Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
visories/29000 - http://security.gentoo.org/glsa/glsa-200805-19.xml - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://secunia.com/advisories/29891 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://secunia.com/secunia_research/2008-11/advisory/ - http://www.securityfocus.com/bid/28784 - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - http://secunia.com/advisories/29975 - http://secunia.com/advisories/29863 - http://secunia.com/advisories/30328 - http://www.securityfocus.com/bid/28756 - http://secunia.com/advisories/29886 - http://www.securitytracker.com/id?1019837 - https://www.redhat.com/archives/fedor
http://secunia.com/advisories/29886 - http://www.securitytracker.com/id?1019837 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00625.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41789 - http://www.kb.cert.org/vuls/id/858595 - http://secunia.com/advisories/30253 - http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=878 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00576.html - http://www.vupen.com/english/advisories/2008/1218/references - http://www.debian.org/security/2008/dsa-1549 - htt
html - http://www.vupen.com/english/advisories/2008/1218/references - http://www.debian.org/security/2008/dsa-1549 - http://kolab.org/security/kolab-vendor-notice-20.txt
CVE ID: CVE-2008-1101 State: PUBLISHED Published: 2008-04-10T18:00:00 Last Updated: 2024-08-07T08:08:57.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows remote attackers to execute arbitrary code via a long pathname, as demonstrated by a long SRC attribute of an IMG element in an HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28140 - http://secunia.com/advisories/28209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41725 - http://www.vupen.com/englis
/secunia.com/advisories/28209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41725 - http://www.vupen.com/english/advisories/2008/1156 - http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453 - http://www.securityfocus.com/bid/28454 - http://secunia.com/advisories/28210 - http://secunia.com/secunia_research/2008-12/advisory/ - http://www.securityfocus.com/archive/1/490826/100/0/threaded - http://www.vupen.com/english/advisories/2008/1153
CVE ID: CVE-2008-1102 State: PUBLISHED Published: 2008-04-21T20:00:00 Last Updated: 2024-08-07T08:08:57.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41917 - http://secunia.com/secunia_research/2008-16/advisory/ - http://secunia.com/advisories/29818 - https://www.redhat.com/archives/fedo
unia.com/secunia_research/2008-16/advisory/ - http://secunia.com/advisories/29818 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00237.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:204 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00225.html - http://secunia.com/advisories/30097 - http://secunia.com/advisories/30151 - http://www.debian.org/security/2008/dsa-1567 - http://www.gentoo.org/security/en/glsa/glsa-200805-12.xml - http://www.securityfocus.com/bid/28870 - http://secunia.com/advisories/30272 - http://secunia.com/advisories/29957 - http://www.vupen.com/english/advisories/2008/1308/references
CVE ID: CVE-2008-1103 State: PUBLISHED Published: 2008-04-28T18:21:00 Last Updated: 2024-08-07T08:08:57.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29842 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html - http://www.securityfocus.com/bid/28936 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:204 - http://secunia.com/advisories/30151 - http://www.gentoo.org/security/en/glsa/glsa-200805-12.xml - https://exchange.xforce
ttp://secunia.com/advisories/30151 - http://www.gentoo.org/security/en/glsa/glsa-200805-12.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/42153 - http://secunia.com/advisories/29957
CVE ID: CVE-2008-1104 State: PUBLISHED Published: 2008-05-21T10:00:00 Last Updated: 2024-08-07T08:08:57.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42531 - http://www.securityfocus.com/archive/1/492289/100/0/threaded - http://www.securitytracker.com/id?1020050 - http://www.kb.cert.org/vuls/id/119747 - http://ww
/1/492289/100/0/threaded - http://www.securitytracker.com/id?1020050 - http://www.kb.cert.org/vuls/id/119747 - http://www.vupen.com/english/advisories/2008/1572 - http://secunia.com/secunia_research/2008-18/advisory/ - http://www.securityfocus.com/bid/29288 - http://secunia.com/advisories/29941 - http://securityreason.com/securityalert/3899 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801
CVE ID: CVE-2008-1105 State: PUBLISHED Published: 2008-05-29T16:00:00 Last Updated: 2024-08-07T08:08:57.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0288.html - http://secunia.com/advisories/30478 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01030.html - http://secunia.com/advisories/30396 - http://support.apple.com/kb/HT2163 - http://secunia.com/advisories/30
