Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3948 State: PUBLISHED Published: 2008-09-05T16:00:00 Last Updated: 2024-08-07T10:00:42.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/users/self-2.php in XRMS allows remote attackers to execute arbitrary SQL commands and modify name and email fields via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45048 - http://www.securityfocus.com/archive/1/495981/100/0/threaded - http://securityreason.com/securityalert/4229 - http://www.securityfocus.com/bid/31008
CVE ID: CVE-2008-3949 State: PUBLISHED Published: 2008-09-22T17:00:00 Last Updated: 2024-08-07T10:00:42.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: emacs/lisp/progmodes/python.el in Emacs 22.1 and 22.2 imports Python script from the current working directory during editing of a Python file, which allows local users to execute arbitrary code via a Trojan horse Python file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/emacs-devel/2008-09/msg00215.html - http://secunia.com/advisories/31982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45021 - http://www.securityfocus.com/bid/31052 - https://bugzilla.novell.com/sh
ange.xforce.ibmcloud.com/vulnerabilities/45021 - http://www.securityfocus.com/bid/31052 - https://bugzilla.novell.com/show_bug.cgi?id=424340 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://security.gentoo.org/glsa/glsa-200902-06.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2008:216 - http://secunia.com/advisories/34004
CVE ID: CVE-2008-3950 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T10:00:42.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service (browser crash) via a JavaScript alert call with an argument that lacks breakable characters and has a length that is a multiple of the memory page size, leading to an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31061 - http://www.securi
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31061 - http://www.securityfocus.com/archive/1/496321/100/0/threaded - http://www.coresecurity.com/content/iphone-safari-javascript-alert-denial-of-service - http://securityreason.com/securityalert/4264
CVE ID: CVE-2008-3951 State: PUBLISHED Published: 2008-09-09T13:09:00 Last Updated: 2024-08-07T10:00:41.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the ann_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44945 - http://securityreason.com/securityalert/4230 - http://www.securityfocus.com/bid/31032 - https://www.exploit-db.com/exploits/6371
CVE ID: CVE-2008-3952 State: PUBLISHED Published: 2008-09-09T13:09:00 Last Updated: 2024-08-07T10:00:42.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the idcat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44957 - https://www.exploit-db.com/exploits/6383 - http://securityreason.com/securityalert/4231 - http://www.securityfocus.com/bid/31036
CVE ID: CVE-2008-3953 State: PUBLISHED Published: 2008-09-09T13:09:00 Last Updated: 2024-08-07T10:00:41.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in keyword_search_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to execute arbitrary SQL commands via the tage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6385 - http://securityreason.com/securityalert/4232 - http://www.securityfocus.com/bid/31039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44947
CVE ID: CVE-2008-3954 State: PUBLISHED Published: 2008-09-09T13:09:00 Last Updated: 2024-08-07T10:00:42.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4233 - http://www.securityfocus.com/bid/31048 - http://www.vupen.com/english/advisories/2008/2508 - http://www.securitytracker.com/id?1020829 - https://www.exploit-db.com/exploits/6396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/449
ker.com/id?1020829 - https://www.exploit-db.com/exploits/6396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44932
CVE ID: CVE-2008-3955 State: PUBLISHED Published: 2008-09-09T13:09:00 Last Updated: 2024-08-07T10:00:41.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ordercode parameter in a veiworderstatus page. Additional Analyst Notes: - CVE Program Container: References: - http://bugreport.ir/index_52.htm - http://securityreason.com/securityalert/4234 - http://www.vupen.com/english/advisories/2008/2509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44933 - https://www.exploit-db.com/exploits/6395 - http://www.securityfocus.com/bi
e.xforce.ibmcloud.com/vulnerabilities/44933 - https://www.exploit-db.com/exploits/6395 - http://www.securityfocus.com/bid/31046
CVE ID: CVE-2008-3956 State: PUBLISHED Published: 2008-09-09T14:00:00 Last Updated: 2024-08-07T10:00:41.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .opx file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44993 - http://www.nullcode.com.ar/ncs/crash/orgchart.htm - http://www.securityfocus.com/bid/31059
CVE ID: CVE-2008-3957 State: PUBLISHED Published: 2008-09-09T14:00:00 Last Updated: 2024-08-07T10:00:41.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/data/vulnerabilities/exploits/31
onal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/data/vulnerabilities/exploits/31069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45015 - http://www.securityfocus.com/bid/31069
CVE ID: CVE-2008-3958 State: PUBLISHED Published: 2008-09-09T14:00:00 Last Updated: 2024-08-07T10:00:41.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT/ATTACH data stream that simulates a V7 client connect/attach request. NOTE: this may overlap CVE-2008-3858. NOTE: this issue exists because of an incomplete fix for CVE-2008-3959. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT - http://www.securityfocus.com/bid/31058 - http://www-1.ibm.com/support/do
ixes/english-us/aparlist/db2_v82/APARLIST.TXT - http://www.securityfocus.com/bid/31058 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08134 - http://secunia.com/advisories/31787 - http://osvdb.org/48144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45133
