Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/exchange.xforce.ibmcloud.com/vulnerabilities/46628 - http://www.securityfocus.com/bid/32305 - http://labs.portcullis.co.uk/application/ldapuserenum/ - http://www.portcullis-security.com/294.php
CVE ID: CVE-2008-5113 State: PUBLISHED Published: 2008-11-17T23:00:00 Last Updated: 2024-08-07T10:40:17.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress 2.6.3 relies on the REQUEST superglobal array in certain dangerous situations, which makes it easier for remote attackers to conduct delayed and persistent cross-site request forgery (CSRF) attacks via crafted cookies, as demonstrated by attacks that (1) delete user accounts or (2) cause a denial of service (loss of application access). NOTE: this issue relies on the presence of an independent vulnerability that allows cookie injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.debia
rability that allows cookie injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1871 - http://bugs.debian.org/504771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46698 - http://openwall.com/lists/oss-security/2008/11/14/1
CVE ID: CVE-2008-5114 State: PUBLISHED Published: 2008-11-18T00:00:00 Last Updated: 2024-08-07T10:40:17.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 - http://secunia.com/advisories/32606 - http://www.securityfocus.com/bid/32262 - http://www.vupen.com/english/advisories/2008/3128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46552
/32262 - http://www.vupen.com/english/advisories/2008/3128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46552 - http://osvdb.org/49765 - http://www.securitytracker.com/id?1021170
CVE ID: CVE-2008-5115 State: PUBLISHED Published: 2008-11-18T00:00:00 Last Updated: 2024-08-07T10:40:17.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 - http://secunia.com/advisories/32606 - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr07-11 - http://www.securityfocus.com/b
isories/32606 - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr07-11 - http://www.securityfocus.com/bid/32262 - http://www.vupen.com/english/advisories/2008/3128 - http://osvdb.org/49766 - http://www.securityfocus.com/archive/1/498479/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46553 - http://www.securitytracker.com/id?1021170
CVE ID: CVE-2008-5116 State: PUBLISHED Published: 2008-11-18T00:00:00 Last Updated: 2024-08-07T10:40:17.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences in the ext parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 - http://secunia.com/advisories/32606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46554 - http://www.securityfocus.
://secunia.com/advisories/32606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46554 - http://www.securityfocus.com/archive/1/498487/100/0/threaded - http://www.procheckup.com/Vulnerability_PR08-09.php - http://www.securityfocus.com/bid/32262 - http://www.vupen.com/english/advisories/2008/3128 - http://www.securitytracker.com/id?1021170 - http://osvdb.org/49767
CVE ID: CVE-2008-5117 State: PUBLISHED Published: 2008-11-18T00:00:00 Last Updated: 2024-08-07T10:40:17.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 - http://secunia.com/advisories/32606 - http://www.securityfocus.com/bid/32262 - http://osvdb.org/49768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46556 - http://www.vupen.
.com/bid/32262 - http://osvdb.org/49768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46556 - http://www.vupen.com/english/advisories/2008/3128 - http://www.securitytracker.com/id?1021170
CVE ID: CVE-2008-5118 State: PUBLISHED Published: 2008-11-18T00:00:00 Last Updated: 2024-08-07T10:40:17.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "frame injection." Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1 - http://secunia.com/advisories/32606 - http://www.securityfocus.com/bid/32262 - http://www.vupen.com/english/advisories/2008/3128 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
.com/bid/32262 - http://www.vupen.com/english/advisories/2008/3128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46555 - http://osvdb.org/49769 - http://www.securitytracker.com/id?1021170
CVE ID: CVE-2008-5119 State: PUBLISHED Published: 2008-11-18T00:00:00 Last Updated: 2024-08-07T10:40:17.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Scripts4Profit DXShopCart 4.30mc allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2008-08/0414.html - http://www.securityfocus.com/bid/30790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44587
CVE ID: CVE-2008-5120 State: PUBLISHED Published: 2008-11-18T00:00:00 Last Updated: 2024-08-07T10:40:17.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495207/100/0/threaded - http://securityreason.com/securityalert/4602 - http://www.securityfocus.com/bid/30589
CVE ID: CVE-2008-5121 State: PUBLISHED Published: 2008-11-18T00:00:00 Last Updated: 2024-08-07T10:40:17.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNE_IOCTL DeviceIoControl request to the \\.\DNE device interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/858993 - http://www.vupen.com/english/advisories/2008/1867 - https://www.exploit-db.com/exploits/5837 - http://www.
