.securityfocus.com/archive/1/498647/100/0/threaded - http://secunia.com/advisories/35074 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://secunia.com/advisories/32148 - http://lists.apple.com/archives/secur
marc.info/?l=bugtraq&m=125631037611762&w=2 - http://secunia.com/advisories/32148 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.openwall.com/lists/oss-security/2008/08/08/2 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html - http://www.vupen.com/english/advisories/2009/0320 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:023 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:022 - http://osvdb.org/47484 - http://secunia.com/advisories/33797 - http://news.php.net/php.cvs/51219 - http://www.redhat.com/support/errata/RHSA-2009-
ttp://secunia.com/advisories/33797 - http://news.php.net/php.cvs/51219 - http://www.redhat.com/support/errata/RHSA-2009-0350.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.openwall.com/lists/oss-security/2008/08/13/8 - http://www.vupen.com/english/advisories/2009/1297 - http://bugs.gentoo.org/show_bug.cgi?id=234102 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:021 - http://www.debian.org/security/2008/dsa-1647 - http://www.vupen.com/english/advisories/2008/2336 - http://www.securityfocus.com/archive/1/498647/100/0/threaded - http://marc.info/?l=bugtraq&m=123376588623823&