Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2266 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:58:02.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200808-11.xml - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480972 - http://secunia.com/advisories/31420 - http://secunia.com/advisories/30171 - http://www
gi-bin/bugreport.cgi?bug=480972 - http://secunia.com/advisories/31420 - http://secunia.com/advisories/30171 - http://www.openwall.com/lists/oss-security/2008/05/14/10 - http://www.securityfocus.com/bid/29211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42407 - http://www.openwall.com/lists/oss-security/2008/05/30/1
CVE ID: CVE-2008-2267 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:58:02.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in (1) .jsp, (2) .php3, (3) .cgi, (4) .dhtml, (5) .phtml, (6) .php5, or (7) .jar, then accessing it via a direct request to the file in modules/FileManager/postlet/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42371 - http://www.securityfocus
E Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42371 - http://www.securityfocus.com/bid/29170 - http://secunia.com/advisories/30208 - https://www.exploit-db.com/exploits/5600 - http://www.attrition.org/pipermail/vim/2008-May/001978.html - http://blog.cmsmadesimple.org/2008/05/12/announcing-cms-made-simple-125/
CVE ID: CVE-2008-2268 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:58:01.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in interface/redirect.htm.php in Mjguest 6.7 GT Rev.01 allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter in a redirect action to mjguest.php. NOTE: this is user-assisted because there is a delay and a notification before redirection occurs. Additional Analyst Notes: - CVE Program Container: References: - http://www.mdsjack.bo.it/public/phpBB3/viewtopic.php?t=2049 - http://www.securityfocus.com/archive/1/492384/
ferences: - http://www.mdsjack.bo.it/public/phpBB3/viewtopic.php?t=2049 - http://www.securityfocus.com/archive/1/492384/100/0/threaded - http://securityreason.com/securityalert/3872 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42130 - http://www.securityfocus.com/archive/1/491523/100/0/threaded
CVE ID: CVE-2008-2269 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:58:00.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: AustinSmoke GasTracker (AS-GasTracker) 1.0.0 allows remote attackers to bypass authentication and gain privileges by setting the gastracker_admin cookie to TRUE. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30266 - http://www.securityfocus.com/bid/29224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42435 - https://www.exploit-db.com/exploits/5615
CVE ID: CVE-2008-2270 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:58:01.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to execute arbitrary PHP code via a URL in the (1) main_page_directory and (2) page_to_include parameters in template\index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29234 - https://www.exploit-db.com/exploits/5621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42446
CVE ID: CVE-2008-2271 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:58:01.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Site Documentation Drupal module 5.x before 5.x-1.8 and 6.x before 6.x-1.1 allows remote authenticated users to gain privileges of other users by leveraging the "access content" permission to list tables and obtain session IDs from the database. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29242 - http://drupal.org/node/258547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42453 - http://www.vupen.com/english/advisories/2008/1541/references - http://secunia.com/a
ibmcloud.com/vulnerabilities/42453 - http://www.vupen.com/english/advisories/2008/1541/references - http://secunia.com/advisories/30257
CVE ID: CVE-2008-2272 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:58:00.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.5.x, 2.5.6.x, 3.1.1.x, 3.2.0.x, and 3.3.1.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/support/alerts/aid-051408.asc - http://www.securitytracker.com/id?1020033 - http://www.securityfocus.com/archive/1/492113/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabili
020033 - http://www.securityfocus.com/archive/1/492113/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42433 - http://www.securityfocus.com/bid/29240 - http://secunia.com/advisories/30262
CVE ID: CVE-2008-2273 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:58:00.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the TACACS authentication component in Aruba Mobility Controller 3.1.x, 3.2.x, and 3.3.x allows remote authenticated users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42434 - http://www.arubanetworks.com/support/alerts/aid-051408.asc - http://www.securityfocus.com/archive/1/492113/100/0/threaded - http://www.securityfocus.com/bid/29240 - http:
1408.asc - http://www.securityfocus.com/archive/1/492113/100/0/threaded - http://www.securityfocus.com/bid/29240 - http://secunia.com/advisories/30262
CVE ID: CVE-2008-2274 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:58:00.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30275 - http://www.securityfocus.com/bid/29239 - http://typo3.org/teams/security/security-bulletins/typo3-20080515-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/42443