s/id/858993 - http://www.vupen.com/english/advisories/2008/1867 - https://www.exploit-db.com/exploits/5837 - http://www.vupen.com/english/advisories/2008/1868 - http://www.digit-labs.org/files/exploits/dne2000-call.c - http://secunia.com/advisories/30728 - http://support.citrix.com/article/CTX117751 - http://www.securityfocus.com/bid/29772 - http://securityreason.com/securityalert/4600 - http://www.vupen.com/english/advisories/2008/1865 - http://secunia.com/advisories/30753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43153 - http://www.vupen.com/english/advisories/2008/1866 - http://secunia.com/advisories/30744 - http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?me
s/2008/1866 - http://secunia.com/advisories/30744 - http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsm25860 - http://secunia.com/advisories/30747
CVE ID: CVE-2008-5122 State: PUBLISHED Published: 2008-11-18T00:00:00 Last Updated: 2024-08-07T10:40:17.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in WorkArea/ContentRatingGraph.aspx in Ektron CMS400.NET 7.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the res parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43268 - http://www.digitrustgroup.com/advisories/web-application-security-ektron.html - http://secunia.com/advisories/30824 - http://www.securityfocus.com/bid/29857
CVE ID: CVE-2008-5123 State: PUBLISHED Published: 2008-11-18T00:00:00 Last Updated: 2024-08-07T10:40:17.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in CCleague Pro 1.2 allows remote attackers to execute arbitrary SQL commands via the u parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29876 - https://www.exploit-db.com/exploits/5888 - http://securityreason.com/securityalert/4604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43280 - http://secunia.com/advisories/30796
CVE ID: CVE-2008-5124 State: PUBLISHED Published: 2008-11-18T00:00:00 Last Updated: 2024-08-07T10:40:17.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: JSCAPE Secure FTP Applet 4.8.0 and earlier does not ask the user to verify a new or mismatched SSH host key, which makes it easier for remote attackers to perform man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493569/100/0/threaded - http://secunia.com/advisories/30822 - http://www.securityfocus.com/bid/29882 - http://www.vupen.com/english/advisories/2008/1919/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43300 - http://www.
n.com/english/advisories/2008/1919/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43300 - http://www.securitytracker.com/id?1020346 - http://www.jscape.com/sftpapplet/docs/HTML/index.html?introhistory.html - http://www.securityfocus.com/archive/1/493652/100/0/threaded - http://securityreason.com/securityalert/4606
CVE ID: CVE-2008-5125 State: PUBLISHED Published: 2008-11-18T00:00:00 Last Updated: 2024-08-07T10:40:17.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in CCleague Pro 1.2 allows remote attackers to bypass authentication by setting the type cookie value to admin. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43281 - https://www.exploit-db.com/exploits/5888 - http://securityreason.com/securityalert/4604 - http://secunia.com/advisories/30796
CVE ID: CVE-2008-5126 State: PUBLISHED Published: 2008-11-18T02:00:00 Last Updated: 2024-08-07T10:40:17.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web script or HTML via the search_query parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46621 - http://secunia.com/advisories/32757 - http://www.securityfocus.com/bid/32321 - http://packetstorm.linuxsecurity.com/0811-exploits/boutikone-xss.txt
CVE ID: CVE-2008-5127 State: PUBLISHED Published: 2008-11-18T11:00:00 Last Updated: 2024-08-07T10:40:17.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ocean12 Contact Manager Pro 1.02 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12con.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46133 - https://www.exploit-db.com/exploits/7244 - http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt
CVE ID: CVE-2008-5128 State: PUBLISHED Published: 2008-11-18T11:00:00 Last Updated: 2024-08-07T10:40:17.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ocean12 Membership Manager Pro stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12member.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46133 - http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/46693
CVE ID: CVE-2008-5129 State: PUBLISHED Published: 2008-11-18T11:00:00 Last Updated: 2024-08-07T10:40:17.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ocean12 Poll Manager Pro 1.00 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12poll.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46133 - http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/46692
CVE ID: CVE-2008-5130 State: PUBLISHED Published: 2008-11-18T11:00:00 Last Updated: 2024-08-07T10:40:17.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ocean12 Calendar Manager Gold 2.04 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12cal.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46133 - http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/46694
CVE ID: CVE-2008-5131 State: PUBLISHED Published: 2008-11-18T11:00:00 Last Updated: 2024-08-07T10:40:17.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute arbitrary SQL commands via (1) the aid parameter to article_details.php, and the (2) username and (3) password to the admin panel (admin/index.php). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46397 - http://www.securityfocus.com/bid/32144 - http://secunia.com/advisories/32595 - https://www.exploit-db.com/exploits/7014 - http://security
