Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4076 State: PUBLISHED Published: 2008-09-15T15:00:00 Last Updated: 2024-08-07T10:00:42.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics BBS 1.11 and earlier, (3) Simple BBS 1.86 and earlier, and (4) Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-0917. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31835 - http://download.torworld.com/bug/20080905.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45043 - h
/31835 - http://download.torworld.com/bug/20080905.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45043 - http://www.securityfocus.com/bid/31105 - http://jvn.jp/en/jp/JVN18616622/index.html
CVE ID: CVE-2008-4077 State: PUBLISHED Published: 2008-09-15T15:00:00 Last Updated: 2024-08-07T10:00:42.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large Content-Length. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31843 - http://www.securityfocus.com/bid/31109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45033 - http://www.securityfocus.com/archive/1/496181/100/0/threaded - http://www.ledgersmb.org/node/70 - http://se
ties/45033 - http://www.securityfocus.com/archive/1/496181/100/0/threaded - http://www.ledgersmb.org/node/70 - http://securityreason.com/securityalert/4250
CVE ID: CVE-2008-4078 State: PUBLISHED Published: 2008-09-15T15:00:00 Last Updated: 2024-08-07T10:00:42.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the AR/AP transaction report in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=175965&release_id=624978 - http://secunia.com/advisories/31843 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45034 - http://www.securityfocus.com/bid/31109 - http://www.securi
https://exchange.xforce.ibmcloud.com/vulnerabilities/45034 - http://www.securityfocus.com/bid/31109 - http://www.securityfocus.com/archive/1/496181/100/0/threaded - http://securityreason.com/securityalert/4250
CVE ID: CVE-2008-4079 State: PUBLISHED Published: 2008-09-15T15:00:00 Last Updated: 2024-08-07T10:00:42.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Movable Type (MT) 4.x through 4.20, and 3.36 and earlier; Movable Type Enterprise 4.x through 4.20, and 1.54 and earlier; and Movable Type Community Solution allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN30385652/index.html - http://www.securityfocus.com/bid/31073 - http://www.sixapart.jp/movabletype/news/2008/08/07-1445.html - http://www.sixapart.jp/movab
ecurityfocus.com/bid/31073 - http://www.sixapart.jp/movabletype/news/2008/08/07-1445.html - http://www.sixapart.jp/movabletype/news/2008/08/28-1500.html
CVE ID: CVE-2008-4080 State: PUBLISHED Published: 2008-09-15T15:00:00 Last Updated: 2024-08-07T10:00:42.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the (1) username parameter to admin/library/authenticate.php and the (2) download parameter to downloadmp3.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44989 - http://securityreason.com/securityalert/4252 - http://secunia.com/advisories/31818
.ibmcloud.com/vulnerabilities/44989 - http://securityreason.com/securityalert/4252 - http://secunia.com/advisories/31818 - https://www.exploit-db.com/exploits/6402 - http://www.securityfocus.com/bid/31079 - http://www.securityfocus.com/archive/1/496142/100/0/threaded - http://osvdb.org/47994 - https://www.youtube.com/watch?v=mm4bfsZdLmA&t=1h53m
CVE ID: CVE-2008-4081 State: PUBLISHED Published: 2008-09-15T15:00:00 Last Updated: 2024-08-07T10:00:42.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43903 - https://www.exploit-db.com/exploits/6406 - http://www.securityfocus.com/bid/30286 - http://securityreason.com/securityalert/4258
CVE ID: CVE-2008-4082 State: PUBLISHED Published: 2008-09-15T16:00:00 Last Updated: 2024-08-07T10:00:42.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via an arbitrary field in a search action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30944 - https://www.exploit-db.com/exploits/6332 - http://securityreason.com/securityalert/4251 - http://secunia.com/advisories/31661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44789
CVE ID: CVE-2008-4083 State: PUBLISHED Published: 2008-09-15T16:00:00 Last Updated: 2024-08-07T10:00:42.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30944 - https://www.exploit-db.com/exploits/6332 - http://securityreason.com/securityalert/4251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
com/exploits/6332 - http://securityreason.com/securityalert/4251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44790 - http://secunia.com/advisories/31661
CVE ID: CVE-2008-4084 State: PUBLISHED Published: 2008-09-15T16:00:00 Last Updated: 2024-08-07T10:00:42.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote attackers to execute arbitrary SQL commands via the go parameter in a browse action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44799 - http://secunia.com/advisories/31682 - http://www.securityfocus.com/bid/30943 - http://securityreason.com/securityalert/4254
CVE ID: CVE-2008-4085 State: PUBLISHED Published: 2008-09-15T16:00:00 Last Updated: 2024-08-07T10:00:42.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) head.$$, (3) awk.$$, and (4) ps.$$ temporary files in /tmp/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44786 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/plait - http://secunia.com/advisories/31617 - http://bugs.debian.org/cgi-bi
