Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tp://www.adobe.com/support/security/bulletins/apsb08-05.html - http://secunia.com/advisories/28945 - http://securitytracker.com/id?1019397 - http://www.securityfocus.com/bid/27763 - http://www.vupen.com/english/advisories/2008/0537
CVE ID: CVE-2008-0643 State: PUBLISHED Published: 2008-03-12T00:00:00 Last Updated: 2024-08-07T07:54:22.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29332 - http://www.vupen.com/english/advisories/2008/0862/references - http://www.adobe.com/support/security/bulletins/apsb08-06.html - http://www.securitytracker.com/id?1019589 - http://www.securityfocus.com/bid/28205 - https://exchange.xforce.ibmcloud.com/vulnerab
.securitytracker.com/id?1019589 - http://www.securityfocus.com/bid/28205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41144
CVE ID: CVE-2008-0644 State: PUBLISHED Published: 2008-03-12T00:00:00 Last Updated: 2024-08-07T07:54:22.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism for applications via unspecified vectors related to the setEncoding function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29332 - http://www.adobe.com/support/security/bulletins/apsb08-07.html - http://www.vupen.com/english/advisories/2008/0862/references - http://www.securitytracker.com/id?1019590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4
008/0862/references - http://www.securitytracker.com/id?1019590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41145 - http://www.securityfocus.com/bid/28205
CVE ID: CVE-2008-0645 State: PUBLISHED Published: 2008-02-07T20:00:00Z Last Updated: 2024-09-16T17:38:25.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) config/conf-activation.php, (2) menu/item.php, and (3) modules/conf_modules.php in admin/system/; and (4) system/login.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27616
CVE ID: CVE-2008-0646 State: PUBLISHED Published: 2008-02-07T20:00:00 Last Updated: 2024-08-07T07:54:22.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bdecode_recursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before 0.5.8.3 and other products, allows context-dependent attackers to cause a denial of service (stack exhaustion and crash) via a crafted bencoded message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28782 - http://deluge-torrent.org/Changelog.php - http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_12/include/libtorrent/benc
ent.org/Changelog.php - http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_12/include/libtorrent/bencode.hpp?r1=956&r2=1968&pathrev=1968 - http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/trunk/include/libtorrent/bencode.hpp?view=log&pathrev=1968 - http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_13/include/libtorrent/bencode.hpp?view=log&pathrev=1968 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00001.html - http://secunia.com/advisories/28781 - http://secunia.com/advisories/28700 - http://www.vupen.com/english/advisories/2008/0384 - http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_12/include/li
n.com/english/advisories/2008/0384 - http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_12/include/libtorrent/bencode.hpp?view=log&pathrev=1968#rev1968 - http://secunia.com/advisories/28699 - http://www.securityfocus.com/bid/27597 - http://www.vupen.com/english/advisories/2008/0383
CVE ID: CVE-2008-0647 State: PUBLISHED Published: 2008-02-07T20:00:00 Last Updated: 2024-08-07T07:54:22.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 (aka Lianzong Game Platform) allow remote attackers to execute arbitrary code via long arguments to the (1) hgs_startGame and (2) hgs_startNotify methods, as exploited in the wild as of February 2008. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27626 - ht
nformation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27626 - http://www.vupen.com/english/advisories/2008/0427 - https://www.exploit-db.com/exploits/5153 - http://www.symantec.com/enterprise/security_response/weblog/2008/02/zeroday_exploit_for_lianzong_g.html - http://secunia.com/advisories/28809
