Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3407 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpLinkat 0.1 allows remote attackers to bypass authentication and access unspecified pages under admin/ by sending a login=right cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6140 - http://www.securityfocus.com/bid/30386 - http://securityreason.com/securityalert/4087 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44062
CVE ID: CVE-2008-3408 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a crafted m3u file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31294 - http://www.exploit-db.com/exploits/15895 - http://www.securityfocus.com/bid/30418 - http://securityreason.com/securityalert/4088 - https://www.exploit-db.com/exploits/6157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44103 - http://www.vupen.com/english/
xploit-db.com/exploits/6157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44103 - http://www.vupen.com/english/advisories/2008/2264/references
CVE ID: CVE-2008-3409 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a UDP packet containing a large value in a certain size field, followed by a data string of that size, aka attack 1 in ut3mendo.c. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/ut3mendo-adv.txt - http://aluigi.org/poc/ut3mendo.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/44105
g/adv/ut3mendo-adv.txt - http://aluigi.org/poc/ut3mendo.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/44105 - http://www.vupen.com/english/advisories/2008/2260/references - http://www.securityfocus.com/archive/1/494929/100/0/threaded - http://www.securityfocus.com/bid/30430 - http://secunia.com/advisories/31265
CVE ID: CVE-2008-3410 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a UDP packet in which the value of a certain size field is greater than the total packet length, aka attack 2 in ut3mendo.c. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/ut3mendo-adv.txt - http://aluigi.org/poc/ut3mendo.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/44104 - http://www.vupen.com/english/advisories/2008/2260/
do.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/44104 - http://www.vupen.com/english/advisories/2008/2260/references - http://www.securityfocus.com/archive/1/494929/100/0/threaded - http://www.securityfocus.com/bid/30430 - http://secunia.com/advisories/31265
CVE ID: CVE-2008-3411 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Axesstel AXW-D800 modem with D2_ETH_109_01_VEBR Jun-14-2006 software does not require authentication for (1) etc/config/System.html, (2) etc/config/Network.html, (3) etc/config/Security.html, (4) cgi-bin/sysconf.cgi, and (5) cgi-bin/route.cgi, which allows remote attackers to change the modem's configuration via direct requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/494815/100/0/threaded - http://securityreason.com/securityalert/4089 - https://exchange.xforc
ecurityfocus.com/archive/1/494815/100/0/threaded - http://securityreason.com/securityalert/4089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44044 - http://secunia.com/advisories/31285 - http://www.securityfocus.com/bid/30404
CVE ID: CVE-2008-3412 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Comsenz EPShop (aka ECShop) before 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a (1) pro_show or (2) disppro action to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4090 - http://www.securityfocus.com/bid/30387 - https://www.exploit-db.com/exploits/6139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44025
CVE ID: CVE-2008-3413 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in Greatclone GC Auction Platinum allows remote attackers to execute arbitrary SQL commands via the cate_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2216/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/44024 - http://secunia.com/advisories/31241 - https://www.exploit-db.com/exploits/6144 - http://www.securityfocus.com/bid/30389 - http://securityreason.com/securityalert/4091
CVE ID: CVE-2008-3414 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the art parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44030 - https://www.exploit-db.com/exploits/6145 - http://www.securityfocus.com/bid/30391 - http://secunia.com/advisories/31240 - http://securityreason.com/securityalert/4092 - http://www.vupen.com/english/advisories/2008/2215/references
CVE ID: CVE-2008-3415 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bit parameter, as demonstrated by an upload to avatar/ of a .jpg file containing PHP sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31243 - http://www.cmscout.co.za/index.php?page=news&id=29 - http://securityreason.com/securityalert/4093 - https://exchange.xforce.i
//www.cmscout.co.za/index.php?page=news&id=29 - http://securityreason.com/securityalert/4093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44017 - http://www.vupen.com/english/advisories/2008/2218/references - http://www.securityfocus.com/bid/30385 - https://www.exploit-db.com/exploits/6142
CVE ID: CVE-2008-3416 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/members.php in IceBB before 1.0-rc9.3 allows remote attackers to execute arbitrary SQL commands via the username parameter in a members action to index.php, related to an incorrect protection mechanism in the clean_string function in includes/functions.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30381 - https://www.exploit-db.com/exploits/6137 - http://secunia.com/advisories/31248 - http://securityreason.com/securityalert/4094 - h
ww.exploit-db.com/exploits/6137 - http://secunia.com/advisories/31248 - http://securityreason.com/securityalert/4094 - http://forums.xaos-ia.com/?topic=760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44028
