Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0359 State: PUBLISHED Published: 2008-01-18T21:00:00 Last Updated: 2024-08-07T07:39:34.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin.php or (2) index.php in photo/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39710 - http://www.securityfocus.com/bid/27317 - https://www.exploit-db.com/exploits/4919 - http://blogcms.com/wiki/changelog - http://secunia.com/advisories/28523 - http://marc.info/?l=bugtraq&m=120049816924383&w=2
CVE ID: CVE-2008-0360 State: PUBLISHED Published: 2008-01-18T21:00:00 Last Updated: 2024-08-07T07:39:35.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via (1) the blogid parameter to index.php, (2) the user parameter to action.php, or (3) the field parameter to admin/plugins/table/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27317 - https://www.exploit-db.com/exploits/4919 - http://blogcms.com/wiki/changelog - http://secunia.com/advisories/28523 - http://marc.info/?l=bugtraq&m=120049816924383&w=2
CVE ID: CVE-2008-0361 State: PUBLISHED Published: 2008-01-18T21:00:00 Last Updated: 2024-08-07T07:39:35.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in agregar_info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tabla parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3552 - https://www.exploit-db.com/exploits/4926 - http://www.securityfocus.com/archive/1/486444/100/0/threaded - http://www.securityfocus.com/bid/27324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39732 - http://secunia.co
http://www.securityfocus.com/bid/27324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39732 - http://secunia.com/advisories/28520
CVE ID: CVE-2008-0362 State: PUBLISHED Published: 2008-01-18T21:00:00 Last Updated: 2024-08-07T07:39:34.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the album parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27335 - http://securityreason.com/securityalert/3553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39747 - http://www.securityfocus.com/archive/1/486492/100/0/threaded - http://secunia.com/advisories/28560
CVE ID: CVE-2008-0363 State: PUBLISHED Published: 2008-01-18T21:00:00 Last Updated: 2024-08-07T07:39:35.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to postcomment.php and the (2) album parameter to gallery.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27335 - http://securityreason.com/securityalert/3553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39746 - http://www.securityfocus.com/archive/1/486492/100/0/threaded - http://secunia.com/advisories/28560
CVE ID: CVE-2008-0364 State: PUBLISHED Published: 2008-01-18T22:00:00 Last Updated: 2024-08-07T07:39:34.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier, and 1.8-alpha-7834 and earlier in the 1.8.x series; on Windows allows remote attackers to cause a denial of service (application crash) via a long Unicode string representing a client version identifier. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27321 - http://aluigi.org/poc/ruttorrent.zip - http://secunia.com/advisories/28537 - http://secunia.com/advisories/28533 - http://www.securityf
rg/poc/ruttorrent.zip - http://secunia.com/advisories/28537 - http://secunia.com/advisories/28533 - http://www.securityfocus.com/archive/1/486426/100/0/threaded - http://forum.utorrent.com/viewtopic.php?id=29330 - http://securityreason.com/securityalert/3554 - http://aluigi.altervista.org/adv/ruttorrent-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/39720 - http://download.utorrent.com/1.7.6/utorrent-1.7.6.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/39719
CVE ID: CVE-2008-0365 State: PUBLISHED Published: 2008-01-18T22:00:00 Last Updated: 2024-08-07T07:39:35.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in CORE FORCE before 0.95.172 allow local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments to (1) IOCTL functions in the Firewall module or (2) SSDT hook handler functions in the Registry module. Additional Analyst Notes: - CVE Program Container: References: - http://force.coresecurity.com/index.php?module=articles&func=display&aid=32 - http://www.securityfocus.com/bid/27341 - https://exchange.xforce.ibmcloud.com/vulnerab
le=articles&func=display&aid=32 - http://www.securityfocus.com/bid/27341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39758 - http://www.securityfocus.com/archive/1/486513/100/0/threaded - http://www.vupen.com/english/advisories/2008/0242 - http://www.coresecurity.com/?action=item&id=2025 - http://securityreason.com/securityalert/3555 - http://www.securitytracker.com/id?1019245
CVE ID: CVE-2008-0366 State: PUBLISHED Published: 2008-01-18T22:00:00 Last Updated: 2024-08-07T07:39:35.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: CORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, which allows local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments. Additional Analyst Notes: - CVE Program Container: References: - http://force.coresecurity.com/index.php?module=articles&func=display&aid=32 - http://www.securityfocus.com/bid/27341 - http://www.securityfocus.com/archive/1/486513/100/0/threaded - http://www.vupen
http://www.securityfocus.com/bid/27341 - http://www.securityfocus.com/archive/1/486513/100/0/threaded - http://www.vupen.com/english/advisories/2008/0242 - http://www.coresecurity.com/?action=item&id=2025 - http://securityreason.com/securityalert/3555 - http://www.securitytracker.com/id?1019245