CVE ID: CVE-2008-0648 State: PUBLISHED Published: 2008-02-07T20:00:00 Last Updated: 2024-08-07T07:54:23.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in OpenSiteAdmin 0.9.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) indexFooter.php; and (2) DatabaseManager.php, (3) FieldManager.php, (4) Filter.php, (5) Form.php, (6) FormManager.php, (7) LoginManager.php, and (8) Filters/SingleFilter.php in scripts/classes/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5068 - http://www.securityfocus.com/bid/27640
CVE ID: CVE-2008-0649 State: PUBLISHED Published: 2008-02-07T20:00:00 Last Updated: 2024-08-07T07:54:22.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.php in Astanda Directory Project (ADP) 1.2 and 1.3 allows remote attackers to execute arbitrary SQL commands via the link_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5071 - http://www.securityfocus.com/bid/27646
CVE ID: CVE-2008-0650 State: PUBLISHED Published: 2008-02-07T20:00:00Z Last Updated: 2024-09-17T01:21:24.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Simple OS CMS 0.1c beta allows remote attackers to execute arbitrary SQL commands via the username field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27589
CVE ID: CVE-2008-0651 State: PUBLISHED Published: 2008-02-07T20:00:00Z Last Updated: 2024-09-16T22:08:28.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Pedro Santana Codice CMS allows remote attackers to execute arbitrary SQL commands via the username field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27592
CVE ID: CVE-2008-0652 State: PUBLISHED Published: 2008-02-07T20:00:00 Last Updated: 2024-08-07T07:54:22.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27648 - https://www.exploit-db.com/exploits/5073
CVE ID: CVE-2008-0653 State: PUBLISHED Published: 2008-02-07T20:00:00 Last Updated: 2024-08-07T07:54:22.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Ynews (com_ynews) 1.0.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showYNews action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5072 - http://www.securityfocus.com/bid/27649
CVE ID: CVE-2008-0654 State: PUBLISHED Published: 2008-02-07T20:00:00 Last Updated: 2024-08-07T07:54:23.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Azucar CMS 1.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _VIEW (view) parameter to (1) index.php, (2) html/sitio/index.php, or (3) src/sistema/vistas/template/tpl_inicio.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487595/100/0/threaded - http://securityreason.com/securityalert/3622
CVE ID: CVE-2008-0655 State: PUBLISHED Published: 2008-02-07T20:00:00.000Z Last Updated: 2025-11-12T14:18:36.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html - http://securitytracker.com/id?1019346 - http://www.us-cert.gov/cas/techalerts/TA08-043A.html - http://www.adobe.com/support/security/bulletins/apsb08-13.html - http://www.vupen.com/english/advisories/2008/1966/references - http://secunia.com/
t/security/bulletins/apsb08-13.html - http://www.vupen.com/english/advisories/2008/1966/references - http://secunia.com/advisories/28851 - http://blogs.adobe.com/acroread/2008/02/adobe_reader_812_for_linux_and.html - http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1 - http://www.adobe.com/support/security/advisories/apsa08-01.html - http://secunia.com/advisories/28983 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10299 - http://security.gentoo.org/glsa/glsa-200803-01.xml - http://secunia.com/advisories/29065 - http://secunia.com/advisories/30840 - http://s
entoo.org/glsa/glsa-200803-01.xml - http://secunia.com/advisories/29065 - http://secunia.com/advisories/30840 - http://secunia.com/advisories/29205 - http://www.securityfocus.com/bid/27641 - http://www.vupen.com/english/advisories/2008/0425 - http://secunia.com/advisories/28802 - http://www.redhat.com/support/errata/RHSA-2008-0144.html
CVE ID: CVE-2008-0656 State: PUBLISHED Published: 2008-02-07T20:00:00 Last Updated: 2024-08-07T07:54:22.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_Documentum_dmclTrace_Arbitrary_file_overwrite.pdf - http://www.securitytracker.com/id?1019305 - http://secunia.com/advisories/28810 - http://www.vupen.com/english/advisories/2008/0439 - http://www.securityfocus.com/
http://secunia.com/advisories/28810 - http://www.vupen.com/english/advisories/2008/0439 - http://www.securityfocus.com/bid/27632 - http://securityreason.com/securityalert/3626 - http://www.securityfocus.com/archive/1/487603/100/0/threaded