CVE ID: CVE-2008-2275 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:58:00.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to execute arbitrary code and delete arbitrary files via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30275 - http://www.securityfocus.com/bid/29239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42445 - http://typo3.org/teams/security/security-bulletins/typo3-20080515-1/
CVE ID: CVE-2008-2276 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:58:00.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in manage_user_create.php in Mantis 1.1.1 allows remote attackers to create new administrative users via a crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00813.html - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00801.html - http://secunia.com/advisories/31171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42447 - http://sourceforge.net/project/show
.com/advisories/31171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42447 - http://sourceforge.net/project/shownotes.php?group_id=14963&release_id=595025 - http://secunia.com/advisories/30270 - http://marc.info/?l=bugtraq&m=121130774617956&w=4 - http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml - https://www.exploit-db.com/exploits/5657 - http://secunia.com/advisories/31972 - http://www.vupen.com/english/advisories/2008/1598/references - http://www.securityfocus.com/bid/29297
CVE ID: CVE-2008-2277 State: PUBLISHED Published: 2008-05-16T10:00:00 Last Updated: 2024-08-07T08:58:01.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.php in Feedback and Rating Script 1.0 allows remote attackers to execute arbitrary SQL commands via the listingid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42428 - http://www.securityfocus.com/bid/29228 - https://www.exploit-db.com/exploits/5614 - http://secunia.com/advisories/30267
CVE ID: CVE-2008-2278 State: PUBLISHED Published: 2008-05-16T10:00:00 Last Updated: 2024-08-07T08:58:00.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a pdetails action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42424 - http://www.securityfocus.com/bid/29225 - https://www.exploit-db.com/exploits/5613 - http://secunia.com/advisories/30268
CVE ID: CVE-2008-2279 State: PUBLISHED Published: 2008-05-16T10:00:00 Last Updated: 2024-08-07T08:58:01.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Freelance Auction Script 1.0 stores user passwords in plaintext in the tbl_users table, which allows attackers to gain privileges by reading the table. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5613 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42426
CVE ID: CVE-2008-2280 State: PUBLISHED Published: 2008-05-16T10:00:00 Last Updated: 2024-08-07T08:58:01.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/index.php in Script PHP PicEngine 1.0 allows remote attackers to inject arbitrary web script or HTML via the l parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42421 - http://www.securityfocus.com/bid/29214 - http://www.securityfocus.com/bid/29214/exploit
CVE ID: CVE-2008-2281 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:00.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via an HTML document with a link containing JavaScript sequences, which are evaluated by a resource script when a user prints this document. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42416 - http://w
nces: - https://www.exploit-db.com/exploits/5619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42416 - http://www.vupen.com/english/advisories/2008/1529/references - http://secunia.com/advisories/30141 - http://aviv.raffon.net/2008/05/14/InternetExplorerQuotPrintTableOfLinksquotCrossZoneScriptingVulnerability.aspx - http://www.securityfocus.com/bid/29217
CVE ID: CVE-2008-2282 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:02.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in Internet Photoshow and Internet Photoshow Special Edition (SE) allows remote attackers to bypass authentication by setting the login_admin cookie to true. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42422 - http://www.securityfocus.com/bid/29227
CVE ID: CVE-2008-2283 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:01.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the (1) SaveBarCode and (2) SaveEnhWMF methods in (a) the IDAuto.BarCode.1 ActiveX control in IDAutomationLinear6.dll (aka IDAutomation Linear BarCode) 1.6.0.6, (b) the IDAuto.Datamatrix.1 ActiveX control in IDAutomationDMATRIX6.DLL (aka IDautomation Datamatrix Barcode) 1.6.0.6, (c) the IDAuto.PDF417.1 ActiveX control in IDAutomationPDF417_6.dll (aka IDautomation PDF417 Barcode) 1.6.0.6, and (d) the IDAuto.Aztec.1 ActiveX control in IDAutomat
utomationPDF417_6.dll (aka IDautomation PDF417 Barcode) 1.6.0.6, and (d) the IDAuto.Aztec.1 ActiveX control in IDAutomationAZTEC.dll (aka IDautomation Aztec Barcode) 1.7.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42406 - http://www.securityfocus.com/bid/29204 - https://www.exploit-db.com/exploits/5612 - http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1210750552.ff.php&page=last - http://secunia.com/advisories/30246
CVE ID: CVE-2008-2284 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:01.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in fusebox5.php in Fusebox 5.5.1 allows remote attackers to execute arbitrary PHP code via a URL in the FUSEBOX_APPLICATION_PATH parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30178 - http://www.securityfocus.com/bid/29163 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42389
CVE ID: CVE-2008-2285 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:01.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-612-5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42568
