Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1265 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linksys WRT54G router allows remote attackers to cause a denial of service (device restart) via a long username and password to the FTP interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41127
CVE ID: CVE-2008-1266 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact via (1) a long username or (2) an HTTP header with a large name and an empty value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://www.securityfocus.com/bid/28439 - http://secunia.com/advisories/29
tizen.org/projects/router-hacking-challenge/ - http://www.securityfocus.com/bid/28439 - http://secunia.com/advisories/29366 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41125
CVE ID: CVE-2008-1267 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Siemens SpeedStream 6520 router allows remote attackers to cause a denial of service (web interface crash) via an HTTP request to basehelp_English.htm with a large integer in the Content-Length field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41123 - http://secunia.com/advisories/29325 - http://www.securityfocus.com/bid/2849
.xforce.ibmcloud.com/vulnerabilities/41123 - http://secunia.com/advisories/29325 - http://www.securityfocus.com/bid/28490
CVE ID: CVE-2008-1268 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an FTP session by sending an arbitrary username and password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://swbae.egloos.com/1701135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41119
CVE ID: CVE-2008-1269 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: cp06_wifi_m_nocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://vx.netlux.org/wargamevx/alice_gate2_pluswifi_PoC.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/41110
CVE ID: CVE-2008-1270 State: PUBLISHED Published: 2008-03-10T21:00:00 Last Updated: 2024-08-07T08:17:34.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the ~nobody directory. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-2344 - http://secunia.com/advisories/29622 - http://secunia.com/advisories/29318 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html - http://security.gentoo.org/glsa/glsa-200804-08.xml - http://
suse.org/opensuse-security-announce/2008-04/msg00005.html - http://security.gentoo.org/glsa/glsa-200804-08.xml - http://www.debian.org/security/2008/dsa-1521 - http://www.lighttpd.net/security/lighttpd_sa_2008_03.txt - http://www.securityfocus.com/archive/1/489465/100/0/threaded - http://secunia.com/advisories/29636 - http://www.vupen.com/english/advisories/2008/0885/references - http://www.securityfocus.com/bid/28226 - http://trac.lighttpd.net/trac/ticket/1587 - http://secunia.com/advisories/29403 - http://www.lighttpd.net/2008/3/10/1-4-19-made-in-germany - https://bugs.gentoo.org/show_bug.cgi?id=212930 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0106 - https://exchange.xforce.ibmclou
ntoo.org/show_bug.cgi?id=212930 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41173
CVE ID: CVE-2008-1271 State: REJECTED Published: 2008-03-10T21:00:00Z Last Updated: 2024-09-16T22:35:05.157Z Description: No description available.
CVE ID: CVE-2008-1272 State: PUBLISHED Published: 2008-03-10T23:00:00 Last Updated: 2024-08-07T08:17:34.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showad.php and the (2) ad parameter to pfriendly.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28159 - https://www.exploit-db.com/exploits/5223 - http://secunia.com/advisories/29297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41066
CVE ID: CVE-2008-1273 State: PUBLISHED Published: 2008-03-10T23:00:00 Last Updated: 2024-08-07T08:17:34.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) popup.php, (2) test/dir2.php, (3) admin/upload.php, and (4) dirxml.php in upload/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41169 - http://www.securityfocus.com/bid/28138 - http://
erences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41169 - http://www.securityfocus.com/bid/28138 - http://downloads.securityfocus.com/vulnerabilities/exploits/28138.html
CVE ID: CVE-2008-1274 State: PUBLISHED Published: 2008-03-10T23:00:00 Last Updated: 2024-08-07T08:17:34.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0805/references - http://www.securityfocus.com/bid/28180 - http://www-1.ibm.com/support/search.wss?rs=0&q=IZ17177&apar=only - https://exchange.xforce.ibmcloud.com/vulnerabilities/41067 - http://www.securitytracker.com/id?1019572 - https://oval.cisecurity.org/repository/s
bmcloud.com/vulnerabilities/41067 - http://www.securitytracker.com/id?1019572 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5169 - http://secunia.com/advisories/29301
CVE ID: CVE-2008-1275 State: PUBLISHED Published: 2008-03-10T23:00:00 Last Updated: 2024-08-07T08:17:34.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service (crash) via crafted (1) EXPN or (2) VRFY commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41083 - http://www.securityfocus.com/bid/28154 - http://www.mailenable.com/hotfix/ - http://www.vu
d.com/vulnerabilities/41083 - http://www.securityfocus.com/bid/28154 - http://www.mailenable.com/hotfix/ - http://www.vupen.com/english/advisories/2008/0800/references - http://secunia.com/advisories/29300
CVE ID: CVE-2008-1276 State: PUBLISHED Published: 2008-03-10T23:00:00 Last Updated: 2024-08-07T08:17:33.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29277 - http://aluigi.altervista.org/adv/maildisable-adv.txt - https://www.exploit-db.com/exploits/5249 - http://www.vupen.com/english/advisories/2008/0799/ref
