Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6545 State: PUBLISHED Published: 2009-03-30T01:00:00 Last Updated: 2024-08-07T11:34:47.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web Portal 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the langfile parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43555 - http://www.osvdb.org/53093 - http://www.securityfocus.com/bid/28631
CVE ID: CVE-2008-6546 State: PUBLISHED Published: 2009-03-30T01:00:00Z Last Updated: 2024-09-17T02:15:36.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in phpns before 2.1.3 has unknown impact and attack vectors related to "activation permissions." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48867 - http://phpns.alecwh.com/news.php?a=2
CVE ID: CVE-2008-6547 State: PUBLISHED Published: 2009-03-30T01:00:00 Last Updated: 2024-08-07T11:34:47.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: schema.py in FormEncode for Python (python-formencode) 1.0 does not apply the chained_validators feature, which allows attackers to bypass intended access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30282 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00607.html - http://sourceforge.net/tracker/index.php?func=detail&aid=1925164&group_id=91231&atid=596416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43878 -
x.php?func=detail&aid=1925164&group_id=91231&atid=596416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43878 - http://osvdb.org/47082 - http://secunia.com/advisories/31163 - http://sourceforge.net/tracker/download.php?group_id=91231&atid=596416&file_id=271779&aid=1925164 - http://secunia.com/advisories/31081
CVE ID: CVE-2008-6548 State: PUBLISHED Published: 2009-03-30T01:00:00Z Last Updated: 2024-09-16T19:14:37.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48877 - http://moinmo.in/SecurityFixes - http://hg.moinmo.in/moin/1.6/rev/35ff7a9b1546
CVE ID: CVE-2008-6549 State: PUBLISHED Published: 2009-03-30T01:00:00Z Last Updated: 2024-09-17T00:46:49.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service (segmentation fault and crash) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://moinmo.in/SecurityFixes - http://hg.moinmo.in/moin/1.6/rev/35ff7a9b1546 - http://osvdb.org/48876
CVE ID: CVE-2008-6550 State: PUBLISHED Published: 2009-03-30T01:00:00 Last Updated: 2024-08-07T11:34:46.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in glossaire.php in Glossaire 2.0 allows remote attackers to inject arbitrary web script or HTML via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28609 - http://downloads.securityfocus.com/vulnerabilities/exploits/28609.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49772
CVE ID: CVE-2008-6551 State: PUBLISHED Published: 2009-03-30T16:00:00 Last Updated: 2024-08-07T11:34:47.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) an adminlang cookie to admin/ind_ex.php; or the module parameter to (2) 3rdparty/adminpart/add3rdparty.php, (3) polling/adminpart/addpolling.php, (4) contact/adminpart/addcontact.php, (5) brandnews/adminpart/addbrandnews.php, (6) newsletter/adminpart/addnewsletter.php, (7) game/adminpart/addgame.php, (8) tour/adminpart/ad
part/addbrandnews.php, (6) newsletter/adminpart/addnewsletter.php, (7) game/adminpart/addgame.php, (8) tour/adminpart/addtour.php, (9) articles/adminpart/addarticles.php, (10) product/adminpart/addproduct.php, or (11) plain/adminpart/addplain.php in modules/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46457 - http://www.securityfocus.com/bid/32180 - https://www.exploit-db.com/exploits/7031
CVE ID: CVE-2008-6552 State: PUBLISHED Published: 2009-03-30T16:00:00 Last Updated: 2024-08-07T11:34:47.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32616 - http://www.vupen.com/english/advisories/2011/0416 - http://www.redhat.com/support/errata/RHSA-2009-1341.html - http://www.