tp://dev.gentoo.org/~rbu/security/debiantemp/plait - http://secunia.com/advisories/31617 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496381 - http://www.securityfocus.com/bid/30928 - http://sourceforge.net/project/shownotes.php?group_id=147849&release_id=623154
CVE ID: CVE-2008-4086 State: PUBLISHED Published: 2008-09-15T16:00:00 Last Updated: 2024-08-07T10:00:42.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44801 - http://securityreason.com/securityalert/4253 - http://www.vupen.com/english/advisories/2008/2470 - http://www.securityfocus.com/bid/30960 - https://www.exploit-db.com/exploits/6349
CVE ID: CVE-2008-4087 State: PUBLISHED Published: 2008-09-15T16:00:00 Last Updated: 2024-08-07T10:00:42.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Acoustica Beatcraft 1.02 Build 19 allows user-assisted attackers to cause a denial of service or execute arbitrary code via a Beatcraft Project (aka bcproj) file with a long string in a certain instruments title field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30938 - http://secunia.com/advisories/31660 - https://www.exploit-db.com/exploits/6333 - http://securityreason.com/securityalert/4259 - https://exchange.xforce.ibmcloud.com/vulnerabili
t-db.com/exploits/6333 - http://securityreason.com/securityalert/4259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44794
CVE ID: CVE-2008-4088 State: PUBLISHED Published: 2008-09-15T16:00:00 Last Updated: 2024-08-07T10:00:42.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitrary SQL commands via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45084 - http://www.securityfocus.com/bid/31112 - http://securityreason.com/securityalert/4255 - https://www.exploit-db.com/exploits/6338 - http://www.securityfocus.com/bid/31114 - http://www.securityfocus.com/bid/30942
CVE ID: CVE-2008-4089 State: PUBLISHED Published: 2008-09-15T16:00:00 Last Updated: 2024-08-07T10:00:42.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31112 - https://www.exploit-db.com/exploits/6338 - http://www.securityfocus.com/bid/31114 - http://www.securityfocus.com/bid/30942
CVE ID: CVE-2008-4090 State: PUBLISHED Published: 2008-09-15T16:00:00 Last Updated: 2024-08-07T10:00:42.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an addtocart action, a different vector than CVE-2007-2672. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44800 - http://secunia.com/advisories/31699 - http://www.securityfocus.com/bid/30961 - https://www.exploit-db.com/exploits/6348 - http://securityreason.com/securityalert/4260
CVE ID: CVE-2008-4091 State: PUBLISHED Published: 2008-09-15T16:00:00 Last Updated: 2024-08-07T10:00:42.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30941 - http://secunia.com/advisories/31629 - https://www.exploit-db.com/exploits/6335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45185
CVE ID: CVE-2008-4092 State: PUBLISHED Published: 2008-09-15T16:00:00 Last Updated: 2024-08-07T10:00:42.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitrary SQL commands via the artid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4261 - http://www.vupen.com/english/advisories/2008/2469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44798 - https://www.exploit-db.com/exploits/6347 - http://websecurity.com.ua/2398/ - http://www.securityfocus.com/bid/30959
CVE ID: CVE-2008-4093 State: PUBLISHED Published: 2008-09-15T16:00:00 Last Updated: 2024-08-07T10:00:42.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30868 - http://securityreason.com/securityalert/4256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44758 - https://www.exploit-db.com/exploits/6321
CVE ID: CVE-2008-4094 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:00:42.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) :limit and (2) :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer. Additional Analyst Notes: - CVE Program Container: References: - http://gist.github.com/8946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45109 - http://www.openwall.com/lists/oss-security/2008/09/13/2 - http://rails.lighthouseapp.com/projects/8994/tickets/964 -
- http://www.openwall.com/lists/oss-security/2008/09/13/2 - http://rails.lighthouseapp.com/projects/8994/tickets/964 - http://rails.lighthouseapp.com/projects/8994/tickets/288 - http://secunia.com/advisories/31875 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html - http://secunia.com/advisories/31910 - http://blog.innerewut.de/2008/6/16/why-you-should-upgrade-to-rails-2-1 - http://www.securitytracker.com/id?1020871 - http://www.rorsecurity.info/2008/09/08/sql-injection-issue-in-limit-and-offset-parameter/ - http://www.openwall.com/lists/oss-security/2008/09/16/1 - http://www.securityfocus.com/bid/31176 - http://secunia.com/advisories/31909 - http://www.vupen.com/e
ity/2008/09/16/1 - http://www.securityfocus.com/bid/31176 - http://secunia.com/advisories/31909 - http://www.vupen.com/english/advisories/2008/2562
CVE ID: CVE-2008-4095 State: PUBLISHED Published: 2008-09-16T10:00:00 Last Updated: 2024-08-07T10:00:42.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Importer in Flip4Mac WMV before 2.2.1 have unknown impact and attack vectors, different vulnerabilities than CVE-2007-6713. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45187 - http://www.flip4mac.com/downloads/wmv_components/flip4mac-wmv-release-notes.pdf - http://www.securityfocus.com/bid/31505 - http://secunia.com/advisories/31925 - http://www.securitytracker.com/id?1020956 - http://www.vupen.com/english/advi