v/maildisable-adv.txt - https://www.exploit-db.com/exploits/5249 - http://www.vupen.com/english/advisories/2008/0799/references - http://securityreason.com/securityalert/3724 - http://www.securityfocus.com/archive/1/489270/100/0/threaded - http://www.securitytracker.com/id?1019565 - http://www.securityfocus.com/bid/28145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41058
CVE ID: CVE-2008-1277 State: PUBLISHED Published: 2008-03-10T23:00:00 Last Updated: 2024-08-07T08:17:34.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without required arguments, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29277 - http://aluigi.altervista.org/adv/maildisable-adv.txt - http://www.vupen.com/english/advisories/2008/0799/references - http://securityreason.com/security
/maildisable-adv.txt - http://www.vupen.com/english/advisories/2008/0799/references - http://securityreason.com/securityalert/3724 - http://www.securityfocus.com/archive/1/489270/100/0/threaded - http://www.securitytracker.com/id?1019565 - http://www.securityfocus.com/bid/28145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41059
CVE ID: CVE-2008-1278 State: PUBLISHED Published: 2008-03-10T23:00:00 Last Updated: 2024-08-07T08:17:34.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attackers to cause a denial of service (crash) via an invalid Accept-Charset header, which triggers a NULL pointer dereference. NOTE: the service is automatically restarted. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29296 - http://www.securityfocus.com/archive/1/489354/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41077 - http://www.vupen
ocus.com/archive/1/489354/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41077 - http://www.vupen.com/english/advisories/2008/0816/references - http://aluigi.altervista.org/adv/remotelynowhere-adv.txt - http://www.securityfocus.com/bid/28175
CVE ID: CVE-2008-1279 State: PUBLISHED Published: 2008-03-10T23:00:00 Last Updated: 2024-08-07T08:17:33.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a packet with an invalid length field, which causes an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29306 - http://www.vupen.com/english/advisories/2008/0813/references - http://www.securityfocus.com/archive/1/489353/100/0/threaded - http://aluig
om/english/advisories/2008/0813/references - http://www.securityfocus.com/archive/1/489353/100/0/threaded - http://aluigi.altervista.org/adv/acrogroup-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/41071 - http://www.securityfocus.com/bid/28169
CVE ID: CVE-2008-1280 State: PUBLISHED Published: 2008-03-10T23:00:00 Last Updated: 2024-08-07T08:17:34.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41070 - http://www.vupen.com/english/advisories/2008/0812/references - http://aluigi.
force.ibmcloud.com/vulnerabilities/41070 - http://www.vupen.com/english/advisories/2008/0812/references - http://aluigi.altervista.org/adv/acroagent-adv.txt - http://www.securityfocus.com/bid/28169 - http://www.securityfocus.com/archive/1/489362/100/0/threaded
CVE ID: CVE-2008-1281 State: PUBLISHED Published: 2008-03-10T23:00:00 Last Updated: 2024-08-07T08:17:34.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in TFTPsrvs.exe 2.5.3.1 and earlier, as used in Argon Technology Client Management Services (CMS) 1.31 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41076 - http://www.vupen.com/english/advisories/2008/0815/references - http://www.securityfocus.com/bid/28160 - http://www.securityfocus.com/archive/1/489363/100/0/thread
08/0815/references - http://www.securityfocus.com/bid/28160 - http://www.securityfocus.com/archive/1/489363/100/0/threaded - http://aluigi.altervista.org/adv/argonauti-adv.txt - https://www.exploit-db.com/exploits/5230 - http://secunia.com/advisories/29302
CVE ID: CVE-2008-1282 State: PUBLISHED Published: 2008-03-10T23:00:00 Last Updated: 2024-08-07T08:17:34.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the BFup ActiveX control (BFup.dll) in B21Soft BFup before 1.0.802.29 allows remote attackers to execute arbitrary code via a long FilePath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28131 - http://jvn.jp/jp/JVN%2310606373/index.html - http://www.vupen.com/english/advisories/2008/0797/references - http://secunia.com/advisories/29260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41050 - http://www.hi-ho.ne.jp/babaq/bfupinfo.html
CVE ID: CVE-2008-1283 State: PUBLISHED Published: 2008-03-11T00:00:00 Last Updated: 2024-08-07T08:17:34.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41089 - http://www.securityfocus.com/bid/28148 - http://www.securityfocus.com/archive/1/489282/100/0/threaded - http://securityreason.com/securityalert/3725
CVE ID: CVE-2008-1284 State: PUBLISHED Published: 2008-03-11T00:00:00 Last Updated: 2024-08-07T08:17:34.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via ".." sequences and a null byte in the theme name. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3726 - http://secunia.com/advisories/29286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41054 - http://lists.horde.org/archives/annou