CVE ID: CVE-2008-3417 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the r parameter, a different vector than CVE-2006-6115 and CVE-2007-2561. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6135 - http://secunia.com/advisories/31250 - http://www.securityfocus.com/bid/30380 - http://securityreason.com/securityalert/4095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44022
CVE ID: CVE-2008-3418 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in browse.php in TriO 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4077 - http://secunia.com/advisories/31244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44033 - https://www.exploit-db.com/exploits/6141
CVE ID: CVE-2008-3419 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ugroups.php in Youtuber Clone allows remote attackers to execute arbitrary SQL commands via the UID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44026 - http://secunia.com/advisories/31238 - http://www.vupen.com/english/advisories/2008/2212/references - https://www.exploit-db.com/exploits/6147
CVE ID: CVE-2008-3420 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to browse.php or (2) the s parameter in an exhibitions action to detail.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44019 - https://www.exploit-db.com/exploits/6138 - http://securityreason.com/securityalert/4097 - http://secunia.com/advisories/31247 - http://www.securityfocus.com/bid/30
http://securityreason.com/securityalert/4097 - http://secunia.com/advisories/31247 - http://www.securityfocus.com/bid/30382
CVE ID: CVE-2008-3421 State: PUBLISHED Published: 2008-07-31T17:00:00 Last Updated: 2024-08-07T09:37:26.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authentication of student users for requests that change configuration and enrollments via unspecified input to (1) update_module.jsp, (2) enroll_course.pl, and (3) unenroll.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020559 - http://ceaseless.ws/bb-csrf/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/43986 - http://secunia.co
?1020559 - http://ceaseless.ws/bb-csrf/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/43986 - http://secunia.com/advisories/31177
CVE ID: CVE-2008-3422 State: PUBLISHED Published: 2008-07-31T21:00:00 Last Updated: 2024-08-07T09:37:26.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect (RenderChildren). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36494 - http://secunia.com
dditional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36494 - http://secunia.com/advisories/31982 - https://bugzilla.novell.com/show_bug.cgi?id=413534 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://secunia.com/advisories/31338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44229 - http://lists.ximian.com/pipermail/mono-devel-list/2008-July/028633.html - http://www.securityfocus.com/bid/30471 - https://usn.ubuntu.com/826-1/
CVE ID: CVE-2008-3423 State: PUBLISHED Published: 2008-08-04T01:00:00 Last Updated: 2024-08-07T09:37:26.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 5.1 through 6.1.0.0 allows remote attackers to bypass authentication and obtain administrative access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44264 - http://www.securityfocus.com/bid/30500 - http://www.vupen.com/english/advisories/2008/2405 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK67104 - http://secunia.com/advisories/31443
CVE ID: CVE-2008-3424 State: PUBLISHED Published: 2008-07-31T22:00:00 Last Updated: 2024-08-07T09:37:26.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31423 - http://www.redhat.com/support/errata/RHSA-2008-0816.html - http://secunia.com/advisories/31459 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00252.htm
- http://secunia.com/advisories/31459 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00252.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44063 - http://www.securitytracker.com/id?1020646 - http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#sec:New-7-0-4 - http://www.securityfocus.com/bid/30440 - http://secunia.com/advisories/31284 - http://www.redhat.com/support/errata/RHSA-2008-0814.html
CVE ID: CVE-2008-3425 State: PUBLISHED Published: 2008-07-31T22:00:00 Last Updated: 2024-08-07T09:37:26.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1 - http://secunia.com/advisories/31301 - http://www.securitytracker.com/id?1020608 - http://www.vupen.com/english/advisories/2008/2261/references - https://excha
http://www.securitytracker.com/id?1020608 - http://www.vupen.com/english/advisories/2008/2261/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/44114 - http://www.securityfocus.com/bid/30451
CVE ID: CVE-2008-3426 State: PUBLISHED Published: 2008-07-31T22:00:00 Last Updated: 2024-08-07T09:37:26.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Solaris Platform Information and Control Library daemon (picld) in Sun Solaris 8 through 10, and OpenSolaris builds snv_01 through snv_95, allows local users to cause a denial of service via unknown vectors that prevent operation of utilities such as prtdiag, prtpicl, and prtfru. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30450 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239728-1 - http://www.securitytracker.com/id?1020609 -
30450 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239728-1 - http://www.securitytracker.com/id?1020609 - http://www.vupen.com/english/advisories/2008/2262/references - http://secunia.com/advisories/31501 - http://support.avaya.com/elmodocs2/security/ASA-2008-351.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/44117 - http://secunia.com/advisories/31303
CVE ID: CVE-2008-3427 State: REJECTED Published: 2008-07-31T22:00:00 Last Updated: 2008-08-22T09:00:00 Description: No description available.
CVE ID: CVE-2008-3428 State: PUBLISHED Published: 2008-07-31T22:00:00 Last Updated: 2024-08-07T09:37:26.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the session_id parameter to match the victim's nickid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44116 - http://www.securityfocus.com/bid/30462 - http://www.phpfreechat.net/changelog/1.2
CVE ID: CVE-2008-3429 State: PUBLISHED Published: 2008-07-31T22:00:00 Last Updated: 2024-08-07T09:37:26.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44167 - http://www.httrack.com/history.txt - http://www.vupen.com/english/advisories/2008/2221/references - http://www.debian.org/security/2008/dsa-1626 - http://www.venustech.com.cn/NewsInfo/124/2032.Html - http://secunia.com/
http://www.debian.org/security/2008/dsa-1626 - http://www.venustech.com.cn/NewsInfo/124/2032.Html - http://secunia.com/advisories/31323/ - http://www.securityfocus.com/bid/30425 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00711.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00707.html - http://secunia.com/advisories/31866 - http://secunia.com/advisories/31380
CVE ID: CVE-2008-3430 State: PUBLISHED Published: 2008-07-31T22:00:00 Last Updated: 2024-08-07T09:37:27.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0.907.1 in Eyeball MessengerSDK, as used in products such as SiOL Komunikator 1.3, allows remote attackers to execute arbitrary code via a large argument supplied to the BGColor method. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44111 - http://www.securityfocus.com/bid/30424 - http://packetstormsecu
s://exchange.xforce.ibmcloud.com/vulnerabilities/44111 - http://www.securityfocus.com/bid/30424 - http://packetstormsecurity.org/0807-exploits/siol-overflow.txt
CVE ID: CVE-2008-3431 State: PUBLISHED Published: 2008-08-05T19:20:00.000Z Last Updated: 2025-10-22T00:05:55.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/30481 - http://securityreason.com/securityalert/41
CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/30481 - http://securityreason.com/securityalert/4107 - https://www.exploit-db.com/exploits/6218 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-240095-1 - http://secunia.com/advisories/31361 - http://www.coresecurity.com/content/virtualbox-privilege-escalation-vulnerability - https://exchange.xforce.ibmcloud.com/vulnerabilities/44202 - http://www.vupen.com/english/advisories/2008/2293 - http://virtualbox.org/wiki/Changelog - http://securitytracker.com/id?1020625 - http://www.securityfocus.com/archive/1/495095/100/0/threaded
CVE ID: CVE-2008-3432 State: PUBLISHED Published: 2008-10-10T10:00:00 Last Updated: 2024-08-07T09:37:26.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2009-0004.html - http://www.openwall.com/lists/oss-security/2008/07/15/4 - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/32858 - http://secunia.com/advisories/3
07/15/4 - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/32858 - http://secunia.com/advisories/33410 - http://www.openwall.com/lists/oss-security/2008/08/01/1 - ftp://ftp.vim.org/pub/vim/patches/6.2.429 - http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm - http://www.vupen.com/english/advisories/2009/0904 - http://www.vupen.com/english/advisories/2009/0033 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11203 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5987 - http://www.securityfocus.com/archive/1/502322/100/0/threaded - http://secunia.com/advisories/32222 - https://exchan
87 - http://www.securityfocus.com/archive/1/502322/100/0/threaded - http://secunia.com/advisories/32222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44722 - http://www.securityfocus.com/bid/30648 - http://www.vupen.com/english/advisories/2008/2780 - ftp://ftp.vim.org/pub/vim/patches/6.3/6.3.059 - https://bugzilla.redhat.com/show_bug.cgi?id=455455 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://www.redhat.com/support/errata/RHSA-2008-0617.html
CVE ID: CVE-2008-3433 State: PUBLISHED Published: 2008-08-01T14:00:00Z Last Updated: 2024-09-16T16:13:40.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpeedBit Download Accelerator Plus (DAP) before 8.6.3.9 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf - http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz - http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html
CVE ID: CVE-2008-3434 State: PUBLISHED Published: 2008-08-01T14:00:00 Last Updated: 2024-08-07T09:37:27.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5030 - http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf - http://lists.apple.com/archives/Security-announce/2011/Nov/msg00003.html - https://oval.cisecurity.org/repository/searc