05 - http://secunia.com/advisories/31925 - http://www.securitytracker.com/id?1020956 - http://www.vupen.com/english/advisories/2008/2710
CVE ID: CVE-2008-4096 State: PUBLISHED Published: 2008-09-17T18:06:00 Last Updated: 2024-08-07T10:00:42.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:202 - http://secunia.com/advisories/31884 - http://secunia.com/advisories/31918 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000
ries/31884 - http://secunia.com/advisories/31918 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01290.html - http://www.vupen.com/english/advisories/2008/2585 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01137.html - http://osvdb.org/48196 - https://bugzilla.redhat.com/show_bug.cgi?id=462430 - http://www.openwall.com/lists/oss-security/2008/09/15/2 - http://typo3.org/teams/security/security-bulletins/typo3-20080916-1/ - http://security.gentoo.org/glsa/glsa-200903-32.xml - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01228.html -
too.org/glsa/glsa-200903-32.xml - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01228.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01155.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45157 - http://www.debian.org/security/2008/dsa-1641 - http://secunia.com/advisories/33822 - http://www.securityfocus.com/bid/31188 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-7 - http://secunia.com/advisories/32034 - http://www.nabble.com/phpMyAdmin-2.11.9.1-is-released-td19497113.html - http://fd.the-wildcat.de/pma_e36a091q11.php - http://www.openwall.com/lists/oss-security/2008/09/16/2 - http://www.vupen.com/
//fd.the-wildcat.de/pma_e36a091q11.php - http://www.openwall.com/lists/oss-security/2008/09/16/2 - http://www.vupen.com/english/advisories/2008/2619
CVE ID: CVE-2008-4097 State: PUBLISHED Published: 2008-09-17T18:06:00 Last Updated: 2024-08-07T10:00:42.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-2079. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=
2079. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:094 - http://www.ubuntu.com/usn/USN-671-1 - http://secunia.com/advisories/32769 - http://www.openwall.com/lists/oss-security/2008/09/09/20 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45648 - http://www.openwall.com/lists/oss-security/2008/09/16/3 - http://secunia.com/advisories/32759 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25
CVE ID: CVE-2008-4098 State: PUBLISHED Published: 2008-09-17T18:06:00 Last Updated: 2024-08-07T10:00:42.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4097. Additional Analyst Notes: - CVE Program Contain
his vulnerability exists because of an incomplete fix for CVE-2008-4097. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:094 - http://www.ubuntu.com/usn/USN-1397-1 - http://www.redhat.com/support/errata/RHSA-2009-1067.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25 - http://www.ubuntu.com/usn/USN-671-1 - http://secunia.com/advisories/38517 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10591 - http://ubuntu.com/usn/usn-897-1 - http://secunia.com/advisories/32769 - http://www.openwall.com/lists/oss-security/2008/09/09/20 - http://www.openwall.com/lists/oss-s
ia.com/advisories/32769 - http://www.openwall.com/lists/oss-security/2008/09/09/20 - http://www.openwall.com/lists/oss-security/2008/09/16/3 - http://secunia.com/advisories/32759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45649 - http://www.debian.org/security/2008/dsa-1662 - http://www.redhat.com/support/errata/RHSA-2010-0110.html - http://bugs.mysql.com/bug.php?id=32167 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://secunia.com/advisories/32578
CVE ID: CVE-2008-4099 State: PUBLISHED Published: 2008-09-18T17:47:00Z Last Updated: 2024-08-07T10:00:42.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. Additional Analyst Notes: - CVE Program Container: References: - http://packages.debian.org/changelogs/pool/main/p/python-dns/python-dns_2.3.3-1/changelog - http://www.openwall.com/lists/oss-security/2008/09/11/1 - http://www.openwall.com/lists/oss-security/2008/09/16/4 - http://bugs.debia
enwall.com/lists/oss-security/2008/09/11/1 - http://www.openwall.com/lists/oss-security/2008/09/16/4 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490217
CVE ID: CVE-2008-4100 State: PUBLISHED Published: 2008-09-18T17:47:00 Last Updated: 2024-08-07T10:00:42.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: the vendor reports that this is intended behavior and is compatible with the product's intended role in a trusted environment. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492698 - http://www.openwall.com/lists/oss-security/2008/09/11/1 - https:
tp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492698 - http://www.openwall.com/lists/oss-security/2008/09/11/1 - https://www.exploit-db.com/exploits/6197 - http://www.openwall.com/lists/oss-security/2008/09/16/4
CVE ID: CVE-2008-4101 State: PUBLISHED Published: 2008-09-18T17:47:00 Last Updated: 2024-08-07T10:00:42.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) "Ctrl-]" (control close-square-bracket) or (3) "g]" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/s