tp://www.vupen.com/english/advisories/2011/0416 - http://www.redhat.com/support/errata/RHSA-2009-1341.html - http://www.redhat.com/support/errata/RHSA-2011-0264.html - http://secunia.com/advisories/36555 - http://www.securityfocus.com/bid/32179 - http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html - http://www.vupen.com/english/advisories/2011/0417 - http://secunia.com/advisories/32602 - http://secunia.com/advisories/43372 - http://www.ubuntu.com/usn/USN-875-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11404 - http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html - http://osvdb.org/50300
ef%3A11404 - http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html - http://osvdb.org/50300 - http://rhn.redhat.com/errata/RHSA-2009-1337.html - http://www.redhat.com/support/errata/RHSA-2011-0265.html - http://secunia.com/advisories/43367 - http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46412 - http://secunia.com/advisories/36530 - http://osvdb.org/50301 - http://www.redhat.com/support/errata/RHSA-2009-1339.html - http://osvdb.org/50299
CVE ID: CVE-2008-6553 State: PUBLISHED Published: 2009-03-30T16:00:00 Last Updated: 2024-08-07T11:34:47.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: microcms-admin-home.php in Implied by Design Micro CMS (Micro-CMS) 3.5 (aka 0.3.5) does not require authentication as an administrator, which allows remote attackers to (1) create administrative accounts via an add_admin action, (2) remove administrative accounts via a delete_admin action, and (3) modify administrative passwords via a change_password action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32063 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46294 - http
References: - http://www.securityfocus.com/bid/32063 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46294 - https://www.exploit-db.com/exploits/6933 - http://downloads.securityfocus.com/vulnerabilities/exploits/32063.pl
CVE ID: CVE-2008-6554 State: PUBLISHED Published: 2009-03-30T20:00:00 Last Updated: 2024-08-07T11:34:46.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41492 - http://secunia.com/advisories/29551 - http://www.securityfocus.com/archive/1/490100/100/0/threaded - http://core.ifconfig.se/~core/?p=21 - http://www.securityfocus.com/bid/28458 - http://osvdb.org/44267
CVE ID: CVE-2008-6555 State: PUBLISHED Published: 2009-03-30T20:00:00 Last Updated: 2024-08-07T11:34:47.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489961/100/0/threaded - http://www.securityfocus.com/bid/28393 - http://osvdb.org/51181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41400
CVE ID: CVE-2008-6556 State: PUBLISHED Published: 2009-03-30T20:00:00 Last Updated: 2024-08-07T11:34:47.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489961/100/0/threaded - http://www.securityfocus.com/bid/28393 - http://osvdb.org/51181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49820
CVE ID: CVE-2008-6557 State: PUBLISHED Published: 2009-03-30T20:00:00 Last Updated: 2024-08-07T11:34:47.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489961/100/0/threaded - http://www.securityfocus.com/bid/28393 - http://osvdb.org/51181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49821
CVE ID: CVE-2008-6558 State: PUBLISHED Published: 2009-03-30T20:00:00 Last Updated: 2024-08-07T11:34:47.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges by modifying the RELIANT_PATH environment variable to point to a malicious bin/hvenv program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28624 - https://www.exploit-db.com/exploits/5356 - ftp://ftp.sco.com/pub/unixware7/714/security/p534850/p534850.txt - http://secunia.com/advisories/30921 - http://osvdb.org/46706 - http://osvdb
unixware7/714/security/p534850/p534850.txt - http://secunia.com/advisories/30921 - http://osvdb.org/46706 - http://osvdb.org/46707
CVE ID: CVE-2008-6559 State: PUBLISHED Published: 2009-03-30T20:00:00 Last Updated: 2024-08-07T11:34:47.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains .. (dot dot) sequences that point to a directory containing a file whose name includes shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28625 - ftp://ftp.sco.com/pub/unixware7/714/security/p534850/p534850.txt - http://secunia.com/advisories/30921 - http://www.osvdb.org/51234 - https://www.exploit-db.com/exploits/5357
CVE ID: CVE-2008-6560 State: PUBLISHED Published: 2009-03-31T10:00:00 Last Updated: 2024-08-07T11:34:47.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49832 - http://git.fedorahosted.org/git/cluster.git?p=cluster.git%3Ba=
ps://exchange.xforce.ibmcloud.com/vulnerabilities/49832 - http://git.fedorahosted.org/git/cluster.git?p=cluster.git%3Ba=commitdiff%3Bh=67fee9128e54c6c3fc3eae306b5b501f3029c3be - http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html - http://www.ubuntu.com/usn/USN-875-1 - http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html - https://bugzilla.redhat.com/show_bug.cgi?id=468966 - http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html
CVE ID: CVE-2008-6561 State: PUBLISHED Published: 2009-03-31T17:00:00 Last Updated: 2024-08-07T11:34:47.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41102 - http://support.citrix.com/article/CTX116227 - http://www.securitytracker.com/id?1019605
CVE ID: CVE-2008-6562 State: PUBLISHED Published: 2009-03-31T17:00:00 Last Updated: 2024-08-07T11:34:47.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in jax_linklists.php in Jack (tR) Jax LinkLists 1.00 allows remote attackers to inject arbitrary web script or HTML via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28518 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41573
CVE ID: CVE-2008-6563 State: PUBLISHED Published: 2009-03-31T17:00:00 Last Updated: 2024-08-07T11:34:47.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DTD file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41782 - http://osvdb.org/51130 - http://www.securityfocus.com/archive/1/490772/100/0/threaded
CVE ID: CVE-2008-6564 State: PUBLISHED Published: 2009-03-31T17:00:00 Last Updated: 2024-08-07T11:34:47.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41801 - http://osvdb.org/44379 - http://secunia.com/advisories/29747 - http://www.voipshield.com/research-details.php?id=27&s=4&threats_details=
/44379 - http://secunia.com/advisories/29747 - http://www.voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC - http://www.securityfocus.com/bid/28691 - http://www.securitytracker.com/id?1019847
CVE ID: CVE-2008-6565 State: PUBLISHED Published: 2009-03-31T17:00:00 Last Updated: 2024-08-07T11:34:47.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Invision Power Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an IFRAME tag in the signature. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41502 - http://www.securityfocus.com/archive/1/490115/100/0/threaded
CVE ID: CVE-2008-6566 State: PUBLISHED Published: 2009-03-31T17:00:00Z Last Updated: 2024-09-17T01:36:36.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Octopussy before 0.9.5.8 has unknown impact and attack vectors related to a "major security" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48839 - http://freshmeat.net/projects/octopussy/releases/275561
CVE ID: CVE-2008-6567 State: PUBLISHED Published: 2009-03-31T17:00:00Z Last Updated: 2024-09-16T17:43:17.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via (1) the e-mail address, (2) a comment, which is not properly handled during moderation, and (3) the tag parameter to gallery/tags.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28794 - http://osvdb.org/51168 - http://osvdb.org/51167 - http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0398.html - http://osvdb.org/5116
http://osvdb.org/51167 - http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0398.html - http://osvdb.org/51166
CVE ID: CVE-2008-6568 State: PUBLISHED Published: 2009-03-31T17:00:00 Last Updated: 2024-08-07T11:34:47.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Yehe 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the envoyer feature. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42279 - http://www.securityfocus.com/bid/28355
CVE ID: CVE-2008-6569 State: PUBLISHED Published: 2009-03-31T17:00:00 Last Updated: 2024-08-07T11:34:47.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack web sessions via the session ID in the login page. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000034.html - http://www.securityfocus.com/bid/29981 - http://www.lac.co.jp/info/advisory/98.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43427 - http://cybozu.co.jp/products/dl/notice/detail/0021.html - http://jvn.jp/en/jp/JVN18700809/index.html - ht
lities/43427 - http://cybozu.co.jp/products/dl/notice/detail/0021.html - http://jvn.jp/en/jp/JVN18700809/index.html - http://secunia.com/advisories/30871 - http://osvdb.org/46564
CVE ID: CVE-2008-6570 State: PUBLISHED Published: 2009-03-31T17:00:00 Last Updated: 2024-08-07T11:34:47.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed. Additional Analyst Notes: - CVE Program Container: References: - http://cybozu.co.jp/products/dl/notice/detail/0023.html - http://www.lac.co.jp/english/advisory/99_e.html - http://osvdb.org/46565 - http://www.securityfocus.com/bid/29981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43426 - http://jvn.jp/en/jp/JVN52363223/index.html - http
d/29981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43426 - http://jvn.jp/en/jp/JVN52363223/index.html - http://secunia.com/advisories/30871 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000035.html
CVE ID: CVE-2008-6571 State: PUBLISHED Published: 2009-03-31T17:00:00Z Last Updated: 2024-09-17T00:50:45.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HTML via (1) new_images.php, (2) login.php, and unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50225 - http://secunia.com/advisories/29724 - http://osvdb.org/50226 - http://osvdb.org/50227 - http://linpha.cvs.sourceforge.net/linpha/linpha/ChangeLog?view=markup
CVE ID: CVE-2008-6572 State: PUBLISHED Published: 2009-03-31T22:00:00 Last Updated: 2024-08-07T11:34:47.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42597 - http://osvdb.org/45605 - http://secunia.com/advisories/30366 - http://www.securityfocus.com/archive/1/492478/100/0/threaded
CVE ID: CVE-2008-6573 State: PUBLISHED Published: 2009-04-01T22:00:00 Last Updated: 2024-08-07T11:34:47.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services (SES) in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 (1) allow remote attackers to execute arbitrary SQL commands via unspecified vectors related to profiles in the SIP Personal Information Manager (SPIM) in the web interface; and allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to (2) permissions for SPIM profiles in the web interface and (3) a crafted SIP request to the SIP server. Additional Anal
(2) permissions for SPIM profiles in the web interface and (3) a crafted SIP request to the SIP server. Additional Analyst Notes: - CVE Program Container: References: - http://www.voipshield.com/research-details.php?id=25 - http://www.voipshield.com/research-details.php?id=26 - http://www.voipshield.com/research-details.php?id=22 - http://support.avaya.com/elmodocs2/security/ASA-2008-151.htm - http://osvdb.org/44286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41733 - http://www.securityfocus.com/bid/28682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41730 - http://osvdb.org/44284 - http://osvdb.org/44285 - http://support.avaya.com/elmodocs2/security/ASA-2008-150.htm - h
730 - http://osvdb.org/44284 - http://osvdb.org/44285 - http://support.avaya.com/elmodocs2/security/ASA-2008-150.htm - http://secunia.com/advisories/29744
CVE ID: CVE-2008-6574 State: PUBLISHED Published: 2009-04-01T22:00:00 Last Updated: 2024-08-07T11:34:47.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote attackers to gain privileges and cause a denial of service via unknown vectors related to reuse of valid credentials. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41734 - http://www.voipshield.com/research-details.php?id=24 - http://www.securityfocus.com/bid/28687 - http://osvdb.org/44288 - http://secunia.com/advisories/29744