om/advisories/29286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41054 - http://lists.horde.org/archives/announce/2008/000383.html - http://lists.horde.org/archives/announce/2008/000384.html - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00301.html - http://www.securityfocus.com/archive/1/489239/100/0/threaded - http://security.gentoo.org/glsa/glsa-200805-01.xml - http://www.debian.org/security/2008/dsa-1519 - http://secunia.com/advisories/30047 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00253.html - http://secunia.com/advisories/29374 - http://www.securityfocus.com/archive/1/489289/100/0/threaded - http://lists.horde.org/archiv
unia.com/advisories/29374 - http://www.securityfocus.com/archive/1/489289/100/0/threaded - http://lists.horde.org/archives/announce/2008/000382.html - http://www.vupen.com/english/advisories/2008/0822/references - http://www.securityfocus.com/bid/28153 - http://secunia.com/advisories/29400
CVE ID: CVE-2008-1285 State: PUBLISHED Published: 2008-03-11T17:00:00 Last Updated: 2024-08-07T08:17:33.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2008-0828.html - http://rhn.redhat.com/errata/RHSA-2008-0826.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-233561-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41081 - https://jira.jboss.org/jira/browse/JBPAPP-682 - https://bugzil
ps://exchange.xforce.ibmcloud.com/vulnerabilities/41081 - https://jira.jboss.org/jira/browse/JBPAPP-682 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=437082 - http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp03/html-single/readme/index.html - http://www.vupen.com/english/advisories/2008/0808/references - http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp01/html-single/readme/ - http://www.securityfocus.com/bid/28192 - http://rhn.redhat.com/errata/RHSA-2008-0827.html - http://secunia.com/advisories/29327 - http://rhn.redhat.com/errata/RHSA-2008-0825.html - http://www.securitytracker.com/id?1020628
CVE ID: CVE-2008-1286 State: PUBLISHED Published: 2008-03-11T17:00:00 Last Updated: 2024-08-07T08:17:34.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended access restrictions and determine the existence of files or directories via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41069 - http://www.securitytracker.com/id?1019574 - http://www.securityfocus.com/bid/28155 - http://secunia.com/advisories/29290 - http://www.vupen.com/english/advisories/2008/0806/references - http://sun
/28155 - http://secunia.com/advisories/29290 - http://www.vupen.com/english/advisories/2008/0806/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231526-1
CVE ID: CVE-2008-1287 State: PUBLISHED Published: 2008-03-11T17:00:00 Last Updated: 2024-08-07T08:17:33.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41042 - http://secunia.com/advisories/29280 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK55561 - http://www.securityfocus.com/bid/28132 - http://www.vupen.com/english/advisor
.com/support/docview.wss?uid=swg1PK55561 - http://www.securityfocus.com/bid/28132 - http://www.vupen.com/english/advisories/2008/0804/references
CVE ID: CVE-2008-1288 State: PUBLISHED Published: 2008-03-11T17:00:00 Last Updated: 2024-08-07T08:17:33.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28133 - http://www.securitytracker.com/id?1019567 - http://secunia.com/advisories/29280 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41043 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK55753 - http://www.vupen.com/english/advisories/2008/0804/references
CVE ID: CVE-2008-1289 State: PUBLISHED Published: 2008-03-24T17:00:00 Last Updated: 2024-08-07T08:17:34.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote attackers to (1) write a zero to an arbitrary memory location via a large RTP payload number, related to the ast_rtp_unset_m_type function in main/rtp.c; or (2) write certain integers to an arbitrary memory location via a large number of R
set_m_type function in main/rtp.c; or (2) write certain integers to an arbitrary memory location via a large number of RTP payloads, related to the process_sdp function in channels/chan_sip.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28308 - http://securityreason.com/securityalert/3763 - http://labs.musecurity.com/advisories/MU-200803-01.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/41305 - http://securitytracker.com/id?1019628 - http://secunia.com/advisories/29426 - http://www.asterisk.org/node/48466 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00438.html - http://www.securityfocus.com/archive/1
ttps://www.redhat.com/archives/fedora-package-announce/2008-March/msg00438.html - http://www.securityfocus.com/archive/1/489817/100/0/threaded - http://www.vupen.com/english/advisories/2008/0928 - http://downloads.digium.com/pub/security/AST-2008-002.html - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00514.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41302 - http://secunia.com/advisories/29470
CVE ID: CVE-2008-1290 State: PUBLISHED Published: 2008-03-24T17:00:00 Last Updated: 2024-08-07T08:17:33.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: ViewVC before 1.0.5 includes "all-forbidden" files within search results that list CVS or Subversion (SVN) commits, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200803-29.xml - http://secunia.com/advisories/29460 - http://secunia.com/advisories/29176 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380 - http://www.vupen.com/english/advisories/2008/0734/references - http://www.securityfocus.com/bid/28055
t.cgi?bug=471380 - http://www.vupen.com/english/advisories/2008/0734/references - http://www.securityfocus.com/bid/28055 - http://bugs.gentoo.org/show_bug.cgi?id=212288 - http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD