Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
g/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10393 - http://support.apple.com/kb/HT3549 - http://www.ruby-lang.org/security/20080823rexml/rexml-expansion-fix.rb - http://www.securitytracker.com/id?1020735 - http://www.debian.org/security/2008/dsa-1652 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html - http://www.vupen.com/english/advisories/2008/2428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44628 - http://secunia.com/advisories/35074 - http://www.openwall.com/lists/oss-security/2008/08/26/4 - http://weblog.rubyonrails.org/2008/9/3/rails-2-0-4-maintenance-release - http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm -
byonrails.org/2008/9/3/rails-2-0-4-maintenance-release - http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm - http://www.debian.org/security/2008/dsa-1651 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml/ - http://www.redhat.com/support/errata/RHSA-2008-0897.html - http://groups.google.com/group/comp.lang.ruby/browse_thread/thread/19f69e8a081fc0d1/e138e014b74352ca - http://www.openwall.com/lists/oss-security/2008/08/25/4 - http://secunia.com/advisories/32219 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://secunia.com/advisories/32255 - http://www.vupen.com/english/advi
/www.us-cert.gov/cas/techalerts/TA09-133A.html - http://secunia.com/advisories/32255 - http://www.vupen.com/english/advisories/2009/1297 - http://www.securityfocus.com/bid/30802 - https://usn.ubuntu.com/691-1/ - http://www.openwall.com/lists/oss-security/2008/08/26/1 - http://secunia.com/advisories/32371 - http://secunia.com/advisories/32165 - http://security.gentoo.org/glsa/glsa-200812-17.xml - http://secunia.com/advisories/33178 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html - http://secunia.com/advisories/32256 - http://secunia.com/advisories/31602 - http://www.vupen.com/english/advisories/2008/2483
CVE ID: CVE-2008-3791 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:53:00.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rot.jpg temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495968 - http://www.openwall.com/lists/oss-security/2008/08/26/10 - http://sourceforge.net/tracker/index.php?func=detail&aid=2019481&group_id=180858&atid=894869 - http://www.openwall.com/lists/oss-security/2008/08/25/3 - http://www.op
detail&aid=2019481&group_id=180858&atid=894869 - http://www.openwall.com/lists/oss-security/2008/08/25/3 - http://www.openwall.com/lists/oss-security/2008/08/26/5 - http://lxde.svn.sourceforge.net/viewvc/lxde?view=rev&sortby=date&revision=845
CVE ID: CVE-2008-3792 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:53:00.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4 does not verify that the SCTP-AUTH extension is enabled before proceeding with SCTP-AUTH API functions, which allows attackers to cause a denial of service (NULL pointer dereference and panic) via vectors that result in calls to (1) sctp_setsockopt_auth_chunk, (2) sctp_setsockopt_hmac_ident, (3) sctp_setsockopt_auth_key, (4) sctp_setsockopt_active_key, (5) sctp_setsockopt_del_key, (6) sctp_getsockopt_maxburst
(3) sctp_setsockopt_auth_key, (4) sctp_setsockopt_active_key, (5) sctp_setsockopt_del_key, (6) sctp_getsockopt_maxburst, (7) sctp_getsockopt_active_key, (8) sctp_getsockopt_peer_auth_chunks, or (9) sctp_getsockopt_local_auth_chunks. Additional Analyst Notes: - CVE Program Container: References: - http://www.trapkit.de/advisories/TKADV2008-007.txt - http://secunia.com/advisories/32190 - http://secunia.com/advisories/32393 - http://www.debian.org/security/2008/dsa-1636 - http://www.securityfocus.com/bid/31121 - http://www.openwall.com/lists/oss-security/2008/08/26/8 - http://www.openwall.com/lists/oss-security/2008/08/26/6 - http://secunia.com/advisories/31881 - http://www.ubuntu.com/usn/usn-
/www.openwall.com/lists/oss-security/2008/08/26/6 - http://secunia.com/advisories/31881 - http://www.ubuntu.com/usn/usn-659-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45189 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html - http://www.redhat.com/support/errata/RHSA-2008-0857.html - http://www.openwall.com/lists/oss-security/2008/08/25/1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4 - http://lkml.org/lkml/2008/8/23/49 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5e739d1752aca4e8f3e794d431503bfca3162df4 - http://www.securitytracker.com/id?1020854 - http://securityreason.com/securityalert/4210 - ht
f3e794d431503bfca3162df4 - http://www.securitytracker.com/id?1020854 - http://securityreason.com/securityalert/4210 - http://www.securityfocus.com/archive/1/496256/100/0/threaded - http://marc.info/?l=linux-netdev&m=121928747903176&w=2 - http://www.openwall.com/lists/oss-security/2008/09/26/6
CVE ID: CVE-2008-3793 State: REJECTED Published: 2020-02-07T15:05:42 Last Updated: 2020-02-07T15:05:42 Description: No description available.
CVE ID: CVE-2008-3794 State: PUBLISHED Published: 2008-08-26T15:00:00 Last Updated: 2024-08-07T09:53:00.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.orange-bat.com/adv/2008/adv.08.24.txt - http://www.securityfocus.com/bid/30806 - https://oval.cisecurity.org/repository/search/definit
/adv/2008/adv.08.24.txt - http://www.securityfocus.com/bid/30806 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14531 - http://mailman.videolan.org/pipermail/vlc-devel/2008-August/048488.html - https://www.exploit-db.com/exploits/6293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44659 - http://www.securitytracker.com/id?1020759 - http://securityreason.com/securityalert/4190 - http://www.openwall.com/lists/oss-security/2008/08/24/3 - http://security.gentoo.org/glsa/glsa-200809-06.xml
CVE ID: CVE-2008-3795 State: PUBLISHED Published: 2008-08-27T15:00:00 Last Updated: 2024-08-07T09:52:59.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Ipswitch WS_FTP Home client allows remote FTP servers to have an unknown impact via a long "message response." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30728 - https://www.exploit-db.com/exploits/6257 - http://securityreason.com/securityalert/4173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44744
CVE ID: CVE-2008-3796 State: PUBLISHED Published: 2008-08-27T15:00:00 Last Updated: 2024-08-07T09:52:59.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service (application crash) via a 1x1 JPEG image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/08/19/3 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44746 - http://lists.freedesktop.org/archives/swfdec/2008-July/001801.html - http://www.openwall.com/lists/oss-security/2008/08/19/2
CVE ID: CVE-2008-3798 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:52:59.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.4 allows remote attackers to cause a denial of service (device crash) via a normal, properly formed SSL packet that occurs during termination of an SSL session. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6087 - http://www.vupen.com/english/advisories/2008/2670 - http://www.securitytracker.com/id?1020930 - http://www.cisco.com/en/US/products/products_security_advisory091
008/2670 - http://www.securitytracker.com/id?1020930 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0146c.shtml
CVE ID: CVE-2008-3799 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:53:00.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (memory consumption and voice-service outage) via unspecified valid SIP messages. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5927 - http://secunia.com/advisories/31990 - http://www.vupen.com/english/advisories/2008/2670 - http://www.cisco.com/en
5927 - http://secunia.com/advisories/31990 - http://www.vupen.com/english/advisories/2008/2670 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml - http://www.securitytracker.com/id?1020939
CVE ID: CVE-2008-3800 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:53:00.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsu38644, a different vulnerability than CVE-2008-3801 and CVE-2008-3802. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - http://www.securityfocus.com/b
alyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - http://www.securityfocus.com/bid/31367 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6086 - http://secunia.com/advisories/32013 - http://www.vupen.com/english/advisories/2008/2670 - http://www.vupen.com/english/advisories/2008/2671 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml - http://www.securitytracker.com/id?1020942 - http://www.securitytracker.com/id?1020939 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0156a.shtml
CVE ID: CVE-2008-3801 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:52:59.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsm46064, a different vulnerability than CVE-2008-3800 and CVE-2008-3802. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - http://www.securityfocus.com/b
alyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - http://www.securityfocus.com/bid/31367 - http://secunia.com/advisories/32013 - http://www.vupen.com/english/advisories/2008/2670 - http://www.vupen.com/english/advisories/2008/2671 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6047 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml - http://www.securitytracker.com/id?1020942 - http://www.securitytracker.com/id?1020939 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0156a.shtml
CVE ID: CVE-2008-3802 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:52:59.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (device reload) via unspecified valid SIP messages, aka Cisco bug ID CSCsk42759, a different vulnerability than CVE-2008-3800 and CVE-2008-3801. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5889
unia.com/advisories/31990 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5889 - http://www.vupen.com/english/advisories/2008/2670 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml - http://www.securitytracker.com/id?1020939
CVE ID: CVE-2008-3803 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:52:59.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching (MPLS) VPN with extended communities is configured, sometimes causes a corrupted route target (RT) to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - http://www.securityfocus.com/bid/31366 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5919 - http
focus.com/bid/31366 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5919 - http://www.securitytracker.com/id?1020940 - http://www.vupen.com/english/advisories/2008/2670 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014a9.shtml
CVE ID: CVE-2008-3804 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:53:00.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service (memory corruption) via crafted packets for which the software path is used. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5619 - http://www.securitytracker.com/id?1020934 - http://www.cisco.com/en/US/prod
inition/oval%3Aorg.mitre.oval%3Adef%3A5619 - http://www.securitytracker.com/id?1020934 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ac.shtml - http://www.vupen.com/english/advisories/2008/2670
CVE ID: CVE-2008-3805 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:53:00.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3806. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
ences: - http://secunia.com/advisories/31990 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5910 - http://www.securitytracker.com/id?1020935 - http://www.vupen.com/english/advisories/2008/2670 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml - http://tools.cisco.com/security/center/viewAlert.x?alertId=16646
CVE ID: CVE-2008-3806 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:52:59.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3805. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45592 - http://www.c
ences: - http://secunia.com/advisories/31990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45592 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7123 - http://tools.cisco.com/security/center/viewAlert.x?alertId=16646
CVE ID: CVE-2008-3807 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:52:59.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 and 12.3 on Cisco uBR10012 series devices, when linecard redundancy is configured, enables a read/write SNMP service with "private" as the community, which allows remote attackers to obtain administrative access by guessing this community and sending SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5452 - http://www.securitytracker.com/id?1020941 - http://www
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5452 - http://www.securitytracker.com/id?1020941 - http://www.vupen.com/english/advisories/2008/2670 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014b1.shtml
CVE ID: CVE-2008-3808 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:52:59.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted Protocol Independent Multicast (PIM) packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - http://www.securityfocus.com/bid/31356 - http://www.vupen.com/english/advisories/2008/2670 - http://www.securitytracker.com/id?1020936 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5873 - http://www.ci
id?1020936 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5873 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01491.shtml
CVE ID: CVE-2008-3809 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:53:00.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.0 through 12.4 on Gigabit Switch Router (GSR) devices (aka 12000 Series routers) allows remote attackers to cause a denial of service (device crash) via a malformed Protocol Independent Multicast (PIM) packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5477 - http://www.securityfocus.com/bid/31356 - http://www.vupen.com/english/advisories/2008/2670 - http://www.security
A5477 - http://www.securityfocus.com/bid/31356 - http://www.vupen.com/english/advisories/2008/2670 - http://www.securitytracker.com/id?1020936 - http://tools.cisco.com/security/center/viewAlert.x?alertId=16638 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01491.shtml
CVE ID: CVE-2008-3810 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:53:00.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - http://www.securitytracker.com/id?1020937 - http://www.securityfocus.com/bid/31359 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.s
ttp://www.securityfocus.com/bid/31359 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml - http://www.vupen.com/english/advisories/2008/2670 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6112
CVE ID: CVE-2008-3811 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:52:59.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - http://www.securitytracker.com/id?1020937 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5900 - https://exchan
d?1020937 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45535 - http://www.securityfocus.com/bid/31359 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml - http://www.vupen.com/english/advisories/2008/2670
CVE ID: CVE-2008-3812 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:53:00.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed HTTP transit packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - http://www.securitytracker.com/id?1020929 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5302 - http://www.cisco.com/en/US/products/products_security_advisory09186a0
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A5302 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01545.shtml - http://tools.cisco.com/security/center/viewAlert.x?alertId=16661 - http://www.vupen.com/english/advisories/2008/2670 - http://www.securityfocus.com/bid/31354
CVE ID: CVE-2008-3813 State: PUBLISHED Published: 2008-09-26T16:00:00 Last Updated: 2024-08-07T09:53:00.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted L2TP packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31990 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5362 - http://www.vupen.com/english/advisories/2008/2670 - http://www.securitytracker.com/id?1020938 - http://www.cisco.com/en/US/products/product
m/english/advisories/2008/2670 - http://www.securitytracker.com/id?1020938 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0157a.shtml