CVE ID: CVE-2008-3959 State: PUBLISHED Published: 2008-09-09T14:00:00 Last Updated: 2024-08-07T10:00:42.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45134 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ05043 - http://secunia.com/advisories/29022 - http://www.appsecinc.com/resources/alerts/db
support/docview.wss?uid=swg1IZ05043 - http://secunia.com/advisories/29022 - http://www.appsecinc.com/resources/alerts/db2/2008-01.shtml
CVE ID: CVE-2008-3960 State: PUBLISHED Published: 2008-09-09T14:00:00 Last Updated: 2024-08-07T10:00:41.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JDBC Applet Server Service (aka db2jds) in IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (service crash) via "malicious packets." Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT - http://www.securityfocus.com/bid/31058 - http://www-01.ibm.com/support/docview.wss?uid=swg21318189 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR29274 - https://exchan
.ibm.com/support/docview.wss?uid=swg21318189 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR29274 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44984 - http://www.securitytracker.com/id?1020826 - http://osvdb.org/48148 - http://secunia.com/advisories/31787
CVE ID: CVE-2008-3961 State: PUBLISHED Published: 2008-09-17T18:06:00 Last Updated: 2024-08-07T10:00:42.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted attackers to execute arbitrary code via a crafted AI file. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/advisories/apsa08-07.html - http://www.securitytracker.com/id?1020892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45180 - http://secunia.com/advisories/31902 - http://www.vupen.com/english/advisories/2008/2600 - http://www.securityfocus.com/bid/31208
CVE ID: CVE-2008-3962 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T10:00:42.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive information (memory contents) in opportunistic circumstances by reading a message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2597 - https://bugs.gentoo.org/234391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45038 - http://www.openwall.com/list
tps://bugs.gentoo.org/234391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45038 - http://www.openwall.com/lists/oss-security/2008/09/11/2 - http://www.openwall.com/lists/oss-security/2008/09/09/6 - http://www.openwall.com/lists/oss-security/2008/09/09/5 - http://www.securityfocus.com/bid/31094
CVE ID: CVE-2008-3963 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T10:00:41.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mysql.com/bug.php?id=35658 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:094 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-26.html - http://www.ubuntu.com/
curity/advisories?name=MDVSA-2009:094 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-26.html - http://www.ubuntu.com/usn/USN-1397-1 - http://www.redhat.com/support/errata/RHSA-2009-1067.html - http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-66.html - http://dev.mysql.com/doc/refman/6.0/en/news-6-0-6.html - http://www.openwall.com/lists/oss-security/2008/09/09/7 - http://www.vupen.com/english/advisories/2008/2554 - http://www.ubuntu.com/usn/USN-671-1 - https://bugs.gentoo.org/237166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45042 - http://www.debian.org/security/2009/dsa-1783 - http://www.redhat.com/support/errata/RHSA-2009-1289.html - http://secunia.com/advisories/
n.org/security/2009/dsa-1783 - http://www.redhat.com/support/errata/RHSA-2009-1289.html - http://secunia.com/advisories/32769 - http://secunia.com/advisories/32759 - http://secunia.com/advisories/34907 - http://www.openwall.com/lists/oss-security/2008/09/09/4 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://secunia.com/advisories/36566 - http://secunia.com/advisories/31769 - http://www.securitytracker.com/id?1020858 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10521
CVE ID: CVE-2008-3964 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T10:00:41.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a PNG image with crafted zTXt chunks, related to (1) the png_push_read_zTXt function in pngread.c, and possibly related to (2) pngtest.c. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=5624&release_id=624517 - http://www.openwall.com/lists/oss-security/2008/09/09/3
rge.net/project/shownotes.php?group_id=5624&release_id=624517 - http://www.openwall.com/lists/oss-security/2008/09/09/3 - http://secunia.com/advisories/35386 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44928 - http://www.vupen.com/english/advisories/2009/1560 - http://www.vupen.com/english/advisories/2009/1462 - http://www.securityfocus.com/bid/31049 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1 - http://secunia.com/advisories/35302 - http://www.openwall.com/lists/oss-security/2008/09/09/8 - http://www.kb.cert.org/vuls/id/889484 - http://www.vupen.com/english/advisories/2008/2512 - http://
urity/2008/09/09/8 - http://www.kb.cert.org/vuls/id/889484 - http://www.vupen.com/english/advisories/2008/2512 - http://security.gentoo.org/glsa/glsa-200812-15.xml - http://secunia.com/advisories/31781 - http://secunia.com/advisories/33137 - http://sourceforge.net/mailarchive/forum.php?thread_name=e56ccc8f0809180317u6a5306fg14683947affb3e1b%40mail.gmail.com&forum_name=png-mng-implement - http://sourceforge.net/project/shownotes.php?release_id=624518 - http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm - http://www.mandriva.com/security/advisories?name=MDVSA-2009:051 - http://sourceforge.net/tracker/index.php?func=detail&aid=2095669&group_id=5624&atid=105624
CVE ID: CVE-2008-3965 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T10:00:42.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/09/09/1 - http://secunia.com/advisories/31760 - http://community.mybboard.net/showthread.php?tid=36022 - http://www.securityfocus.com/bid/31104 - http://community.mybboard.net/attachment.php?aid=10579 - http://www.openwall.com/lists/oss-security/2008