CVE ID: CVE-2008-0367 State: PUBLISHED Published: 2008-01-18T23:00:00 Last Updated: 2024-08-07T07:39:35.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authentication after the Realm text, which might make it easier for remote HTTP servers to conduct phishing and spoofing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mozilla.com/security/2008/01/04/basicauth-dialog-realm-value-spoofing/ - https://bugzilla.mozilla.org/show_bug.cgi?id=244273 - http://aviv.raffon.net/2008/01/05/FirefoxDialogSpoofing
poofing/ - https://bugzilla.mozilla.org/show_bug.cgi?id=244273 - http://aviv.raffon.net/2008/01/05/FirefoxDialogSpoofingFAQ.aspx - http://www.securityfocus.com/archive/1/485738/100/200/threaded - http://www.securityfocus.com/archive/1/485732/100/200/threaded - http://www.securityfocus.com/bid/27111 - http://aviv.raffon.net/2008/01/02/YetAnotherDialogSpoofingFirefoxBasicAuthentication.aspx
CVE ID: CVE-2008-0368 State: PUBLISHED Published: 2008-01-18T23:00:00 Last Updated: 2024-08-07T07:39:35.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: onedcu in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27328 - http://secunia.com/advisories/28534 - http://www.vupen.com/english/advisories/2008/0169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39751 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=651 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC54307 - h
fense.com/intelligence/vulnerabilities/display.php?id=651 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC54307 - http://www.securitytracker.com/id?1019237 - http://www-1.ibm.com/support/docview.wss?uid=swg27011556
CVE ID: CVE-2008-0369 State: PUBLISHED Published: 2008-01-18T23:00:00 Last Updated: 2024-08-07T07:39:35.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified programs in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allow local users to create arbitrary files by specifying the target file in the SQLIDEBUG environment variable, whose ownership is changed to the user invoking the programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27328 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=650 - http://secunia.com/advisories/28534 - http://www.vupen.com/english/advisories/2008/0169
erabilities/display.php?id=650 - http://secunia.com/advisories/28534 - http://www.vupen.com/english/advisories/2008/0169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39751 - http://www.securitytracker.com/id?1019237 - http://www-1.ibm.com/support/docview.wss?uid=swg27011556 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40009 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC54309
CVE ID: CVE-2008-0370 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:39:35.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dohtaccess.html in cPanel before 11.17 build 19417 allows remote attackers to inject arbitrary web script or HTML via the rurl parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27308 - http://secunia.com/advisories/28561 - http://www.securityfocus.com/archive/1/486404/100/0/threaded - http://aria-security.net/forum/showthread.php?p=1238 - http://securityre
rityfocus.com/archive/1/486404/100/0/threaded - http://aria-security.net/forum/showthread.php?p=1238 - http://securityreason.com/securityalert/3561
CVE ID: CVE-2008-0371 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:39:35.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via (1) the mohit parameter to (a) inc/receivertwo.php; and allow remote attackers to execute arbitrary SQL commands via (2) the id parameter to (b) inc/usercp.php, related to functionz/usercp.php; or (3) the username parameter to (c) admin/index.php, related to functionz/first_process.php, or (d) index.php. NOTE: some of these details are obtained from third party inf
related to functionz/first_process.php, or (d) index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39745 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39735 - https://www.exploit-db.com/exploits/4922 - http://secunia.com/advisories/28515 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39736 - http://www.securityfocus.com/bid/27315
CVE ID: CVE-2008-0372 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:39:35.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: 8e6 R3000 Internet Filter 2.0.05.33, and other versions before 2.0.11, allows remote attackers to bypass intended restrictions via a fragmented HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486770/100/0/threaded - http://securityreason.com/securityalert/3557 - http://www.securityfocus.com/bid/27309 - http://secunia.com/advisories/28524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39723 - http://www.securityfocus.com/archive/1/486398/100/0/threade
https://exchange.xforce.ibmcloud.com/vulnerabilities/39723 - http://www.securityfocus.com/archive/1/486398/100/0/threaded
CVE ID: CVE-2008-0373 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:39:34.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to upload and execute arbitrary PHP files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486335/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39740 - http://www.securityfocus.com/bid/27285 - http://securityreason.com/securityalert/3572
CVE ID: CVE-2008-0374 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:39:35.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27339 - http://www.securityfocus.com/archive/1/486511/100/0/threaded - http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html - http://secunia.com/advisories/28553 - https://exchange.