tyfocus.com/bid/32144 - http://secunia.com/advisories/32595 - https://www.exploit-db.com/exploits/7014 - http://securityreason.com/securityalert/4607
CVE ID: CVE-2008-5132 State: PUBLISHED Published: 2008-11-18T11:00:00 Last Updated: 2024-08-07T10:40:17.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7114 - http://osvdb.org/49903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46610 - http://www.securityfocus.com/bid/32294 - http://secunia.com/advisories/32632 - http://www.memht.com/news_118_Small-fix-4-0-1.html - http://securityreason.com/securit
://secunia.com/advisories/32632 - http://www.memht.com/news_118_Small-fix-4-0-1.html - http://securityreason.com/securityalert/4608
CVE ID: CVE-2008-5133 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended CVE-2008-1447 protection mechanism and spoof the responses to DNS queries sent by named. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32625 - http://www.vupen.com/english/advisories/2008/3129
rogram Container: References: - http://secunia.com/advisories/32625 - http://www.vupen.com/english/advisories/2008/3129 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46721 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-245206-1
CVE ID: CVE-2008-5134 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the lbs_process_bss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in the Linux kernel before 2.6.27.5 allows remote attackers to have an unknown impact via an "invalid beacon/probe response." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32484 - http://secunia.com/advisories/32998 - http://secunia.com/advisories/33706 - http://secunia.com/advisories/33641 - http://www.redhat.com/support/errata/RHSA-2009-0053.html - http://git.ke
s/33706 - http://secunia.com/advisories/33641 - http://www.redhat.com/support/errata/RHSA-2009-0053.html - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=48735d8d8bd701b1e0cd3d49c21e5e385ddcb077 - https://usn.ubuntu.com/714-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=470761 - http://article.gmane.org/gmane.linux.kernel.wireless.general/23049 - http://openwall.com/lists/oss-security/2008/11/11/2 - http://secunia.com/advisories/33854 - http://www.debian.org/security/2008/dsa-1681 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html
CVE ID: CVE-2008-5135 State: PUBLISHED Published: 2008-11-18T15:00:00Z Last Updated: 2024-09-16T16:33:33.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/mounted-map or (2) /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-root users. Additional Analyst Notes: - CVE Program Container: References: - http://lists.debian.org/debian-devel/2008/08/msg00296.html - http://lists.debian.org/debian-devel/2008/08/msg00285.html
CVE ID: CVE-2008-5136 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: tkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/tkusr.pgm temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32406 - http://lists.debian.org/debian-devel/2008/08/msg00285.html
CVE ID: CVE-2008-5137 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: tkman in tkman 2.2 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/tkman##### or (2) /tmp/ll temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32407 - http://lists.debian.org/debian-devel/2008/08/msg00285.html
CVE ID: CVE-2008-5138 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd.##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32780 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46724 - http://lists.debian.org/debian-devel/2008/08/msg00285.html
CVE ID: CVE-2008-5139 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: updatejail in jailer 0.4 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/#####.updatejail temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1674 - http://www.securityfocus.com/bid/32413 - http://secunia.com/advisories/32959 - http://lists.debian.org/debian-devel/2008/08/msg00285.html - http://secunia.com/advisories/32943
CVE ID: CVE-2008-5140 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/opr.ini.##### or (2) /tmp/lpt*.zip temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353#44 - http://secunia.com/advisories/33117 - http://secunia.com/advisories/32730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46725 - http://lists.debian.org/debian-devel/2008/08/msg00285.h
0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46725 - http://lists.debian.org/debian-devel/2008/08/msg00285.html - http://www.mailscanner.info/ChangeLog - http://www.securityfocus.com/bid/32376
CVE ID: CVE-2008-5141 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar.##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1676 - http://www.securityfocus.com/bid/32386 - http://secunia.com/advisories/32891 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46717 - http://secunia.com/advisories/32961 - http://lists.debian.org/debian-dev
nge.xforce.ibmcloud.com/vulnerabilities/46717 - http://secunia.com/advisories/32961 - http://lists.debian.org/debian-devel/2008/08/msg00285.html
CVE ID: CVE-2008-5142 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pr.##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32381 - http://lists.debian.org/debian-devel/2008/08/msg00285.html
CVE ID: CVE-2008-5143 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/*.debug or (2) /tmp/*.env temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32415 - http://lists.debian.org/debian-devel/2008/08/msg00285.html