CVE ID: CVE-2008-0657 State: PUBLISHED Published: 2008-02-07T20:00:00 Last Updated: 2024-08-07T07:54:23.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30676 - http://secunia.com/advisories
nalyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30676 - http://secunia.com/advisories/29841 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11505 - http://www.securityfocus.com/bid/27650 - http://secunia.com/advisories/29897 - http://secunia.com/advisories/29498 - http://dev2dev.bea.com/pub/advisory/277 - http://security.gentoo.org/glsa/glsa-200804-28.xml - http://secunia.com/advisories/29858 - http://www.vupen.com/english/advisories/2008/0429 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231261-1 - http://www.securitytracker.com/id?1019308 - http://lists.opensuse.org/opensuse-security-announce/2008-04/m
26-231261-1 - http://www.securitytracker.com/id?1019308 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html - http://www.vupen.com/english/advisories/2008/1252 - http://secunia.com/advisories/28795 - http://www.redhat.com/support/errata/RHSA-2008-0156.html - http://secunia.com/advisories/31497 - http://secunia.com/advisories/28888 - http://www.redhat.com/support/errata/RHSA-2008-0210.html - http://secunia.com/advisories/30780 - http://www.vupen.com/english/advisories/2008/1856/references - http://www.vmware.com/security/advisories/VMSA-2008-0010.html - http://secunia.com/advisories/29214 - http://www.redhat.com/support/errata/RHSA-2008-0123.html - http://www.gentoo.o
l - http://secunia.com/advisories/29214 - http://www.redhat.com/support/errata/RHSA-2008-0123.html - http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml - http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml
CVE ID: CVE-2008-0658 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T07:54:22.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:058 - http://secunia.com/advisories/29461 - http://www.openldap.org/devel/cvsweb
com/security/advisories?name=MDVSA-2008:058 - http://secunia.com/advisories/29461 - http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-bdb/modrdn.c.diff?r1=1.197&r2=1.198&f=h - http://secunia.com/advisories/29225 - http://wiki.rpath.com/Advisories:rPSA-2008-0059 - http://secunia.com/advisories/29682 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0059 - http://secunia.com/advisories/29256 - http://www.securityfocus.com/archive/1/488242/100/200/threaded - http://security.gentoo.org/glsa/glsa-200803-28.xml - http://secunia.com/advisories/29068 - http://www.ubuntu.com/usn/usn-584-1 - http://www.redhat.com/support/errata/RHSA-2008-0110.html - https://oval.cisecurity.org/repository/sea
om/usn/usn-584-1 - http://www.redhat.com/support/errata/RHSA-2008-0110.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9470 - http://secunia.com/advisories/28953 - http://secunia.com/advisories/28914 - http://www.debian.org/security/2008/dsa-1541 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40479 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5358 - http://www.vupen.com/english/advisories/2009/3184 - http://secunia.com/advisories/28926 - http://www.securityfocus.com/bid/27778 - http://www.vupen.com/english/advisories/2008/0536/references - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://secu
advisories/2008/0536/references - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://secunia.com/advisories/29957 - http://support.apple.com/kb/HT3937 - http://www.securitytracker.com/id?1019481
CVE ID: CVE-2008-0659 State: PUBLISHED Published: 2008-02-08T01:00:00 Last Updated: 2024-08-07T07:54:22.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28733 - http://blogs.aurigma.com/post/2008/01/Another-security-problem---oh%2c-not-again.aspx - http://secunia.com/advisories/28715 - http://www.securityfocus.com/bid/27533 - http://seclists.org/fulld
ot-again.aspx - http://secunia.com/advisories/28715 - http://www.securityfocus.com/bid/27533 - http://seclists.org/fulldisclosure/2008/Jan/0593.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/40118 - http://www.vupen.com/english/advisories/2008/0345/references - http://www.vupen.com/english/advisories/2008/0344/references - http://www.kb.cert.org/vuls/id/776931 - https://www.exploit-db.com/exploits/5025 - http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483