01030.html - http://secunia.com/advisories/30396 - http://support.apple.com/kb/HT2163 - http://secunia.com/advisories/30489 - http://www.vupen.com/english/advisories/2008/2639 - http://securitytracker.com/id?1020123 - http://secunia.com/advisories/30835 - http://www.vupen.com/english/advisories/2008/1981/references - http://secunia.com/advisories/30736 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5733 - http://secunia.com/advisories/30385 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473951 - http://secunia.com/advisories/31911 - http://www.vupen.com/english/advisories/2008/1908 - http://www.redhat.com/
73951 - http://secunia.com/advisories/31911 - http://www.vupen.com/english/advisories/2008/1908 - http://www.redhat.com/support/errata/RHSA-2008-0290.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42664 - http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657 - https://www.exploit-db.com/exploits/5712 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.vupen.com/english/advisories/2008/2222/references - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01082.html - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01006.html - http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_n
archives/fedora-package-announce/2008-May/msg01006.html - http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-249086-1 - http://secunia.com/advisories/30449 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:108 - http://secunia.com/advisories/30802 - http://secunia.com/advisories/33696 - http://secunia.com/advisories/30442 - http://secunia.com/advisories/30543 - http://www.securityfocus.com/archive/1/492683/100/0/threaded - http://secunia.com/advisories/30228 - http://www.ubuntu.com/usn/usn-617-2 - http://www.xerox.com/downloads/usa/en/c/cert_XRX08_009.pdf - http://www.ubuntu.com/usn/usn-617-1 - http
/usn/usn-617-2 - http://www.xerox.com/downloads/usa/en/c/cert_XRX08_009.pdf - http://www.ubuntu.com/usn/usn-617-1 - http://www.securityfocus.com/bid/31255 - http://wiki.rpath.com/Advisories:rPSA-2008-0180 - http://www.securityfocus.com/archive/1/492737/100/0/threaded - http://security.gentoo.org/glsa/glsa-200805-23.xml - http://secunia.com/secunia_research/2008-20/advisory/ - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00000.html - http://lists.vmware.com/pipermail/security-announce/2008/000023.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45251 - http://www.vupen.
ion/oval%3Aorg.mitre.oval%3Adef%3A10020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45251 - http://www.vupen.com/english/advisories/2008/1681 - http://www.redhat.com/support/errata/RHSA-2008-0289.html - http://secunia.com/advisories/31246 - http://www.samba.org/samba/security/CVE-2008-1105.html - http://www.securityfocus.com/bid/29404 - http://www.debian.org/security/2008/dsa-1590 - http://www.securityfocus.com/archive/1/492903/100/0/threaded
CVE ID: CVE-2008-1106 State: PUBLISHED Published: 2008-06-09T23:00:00 Last Updated: 2024-08-07T08:08:57.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management interface in Akamai Client (formerly Red Swoosh) 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains (1) no Referer header, or (2) a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and force the client to download and execute arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493170/100/0/threaded - https:/
yst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493170/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42895 - http://www.vupen.com/english/advisories/2008/1761/references - http://secunia.com/secunia_research/2008-19/advisory/ - http://www.securityfocus.com/archive/1/493169/100/0/threaded - http://www.securitytracker.com/id?1020208 - http://securityreason.com/securityalert/3930 - http://secunia.com/advisories/30135
CVE ID: CVE-2008-1107 State: PUBLISHED Published: 2009-04-17T00:00:00 Last Updated: 2024-08-07T08:08:57.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control (DanskeSikker.ocx) 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502725/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/49903 - http://secunia.com/advisories/29635 - http:
00/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/49903 - http://secunia.com/advisories/29635 - http://www.securityfocus.com/bid/34549 - http://osvdb.org/53715 - http://secunia.com/secunia_research/2008-17/ - http://www.vupen.com/english/advisories/2009/1047
CVE ID: CVE-2008-1108 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T08:08:57.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00179.html - http://www.vupen.com/english/advisories/2008/1732/references - http://secunia.com/advisories/30298 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00178.html - http://secunia.c