com/bid/31104 - http://community.mybboard.net/attachment.php?aid=10579 - http://www.openwall.com/lists/oss-security/2008/09/09/9
CVE ID: CVE-2008-3966 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T10:00:42.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via (1) a certain referrer field in usercp2.php, (2) a certain location field in inc/functions_online.php, and certain (3) tsubject and (4) psubject fields in moderation.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/09/09/1 - http://secunia.com/advisories/31760 - http://community.mybboard.net/showthrea
wall.com/lists/oss-security/2008/09/09/1 - http://secunia.com/advisories/31760 - http://community.mybboard.net/showthread.php?tid=36022 - http://www.securityfocus.com/bid/31104 - http://community.mybboard.net/attachment.php?aid=10579 - http://www.openwall.com/lists/oss-security/2008/09/09/9
CVE ID: CVE-2008-3967 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T10:00:42.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: moderation.php in MyBB (aka MyBulletinBoard) before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/09/09/1 - http://secunia.com/advisories/31760 - http://community.mybboard.net/showthread.php?tid=36022 - http://www.securityfocus.com/bid/31104 - http://community.mybboard.net/attachment.php?aid=10579 - http://www.openwall.com/lists/oss-security/2008/09/09/9
CVE ID: CVE-2008-3968 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T10:00:42.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in userlist.php in PunBB before 1.2.20 allows remote attackers to inject arbitrary web script or HTML via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45046 - http://www.openwall.com/lists/oss-security/2008/09/09/10 - http://punbb.informer.com/download/changelogs/1.2.19_to_1.2.20.txt - http://www.securityfocus.com/bid/31082 - http://punbb.informer.com/forums/topic/19682/punbb-1220-and-13rc-hotfix-r
txt - http://www.securityfocus.com/bid/31082 - http://punbb.informer.com/forums/topic/19682/punbb-1220-and-13rc-hotfix-released/ - http://www.openwall.com/lists/oss-security/2008/09/09/2
CVE ID: CVE-2008-3969 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T10:00:42.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to "overwrite" and "hijack" existing accounts via unknown vectors related to "inconsistent handling of the USTATUS_IDENTIFIED state." NOTE: this issue exists because of an incomplete fix for CVE-2008-3920. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/09/08/1 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00587.html - http://www.securityfocus.com/bid
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00587.html - http://www.securityfocus.com/bid/31342 - http://www.openwall.com/lists/oss-security/2008/09/09/11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45132 - http://security.gentoo.org/glsa/glsa-200809-14.xml - https://bugzilla.redhat.com/show_bug.cgi?id=461424 - http://www.bitlbee.org/main.php/changelog.html - http://www.bitlbee.org/main.php/news.r.html - http://secunia.com/advisories/31991 - http://secunia.com/advisories/31690
CVE ID: CVE-2008-3970 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T10:00:42.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/mailarchive/forum.php?thread_name=alpine.LNX.1.10.0809042353120.17569%40fbirervta.pbzchgretzou.qr&forum_name=pam-mount-user - http://www.openwall.com/lists/oss-security/2008/09/06/3 - https://exchange.xforce.ibmcloud.c
forum_name=pam-mount-user - http://www.openwall.com/lists/oss-security/2008/09/06/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44960 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:208 - http://sourceforge.net/project/shownotes.php?release_id=624240 - http://www.openwall.com/lists/oss-security/2008/09/09/12 - http://www.securityfocus.com/bid/31041 - http://dev.medozas.de/gitweb.cgi?p=pam_mount%3Ba=commitdiff%3Bh=33b91d7659ae3aa78b1e94fd3f8e545ae5ff25db - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html
CVE ID: CVE-2008-3971 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T10:00:42.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the open_man_file function in callbacks.c in gmanedit 0.4.1 allows remote attackers to execute arbitrary code via a crafted man page, which is not properly handled during utf8 conversion. NOTE: another overflow was reported using a configuration file, but that vector does not have a scenario that crosses privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/09/06/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=49
erences: - http://www.openwall.com/lists/oss-security/2008/09/06/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=497835 - http://www.openwall.com/lists/oss-security/2008/09/09/19 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44962 - http://www.openwall.com/lists/oss-security/2008/09/09/13 - http://www.securityfocus.com/bid/31040
CVE ID: CVE-2008-3972 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T10:00:42.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the "OpenSC" string, which might allow physically proximate attackers to exploit vulnerabilities that the card owner expected were patched, as demonstrated by exploitation of CVE-2008-2235. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45045 - http://secunia.com/advisories/34362 - https://www.redhat.com/archives/fedora-package-announce/2009-M
erabilities/45045 - http://secunia.com/advisories/34362 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html - http://www.openwall.com/lists/oss-security/2008/09/09/14 - http://www.opensc-project.org/pipermail/opensc-announce/2008-August/000021.html - http://secunia.com/advisories/32099 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html