CVE ID: CVE-2008-2286 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:01.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42436 - http://www.vupen.com/english/advisories/2008/1542/references - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://www.zerodayini
.com/english/advisories/2008/1542/references - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://www.zerodayinitiative.com/advisories/ZDI-08-024/ - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://www.securityfocus.com/archive/1/492127/100/0/threaded - http://www.symantec.com/avcenter/security/Content/2008.05.14a.html - http://www.exploit-db.com/exploits/29552 - http://www.securityfocus.com/archive/1/492229/100/0/threaded - http://osvdb.org/show/osvdb/45313 - http://www.securitytracker.com/id?1020024 - http://secunia.com/advisories/30261
CVE ID: CVE-2008-2287 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:01.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42442 - http://www.vupen.com/english/advisories/2008/1542/references - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://www.sec
- http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://www.securityfocus.com/bid/29197 - http://www.symantec.com/avcenter/security/Content/2008.05.14a.html - http://www.securitytracker.com/id?1020024 - http://secunia.com/advisories/30261
CVE ID: CVE-2008-2288 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:01.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42441 - http://www.vupen.com/english/advisories/2008/1542/references - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http
eferences - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://www.securityfocus.com/bid/29196 - http://www.symantec.com/avcenter/security/Content/2008.05.14a.html - http://www.securitytracker.com/id?1020024 - http://secunia.com/advisories/30261
CVE ID: CVE-2008-2289 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:02.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a tooltip element in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42440 - http://www.vupen.com/english/advisories/2008/1542/references - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://www.securityfocus.com/bid/29218 - http://www.sym
229965&w=2 - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://www.securityfocus.com/bid/29218 - http://www.symantec.com/avcenter/security/Content/2008.05.14a.html - http://www.securitytracker.com/id?1020024 - http://secunia.com/advisories/30261
CVE ID: CVE-2008-2290 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:00.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1542/references - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://www.securityfocus.com/bid/29194 - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42438 - http://
http://marc.info/?l=bugtraq&m=122167472229965&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42438 - http://www.symantec.com/avcenter/security/Content/2008.05.14a.html - http://www.securitytracker.com/id?1020024 - http://secunia.com/advisories/30261
CVE ID: CVE-2008-2291 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:01.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.insomniasec.com/advisories/ISVA-080516.2.htm - http://www.securityfocus.com/archive/1/492228/100/0/threaded - http://www.vupen.com/english/advisories/2008/1542/references - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http
http://www.vupen.com/english/advisories/2008/1542/references - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://marc.info/?l=bugtraq&m=122167472229965&w=2 - http://www.zerodayinitiative.com/advisories/ZDI-08-025/ - http://www.symantec.com/avcenter/security/Content/2008.05.14a.html - http://www.securityfocus.com/bid/29199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42437 - http://www.securitytracker.com/id?1020024 - http://www.securityfocus.com/archive/1/492128/100/0/threaded - http://secunia.com/advisories/30261
CVE ID: CVE-2008-2292 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T08:58:01.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair (AVP). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020527 - http://secunia.com/advisories/30615 - http://secunia.com/advisories/32664 - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00
isories/30615 - http://secunia.com/advisories/32664 - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00000.html - http://secunia.com/advisories/30187 - http://secunia.com/advisories/31351 - http://support.avaya.com/elmodocs2/security/ASA-2008-282.htm - http://sourceforge.net/tracker/index.php?func=detail&aid=1826174&group_id=12694&atid=112694 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00363.html - http://secunia.com/advisories/31334 - http://www.vupen.com/english/advisories/2008/2141/references - http://secunia.com/advisories/30647 - http://www.securityfocus.com/bid/29212 - http://secunia.com/advisories/33003 - http://www.vupen.com/english/advisor
47 - http://www.securityfocus.com/bid/29212 - http://secunia.com/advisories/33003 - http://www.vupen.com/english/advisories/2008/2361 - http://secunia.com/advisories/31568 - http://secunia.com/advisories/31467 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239785-1 - http://www.debian.org/security/2008/dsa-1663 - http://www.redhat.com/support/errata/RHSA-2008-0529.html - http://www.vmware.com/security/advisories/VMSA-2008-0013.html - http://secunia.com/advisories/31155 - http://security.gentoo.org/glsa/glsa-200808-02.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/42430 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00459.html - https://www.redh