om/advisories/30298 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00178.html - http://secunia.com/advisories/30564 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.html - http://www.redhat.com/support/errata/RHSA-2008-0516.html - http://www.redhat.com/support/errata/RHSA-2008-0515.html - http://security.gentoo.org/glsa/glsa-200806-06.xml - http://secunia.com/advisories/30571 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10471 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00157.html - http://www.redhat.com/support/errata/RHSA-2008-0514.html - http://secunia.com/advisories/30716
008-June/msg00157.html - http://www.redhat.com/support/errata/RHSA-2008-0514.html - http://secunia.com/advisories/30716 - http://secunia.com/secunia_research/2008-22/advisory/ - http://secunia.com/advisories/30536 - http://secunia.com/advisories/30527 - http://www.securityfocus.com/bid/29527 - http://www.securitytracker.com/id?1020169 - http://secunia.com/advisories/30702 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:111 - http://www.redhat.com/support/errata/RHSA-2008-0517.html - http://www.ubuntu.com/usn/usn-615-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42824
CVE ID: CVE-2008-1109 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T08:08:57.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window). Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00179.html - http://www.vupen.com/english/advisories/2008/1732/references - http://secunia.com/advisories/30298 - https://www.redhat.
http://www.vupen.com/english/advisories/2008/1732/references - http://secunia.com/advisories/30298 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00178.html - http://secunia.com/advisories/30564 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.html - http://www.redhat.com/support/errata/RHSA-2008-0515.html - http://security.gentoo.org/glsa/glsa-200806-06.xml - http://secunia.com/advisories/30571 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00157.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42826 - http://www.securitytracker.com/id?1020170 - http://secunia.com/secunia_research/2008-23/advisory/ - http://ww
es/42826 - http://www.securitytracker.com/id?1020170 - http://secunia.com/secunia_research/2008-23/advisory/ - http://www.redhat.com/support/errata/RHSA-2008-0514.html - http://secunia.com/advisories/30716 - http://secunia.com/advisories/30527 - http://www.securityfocus.com/bid/29527 - http://secunia.com/advisories/30702 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:111 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10337 - http://www.ubuntu.com/usn/usn-615-1
CVE ID: CVE-2008-1110 State: PUBLISHED Published: 2008-02-29T19:00:00 Last Updated: 2024-08-07T08:08:57.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-1664 exploit code, but it is different from CVE-2006-1664. Additional Analyst Notes: - CVE Program Container: References: - http://xinehq.de/index.php/security - https://exchange.xforce.ibmcloud.com/vulnerabilities/41019 - http://
References: - http://xinehq.de/index.php/security - https://exchange.xforce.ibmcloud.com/vulnerabilities/41019 - http://secunia.com/advisories/31393 - http://xinehq.de/index.php/news - http://security.gentoo.org/glsa/glsa-200802-12.xml - http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=571608 - http://bugs.gentoo.org/show_bug.cgi?id=208100 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:178 - http://secunia.com/advisories/29141 - http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset%3Bnode=fb6d089b520dca199ef16a046da28c50c984c2d2%3Bstyle=gitweb - https://www.exploit-db.com/exploits/1641 - http://www.ubuntu.com/usn/usn-635-1
CVE ID: CVE-2008-1111 State: PUBLISHED Published: 2008-03-04T23:00:00 Last Updated: 2024-08-07T08:08:57.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29268 - http://secunia.com/advisories/29622 - http://www.vupen.com/english/advisories/2008/0763 - http://secunia.com/advisories/29318 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html - http://secunia.com/advisories/29209 - htt
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html - http://secunia.com/advisories/29209 - http://www.debian.org/security/2008/dsa-1513 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00162.html - http://www.securityfocus.com/bid/28100 - http://www.securityfocus.com/archive/1/489465/100/0/threaded - http://secunia.com/advisories/29275 - http://security.gentoo.org/glsa/glsa-200803-10.xml - https://issues.rpath.com/browse/RPL-2326 - https://bugs.gentoo.org/show_bug.cgi?id=211956 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00180.html - http://trac.lighttpd.net/trac/changeset/2107 - http://secunia.com/advisories/29235
-announce/2008-March/msg00180.html - http://trac.lighttpd.net/trac/changeset/2107 - http://secunia.com/advisories/29235 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41008
CVE ID: CVE-2008-1112 State: REJECTED Published: 2008-03-03T18:00:00Z Last Updated: 2024-09-17T02:57:41.394Z Description: No description available.
