Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5201 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:49:10.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in OTManager CMS 24a allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the conteudo parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4644 - http://www.securityfocus.com/bid/29992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43
om/securityalert/4644 - http://www.securityfocus.com/bid/29992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43459 - https://www.exploit-db.com/exploits/5957
CVE ID: CVE-2008-5202 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:49:10.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in OTManager CMS 24a allows remote attackers to inject arbitrary web script or HTML via the conteudo parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43457 - http://securityreason.com/securityalert/4644 - http://www.securityfocus.com/bid/29992 - https://www.exploit-db.com/exploits/5957
CVE ID: CVE-2008-5203 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:49:11.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in external_vote.php in PowerAward 1.1.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the l_vote_done parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43464 - http://www.securityfocus.com/bid/29993 - https://www.exploit-db.com/exploits/5962
CVE ID: CVE-2008-5204 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:49:10.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter to (1) agb.php, (2) angemeldet.php, (3) anmelden.php, (4) charts.php, (5) external_vote.php, (6) guestbook.php, (7) impressum.php, (8) index.php, (9) rss-reader.php, (10) statistic.php, (11) teilnehmer.php, (12) topsites.php, (13) votecode.php, (14) voting.php, and (15) winner.php. Additional Analyst No
, (11) teilnehmer.php, (12) topsites.php, (13) votecode.php, (14) voting.php, and (15) winner.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29993 - https://www.exploit-db.com/exploits/5962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43463
CVE ID: CVE-2008-5205 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:49:10.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in edit.php in wellyblog allows remote attackers to inject arbitrary web script or HTML via the articleid parameter in an add action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4645 - http://www.securityfocus.com/archive/1/493710/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/43433
CVE ID: CVE-2008-5206 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:49:10.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/mod_mainmenu.php in MosXML 1 Alpha allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43430 - http://www.securityfocus.com/bid/29952
CVE ID: CVE-2008-5207 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:49:11.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Jonascms 1.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the taal parameter to (1) backup.php and (2) gb_voegtoe.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43435 - http://www.securityfocus.com/bid/29950
CVE ID: CVE-2008-5208 State: PUBLISHED Published: 2008-11-24T17:00:00 Last Updated: 2024-08-07T10:49:10.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6 for Joomla! allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4624 - https://www.exploit-db.com/exploits/5583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42324 - http://www.securityfocus.com/bid/29138 - http://secunia.com/advisories/30139
CVE ID: CVE-2008-5209 State: PUBLISHED Published: 2008-11-24T17:00:00 Last Updated: 2024-08-07T10:49:10.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5575 - http://www.securityfocus.com/bid/29127 - http://securityreason.com/securityalert/4625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42304
CVE ID: CVE-2008-5210 State: PUBLISHED Published: 2008-11-24T17:00:00 Last Updated: 2024-08-07T10:49:10.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter to (1) script/init/createallimagecache.php, (2) allincludefortick.php and (3) test.php in script/tick/, and (4) modules/dungeon/tick/allincludefortick.php, different vectors than CVE-2008-1776. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42319 - https://ww
nces: - http://www.securityfocus.com/bid/29143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42319 - https://www.exploit-db.com/exploits/5586
CVE ID: CVE-2008-5211 State: PUBLISHED Published: 2008-11-24T17:00:00 Last Updated: 2024-08-07T10:49:11.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Sphider 1.3.4, when the search suggestion feature is enabled, allows remote attackers to inject arbitrary web script or HTML via the query parameter, a different vector than CVE-2006-2506. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42240 - http://users.own-hero.net/~decoder/advisories/sphider134-xss.txt - http://securityreason.com/securityalert/4629 - http://secunia.com/advisories/30082 - http://
sories/sphider134-xss.txt - http://securityreason.com/securityalert/4629 - http://secunia.com/advisories/30082 - http://www.securityfocus.com/bid/29074 - http://www.securityfocus.com/archive/1/491712/100/0/threaded
CVE ID: CVE-2008-5212 State: PUBLISHED Published: 2008-11-24T17:00:00 Last Updated: 2024-08-07T10:49:10.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the item_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5591 - http://securityreason.com/securityalert/4627 - http://www.securityfocus.com/bid/29150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42328
CVE ID: CVE-2008-5213 State: PUBLISHED Published: 2008-11-24T17:00:00 Last Updated: 2024-08-07T10:49:10.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in featured_article.php in AJ Article 1.0 allows remote attackers to execute arbitrary SQL commands via the artid parameter in a search detail action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29149 - https://www.exploit-db.com/exploits/5590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42329 - http://securityreason.com/securityalert/4632 - https://www.exploit-db.com/exploits/6927
CVE ID: CVE-2008-5214 State: PUBLISHED Published: 2008-11-24T17:00:00 Last Updated: 2024-08-07T10:49:11.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in service/calendrier.php in ClanLite 2.2006.05.20 allows remote attackers to inject arbitrary web script or HTML via the annee parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42331 - http://www.securityfocus.com/bid/29156 - https://www.exploit-db.com/exploits/5595
CVE ID: CVE-2008-5215 State: PUBLISHED Published: 2008-11-24T17:00:00 Last Updated: 2024-08-07T10:49:11.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in service/profil.php in ClanLite 2.2006.05.20 allows remote attackers to execute arbitrary SQL commands via the link parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4628 - http://www.securityfocus.com/bid/29156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42330 - https://www.exploit-db.com/exploits/5595
CVE ID: CVE-2008-5216 State: PUBLISHED Published: 2008-11-24T17:00:00 Last Updated: 2024-08-07T10:49:10.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category_list.php in AJ Square ZeusCart 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42333 - http://securityreason.com/securityalert/4636 - http://www.securityfocus.com/bid/29155 - https://www.exploit-db.com/exploits/5594
CVE ID: CVE-2008-5217 State: PUBLISHED Published: 2008-11-24T17:00:00 Last Updated: 2024-08-07T10:49:10.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in txtCMS 0.3, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5579 - http://securityreason.com/securityalert/4626 - http://www.securityfocus.com/bid/29131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42313
CVE ID: CVE-2008-5218 State: PUBLISHED Published: 2008-11-25T18:09:00 Last Updated: 2024-08-07T10:49:12.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain cleartext passwords. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4633 - http://www.securityfocus.com/bid/32325 - https://www.exploit-db.com/exploits/7140 - http://osvdb.org/49883 - http://secunia.com/advisories/32744
CVE ID: CVE-2008-5219 State: PUBLISHED Published: 2008-11-25T18:09:00 Last Updated: 2024-08-07T10:49:11.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified npass and npass1 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49885 - http://secunia.com/advisories/32718 - https://www.exploit-db.com/exploits/7149 - http://securityreason.com/securityalert/4634
CVE ID: CVE-2008-5220 State: PUBLISHED Published: 2008-11-25T18:09:00 Last Updated: 2024-08-07T10:49:11.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in admin/tmp/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7165 - http://www.vupen.com/english/advisories/2008/3219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46745 - http://www.securityfocus.com/bid/32367
CVE ID: CVE-2008-5221 State: PUBLISHED Published: 2008-11-25T18:09:00 Last Updated: 2024-08-07T10:49:11.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and password_retype parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4631 - https://www.exploit-db.com/exploits/7170 - http://www.vupen.com/english/advisories/2008/3219 - https://exchange.xforce.ibmcloud.com/vu
ploit-db.com/exploits/7170 - http://www.vupen.com/english/advisories/2008/3219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46772 - http://www.securityfocus.com/bid/32384
CVE ID: CVE-2008-5222 State: PUBLISHED Published: 2008-11-25T19:00:00 Last Updated: 2024-08-07T10:49:11.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42731 - http://www.securityfocus.com/archive/1/492753/100/0/threaded - http://www.securityfocus.com/bid/29429 - http://securityreason.com/securityalert/4635
CVE ID: CVE-2008-5223 State: PUBLISHED Published: 2008-11-25T19:00:00 Last Updated: 2024-08-07T10:49:12.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42734 - http://www.securityfocus.com/bid/29423 - http://securityreason.com/securityalert/4637 - http://secunia.com/advisories/30440
CVE ID: CVE-2008-5224 State: PUBLISHED Published: 2008-11-25T19:00:00 Last Updated: 2024-08-07T10:49:11.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Kent Web Mart 1.61 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29436 - http://jvn.jp/en/jp/JVN43906021/index.html - http://secunia.com/advisories/30444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42743 - http://www.kent-web.com/cart/mart.html
CVE ID: CVE-2008-5225 State: PUBLISHED Published: 2008-11-25T19:00:00 Last Updated: 2024-08-07T10:49:12.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) SearchResults/ and (2) Services/ in dsdn/dsweb/, and (3) the default URI under unspecified docushare/dsweb/ServicesLib/Group-#/ directories. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/492766/100/0/threaded - http://www.securityfocus.com/archive/1/492960/100/0/threaded - https:
ecurityfocus.com/archive/1/492766/100/0/threaded - http://www.securityfocus.com/archive/1/492960/100/0/threaded - https://docushare.xerox.com/doug/dsweb/Get/Document-20353/SA30426-workaround.html - http://www.securityfocus.com/bid/29430 - http://www.vupen.com/english/advisories/2008/1701/references - http://www.securitytracker.com/id?1020147 - http://secunia.com/advisories/30426 - https://docushare.xerox.com/doug/dsweb/View/Collection-7503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42748 - http://securityreason.com/securityalert/4638
CVE ID: CVE-2008-5226 State: PUBLISHED Published: 2008-11-25T19:00:00 Last Updated: 2024-08-07T10:49:11.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute arbitrary SQL commands via the ma_cat parameter in a view action to index.php, a different vector than CVE-2007-5177. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4630 - https://www.exploit-db.com/exploits/5692 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42747 - http://www.securityfocus.com/bid/29433
CVE ID: CVE-2008-5227 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T10:49:11.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PHPCow allows remote attackers to execute arbitrary code via unknown vectors, related to a "file inclusion vulnerability," as exploited in the wild in November 2008. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46714 - http://www.securityfocus.com/bid/32361 - http://www.kb.cert.org/vuls/id/515417
CVE ID: CVE-2008-5228 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T10:49:12.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being encoded." Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PK73933 - http://www.securityfocus.com/bid/32408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46749 -
?uid=swg1PK73933 - http://www.securityfocus.com/bid/32408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46749 - http://www.vupen.com/english/advisories/2008/3234 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK73108 - http://secunia.com/advisories/32763
CVE ID: CVE-2008-5229 State: PUBLISHED Published: 2008-11-25T23:00:00 Last Updated: 2024-08-07T10:49:12.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allows local users in the Network Configuration Operator group to gain privileges or cause a denial of service (system crash) via a large invalid PrefixLength to the CreateIpForwardEntry2 method, as demonstrated by a "route add" command. NOTE: this issue might not cross privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498650/100/0/threade
tional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498650/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46742 - http://www.securityfocus.com/archive/1/498471/100/0/threaded - http://secunia.com/advisories/32791 - http://securitytracker.com/id?1021245 - http://securityreason.com/securityalert/4646 - http://www.securityfocus.com/bid/32357
CVE ID: CVE-2008-5230 State: PUBLISHED Published: 2008-11-25T23:00:00Z Last Updated: 2024-09-17T02:31:10.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Temporal Key Integrity Protocol (TKIP) implementation in unspecified Cisco products and other vendors' products, as used in WPA and WPA2 on Wi-Fi networks, has insufficient countermeasures against certain crafted and replayed packets, which makes it easier for remote attackers to decrypt packets from an access point (AP) to a client and spoof packets from an AP to a client, and conduct ARP poisoning attacks or other attacks, as demonstrated by tkiptun-ng. Additional Analyst Notes: - CVE Program Container: References: - ht
cks or other attacks, as demonstrated by tkiptun-ng. Additional Analyst Notes: - CVE Program Container: References: - http://lists.immunitysec.com/pipermail/dailydave/2008-November/005413.html - http://arstechnica.com/articles/paedia/wpa-cracked.ars - http://trac.aircrack-ng.org/svn/trunk/src/tkiptun-ng.c - http://www.cisco.com/en/US/products/products_security_response09186a0080a30036.html - http://radajo.blogspot.com/2008/11/wpatkip-chopchop-attack.html - http://dl.aircrack-ng.org/breakingwepandwpa.pdf - http://www.aircrack-ng.org/doku.php?id=tkiptun-ng - http://www.securityfocus.com/bid/32164
CVE ID: CVE-2008-5231 State: PUBLISHED Published: 2008-11-26T01:00:00Z Last Updated: 2024-09-16T16:38:02.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ExecuteRequest method in the Novell iPrint ActiveX control in ienipp.ocx in Novell iPrint Client 5.06 and earlier allows remote attackers to execute arbitrary code via a long target-frame option value, a different vulnerability than CVE-2008-2431. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2008-27/advisory/ - http://secunia.com/advisories/30667 - http://www.securityfocus.com/bid/30813
CVE ID: CVE-2008-5232 State: PUBLISHED Published: 2008-11-26T01:00:00 Last Updated: 2024-08-07T10:49:12.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/data/vulnerabilitie
ation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/data/vulnerabilities/exploits/30814.html.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44629 - http://www.securityfocus.com/bid/30814 - http://packetstormsecurity.org/0808-exploits/wms-overflow.txt - http://securitytracker.com/id?1020733