p://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html - http://secunia.com/advisories/28553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39775 - http://securityreason.com/securityalert/3569
CVE ID: CVE-2008-0375 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:39:34.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 allows remote attackers to set the password and obtain administrative access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27339 - http://www.securityfocus.com/archive/1/486511/100/0/threaded - http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39776 - http://secunia.com/advis
s/news_0004.html_1394092626.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39776 - http://secunia.com/advisories/28553 - http://securityreason.com/securityalert/3569
CVE ID: CVE-2008-0376 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:46:53.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28568 - http://www.securityfocus.com/bid/27345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39765 - https://www.exploit-db.com/exploits/4937
CVE ID: CVE-2008-0377 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:46:53.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: MicroNews allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486349/100/0/threaded - http://www.securityfocus.com/bid/27288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39702 - http://securityreason.com/securityalert/3556
CVE ID: CVE-2008-0378 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:46:54.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in SocksCap 2.40-051231 and earlier, when "Resolve all names remotely" is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long hostname. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3560 - http://www.securityfocus.com/archive/1/486632/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39781 - http://www.securityfocus.com/bid/27357
CVE ID: CVE-2008-0379 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:46:54.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4931 - http://www.securityfocus.com/bid/27333 - http://www.securitytracker.com/id?1019239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3
focus.com/bid/27333 - http://www.securitytracker.com/id?1019239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39743
CVE ID: CVE-2008-0380 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:46:54.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29) allows remote attackers to execute arbitrary code via a long MP4Prefix property. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28492 - http://www.securityfocus.com/bid/27337 - http://www.vupen.com/english/advisories/2008/0182 - https://www.exploit-db.com/exploits/4932
CVE ID: CVE-2008-0381 State: PUBLISHED Published: 2008-01-22T19:00:00Z Last Updated: 2024-09-16T21:56:40.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Mahara before 0.9.1 has unknown impact and remote attack vectors, probably related to cross-site scripting (XSS) in uploaded files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28484 - https://eduforge.org/frs/shownotes.php?release_id=342 - http://www.securityfocus.com/bid/27348
CVE ID: CVE-2008-0382 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:46:55.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameter to (1) forumdisplay.php or (2) a results action in search.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4928 - http://secunia.com/advisories/28509 - http://www.securityfocus.com/archive/1/486434/100/0/threaded - http://www.securityfocus.com/bid/27322 - https://www.exploit-db.com/exploits/4927 - http://securityreason.com/securitya
http://www.securityfocus.com/bid/27322 - https://www.exploit-db.com/exploits/4927 - http://securityreason.com/securityalert/3559
CVE ID: CVE-2008-0383 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:46:54.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MyBB 1.2.10 and earlier allow remote moderators and administrators to execute arbitrary SQL commands via (1) the mergepost parameter in a do_mergeposts action, (2) rid parameter in an allreports action, or (3) threads parameter in a do_multimovethreads action to (a) moderation.php; or (4) gid parameter to (b) admin/usergroups.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27323 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
am Container: References: - http://www.securityfocus.com/bid/27323 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39728 - http://secunia.com/advisories/28509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39729 - http://www.waraxe.us/advisory-62.html - http://securityreason.com/securityalert/3558 - http://community.mybboard.net/showthread.php?tid=27227 - http://www.securityfocus.com/archive/1/486433/100/0/threaded
CVE ID: CVE-2008-0384 State: PUBLISHED Published: 2008-01-22T19:00:00 Last Updated: 2024-08-07T07:46:54.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the SIOCGIFRTLABEL IOCTL on an interface that does not have a route label, which triggers a NULL pointer dereference when the return value from the rtlabel_id2name function is not checked. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27252 - https://www.exploit-db.com/exploits/4935 - http://www.openbsd.org/errata42.html#005_ifrtlabel - http://secunia.com/advisories/28473 - http://www.securi
oits/4935 - http://www.openbsd.org/errata42.html#005_ifrtlabel - http://secunia.com/advisories/28473 - http://www.securitytracker.com/id?1019188 - http://marc.info/?l=openbsd-security-announce&m=120007327504064
CVE ID: CVE-2008-0385 State: PUBLISHED Published: 2008-02-29T19:00:00 Last Updated: 2024-08-07T07:46:54.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL commands via the connectionId parameter to index.php with (1) statprt/js/request or (2) dyn/js/request in the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.csnc.ch/misc/files/advisories/CVE-2008-0385.txt - http://securityreason.com/securityalert/3707 - http://secunia.com/advisories/29162 - http://www.securityfocus.com/archive/1/488909/100/0/threaded - http://www.securi
- http://secunia.com/advisories/29162 - http://www.securityfocus.com/archive/1/488909/100/0/threaded - http://www.securityfocus.com/bid/28032
CVE ID: CVE-2008-0386 State: PUBLISHED Published: 2008-02-04T22:00:00 Last Updated: 2024-08-07T07:46:54.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) xdg-open or (2) xdg-email. Additional Analyst Notes: - CVE Program Container: References: - http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-open?view=log - http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-email?r1=1.36&r2=1.37 - http://secunia.com/advisories/29048 - http://security.gentoo.org/glsa/glsa-200801-21.xml - http://secunia.com/advi
.37 - http://secunia.com/advisories/29048 - http://security.gentoo.org/glsa/glsa-200801-21.xml - http://secunia.com/advisories/28728 - http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-email.in?r1=1.24&r2=1.25 - http://www.vupen.com/english/advisories/2008/0342 - http://www.securitytracker.com/id?1019284 - http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-open?r1=1.32&r2=1.33 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:031 - http://bugs.gentoo.org/show_bug.cgi?id=207331 - http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-open.in?r1=1.17&r2=1.18 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008