CVE ID: CVE-2008-1113 State: PUBLISHED Published: 2008-03-03T18:00:00Z Last Updated: 2024-09-16T17:29:07.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://blogs.zdnet.com/security/?p=896 - http://seclists.org/fulldisclosure/2008/Feb/0449.html - http://securitytracker.com/id?1019494 - http://seclists.org/fulldisclosure/2008/Feb/0402.html - http://www.securi
html - http://securitytracker.com/id?1019494 - http://seclists.org/fulldisclosure/2008/Feb/0402.html - http://www.securityfocus.com/bid/27935 - http://blogs.zdnet.com/security/?p=901 - http://secunia.com/advisories/29082
CVE ID: CVE-2008-1114 State: PUBLISHED Published: 2008-03-03T18:00:00Z Last Updated: 2024-09-17T04:08:42.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://blogs.zdnet.com/security/?p=896 - http://www.vocera.com/downloads/InfrastructureGuide.pdf - http://seclists.org/fulldisclosure/2008/Feb/0402.html - http://www.securityfocus.com/bid/27935 - http://blogs.
ide.pdf - http://seclists.org/fulldisclosure/2008/Feb/0402.html - http://www.securityfocus.com/bid/27935 - http://blogs.zdnet.com/security/?p=901
CVE ID: CVE-2008-1115 State: PUBLISHED Published: 2008-03-03T18:00:00 Last Updated: 2024-08-07T08:08:57.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Solaris 8 directory functions allows local users to cause a denial of service (panic) via an unspecified sequence of system calls or commands. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5485 - http://secunia.com/advisories/29217 - http://www.vupen.com/english/advisories/2008/0644/references - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200163-1 - http://www.securityfocus.com
/2008/0644/references - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200163-1 - http://www.securityfocus.com/bid/28069
CVE ID: CVE-2008-1116 State: PUBLISHED Published: 2008-03-03T18:00:00 Last Updated: 2024-08-07T08:08:57.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40838 - http://www.vupen.com/english/
securityfocus.com/bid/27997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40838 - http://www.vupen.com/english/advisories/2008/0683/references - http://secunia.com/advisories/29109 - https://www.exploit-db.com/exploits/5188
CVE ID: CVE-2008-1117 State: PUBLISHED Published: 2008-03-14T20:00:00 Last Updated: 2024-08-07T08:08:57.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \ (backslash) character followed by ../ (dot dot slash) sequences. NOTE: this can be leveraged for code execution by writing to a Startup folder. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4220. Additional Analyst Notes: - CVE P
er. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4220. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489360/100/0/threaded - https://www.exploit-db.com/exploits/4455 - http://secunia.com/advisories/29316 - http://securityreason.com/securityalert/3741 - http://www.coresecurity.com/?action=item&id=2166 - http://www.securityfocus.com/archive/1/489382/100/0/threaded - http://aluigi.org/poc/timbuto.zip - http://www.securityfocus.com/bid/28081 - http://aluigi.altervista.org/adv/timbuto-adv.txt - http://www.securityfocus.com/archive/1/489414/100/0/threaded - http://www.vupen.com/english/advisories/2008/0840 -
xt - http://www.securityfocus.com/archive/1/489414/100/0/threaded - http://www.vupen.com/english/advisories/2008/0840 - https://www.exploit-db.com/exploits/5238