CVE ID: CVE-2008-0660 State: PUBLISHED Published: 2008-02-08T01:00:00 Last Updated: 2024-08-07T07:54:22.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2008/Feb/0023.html - http://www.vupen.com/english/advisories/2008/0394/references - http://www.securityfocus.com/bid/
re/2008/Feb/0023.html - http://www.vupen.com/english/advisories/2008/0394/references - http://www.securityfocus.com/bid/27576 - http://secunia.com/advisories/28707 - http://www.vupen.com/english/advisories/2008/0391/references - http://secunia.com/advisories/28713 - https://www.exploit-db.com/exploits/5049 - http://www.securityfocus.com/bid/27577 - http://www.securitytracker.com/id?1019297 - http://www.kb.cert.org/vuls/id/776931 - http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483
CVE ID: CVE-2008-0661 State: PUBLISHED Published: 2008-02-08T01:00:00 Last Updated: 2024-08-07T07:54:22.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dBpowerAMP Audio Player Release 2 allows remote attackers to execute arbitrary code via a .M3U file with a long URI. NOTE: this might be the same issue as CVE-2004-1569. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5067 - https://www.exploit-db.com/exploits/5069 - http://www.securityfocus.com/bid/27639 - http://www.securityfocus.com/archive/1/487605/100/0/threaded - http://securityreason.com/securityalert/3623 - http://www.securityfocus.com/bid/27635
CVE ID: CVE-2008-0662 State: PUBLISHED Published: 2008-02-08T01:00:00 Last Updated: 2024-08-07T07:54:22.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3627 - http://www.securityfocus.com/bid/27675 - https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.ps
://www.securityfocus.com/bid/27675 - https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml - http://secunia.com/advisories/28820 - http://www.securityfocus.com/archive/1/487735/100/0/threaded - http://www.vupen.com/english/advisories/2008/0475 - http://www.securitytracker.com/id?1019317 - http://digihax.com/
CVE ID: CVE-2008-0663 State: PUBLISHED Published: 2008-02-08T01:00:00 Last Updated: 2024-08-07T07:54:22.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell Challenge Response Client (LCM) 2.7.5 and earlier, as used with Novell Client for Windows 4.91 SP4, allows users with physical access to a locked system to obtain contents of the clipboard by pasting the contents into the Challenge Question field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28792 - http://www.vupen.com/english/advisories/2008/0423/references - https://secure-support.novell.com/KanisaPlatform/Publishing/686/3726376_f.SAL_Public.html - http://www.security
rences - https://secure-support.novell.com/KanisaPlatform/Publishing/686/3726376_f.SAL_Public.html - http://www.securitytracker.com/id?1019304 - http://www.securityfocus.com/bid/27631
CVE ID: CVE-2008-0664 State: PUBLISHED Published: 2008-02-08T01:00:00 Last Updated: 2024-08-07T07:54:23.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019316 - http://wordpress.org/development/2008/02/wordpress-233/ - http://secunia.com/advisories/28823 - http://secunia.com/advisories/28920 - http://www.vupen.com/english/advisories/2008/0448 - https://www.redhat.com/archives/fedora-package-announce/2008-
8920 - http://www.vupen.com/english/advisories/2008/0448 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00416.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00349.html - https://bugzilla.redhat.com/show_bug.cgi?id=431547 - http://secunia.com/advisories/30960 - http://www.debian.org/security/2008/dsa-1601 - http://www.village-idiot.org/archives/2008/02/02/wordpress-232-exploit-confirmed/ - http://www.securityfocus.com/bid/27669
CVE ID: CVE-2008-0665 State: PUBLISHED Published: 2008-02-11T20:00:00 Last Updated: 2024-08-07T07:54:22.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27685 - http://secunia.com/advisories/29353 - http://www.debian.org/security/2008/dsa-1492 - http://secunia.com/advisories/28829 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463907 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:076 - http://secu
ian.org/cgi-bin/bugreport.cgi?bug=463907 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:076 - http://secunia.com/advisories/28856 - http://security.gentoo.org/glsa/glsa-200803-23.xml