Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44934 - http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/gfx/url_elider.cc?r1=1774&r2=1797&pathrev=1797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45032 - http://www.securityfocus.com/bid/31034 - http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html - https://www.exploit-db.com/exploits/6372 - http://osvdb.org/48264 - http://shinnok.evonet.ro/vulns_html/chrome.html - http://www.securityfocus.com/bid/31071
CVE ID: CVE-2008-6999 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0809-exploits/phpauction32-rfi.txt - http://osvdb.org/47939 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44936 - http://secunia.com/advisories/31803
CVE ID: CVE-2008-7000 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the lan parameter. NOTE: this might be related to CVE-2005-2255.1. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0809-exploits/phpauction32-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44938
CVE ID: CVE-2008-7001 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the file manager in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44982 - https://www.exploit-db.com/exploits/6405
CVE ID: CVE-2008-7002 State: PUBLISHED Published: 2009-08-18T10:00:00Z Last Updated: 2024-09-16T17:28:26.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 5.2.5 does not enforce (a) open_basedir and (b) safe_mode_exec_dir restrictions for certain functions, which might allow local users to bypass intended access restrictions and call programs outside of the intended directory via the (1) exec, (2) system, (3) shell_exec, (4) passthru, or (5) popen functions, possibly involving pathnames such as "C:" drive notation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31064 - http://downloads.securityfocus.com/vulnerabilities/expl
ontainer: References: - http://www.securityfocus.com/bid/31064 - http://downloads.securityfocus.com/vulnerabilities/exploits/31064.php
CVE ID: CVE-2008-7003 State: PUBLISHED Published: 2009-08-18T10:00:00 Last Updated: 2024-08-07T11:49:02.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in The Rat CMS Alpha 2 allow remote attackers to execute arbitrary SQL commands via the (1) user_id and (2) password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47335 - https://www.exploit-db.com/exploits/7478
CVE ID: CVE-2008-7004 State: PUBLISHED Published: 2009-08-19T10:00:00 Last Updated: 2024-08-07T11:49:02.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors, possibly related to elog.c. Additional Analyst Notes: - CVE Program Container: References: - https://midas.psi.ch/elog/download/ChangeLog - http://www.vupen.com/english/advisories/2008/0265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39903 - http://www.osvdb.org/41684
CVE ID: CVE-2008-7005 State: PUBLISHED Published: 2009-08-19T10:00:00 Last Updated: 2024-08-07T11:49:02.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/modules/top/1-random_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary PHP code via the quotes_to_edit parameter. NOTE: this issue has been reported as an unrestricted file upload by some sources, but that is a potential consequence of code execution. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45054 - https://www.exploit-db.com/exploits/6432 - http://www.securityfocus.com/archive/1
e.ibmcloud.com/vulnerabilities/45054 - https://www.exploit-db.com/exploits/6432 - http://www.securityfocus.com/archive/1/496234/100/0/threaded - http://www.securityfocus.com/bid/31127
CVE ID: CVE-2008-7006 State: PUBLISHED Published: 2009-08-19T10:00:00 Last Updated: 2024-08-07T11:49:02.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a direct request to admin/backupdb.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45150 - http://osvdb.org/48156 - http://secunia.com/advisories/31850 - https://www.exploit-db.com/exploits/6456
CVE ID: CVE-2008-7007 State: PUBLISHED Published: 2009-08-19T10:00:00 Last Updated: 2024-08-07T11:49:02.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and gain administrative access by setting the (1) admin_name and (2) admin_pass cookie values to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31174 - https://www.exploit-db.com/exploits/6457 - http://osvdb.org/48155 - http://secunia.com/advisories/31850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45152
CVE ID: CVE-2008-7008 State: PUBLISHED Published: 2009-08-19T10:00:00 Last Updated: 2024-08-07T11:49:02.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a direct request to admin/backup/db. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48282 - http://packetstorm.linuxsecurity.com/0809-exploits/webhost-database.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45241 - http://secunia.com/advisories/31922 - http://www.securityfocus.com/bid/31249
CVE ID: CVE-2008-7009 State: PUBLISHED Published: 2009-08-19T10:00:00 Last Updated: 2024-08-07T11:49:02.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via a file or directory with a long path. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31832 - http://www.securityfocus.com/archive/1/496226/100/0/threaded - http://www.securitytracker.com/id?1020859 - http://osvdb.org/48097 - https://exchange.xforce.ibmcloud.com/v
0/threaded - http://www.securitytracker.com/id?1020859 - http://osvdb.org/48097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45082 - http://www.vupen.com/english/advisories/2008/2556 - http://www.securityfocus.com/bid/31124
CVE ID: CVE-2008-7010 State: PUBLISHED Published: 2009-08-19T10:00:00 Last Updated: 2024-08-07T11:49:02.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a direct request to admin/register.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31158 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45116 - http://packetstormsecurity.org/0809-exploits/skalinks-editor.txt - https://www.exploit-db.com/exploits/6445
CVE ID: CVE-2008-7011 State: PUBLISHED Published: 2009-08-19T10:00:00 Last Updated: 2024-08-07T11:49:02.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service (server exit) via multiple file downloads from the server, which triggers an assertion failure when the Closing flag in UnChan.cpp is set. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31205 - http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0321.html - htt
- http://www.securityfocus.com/bid/31205 - http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0321.html - http://osvdb.org/48293 - http://www.securityfocus.com/archive/1/496399/100/0/threaded
CVE ID: CVE-2008-7012 State: PUBLISHED Published: 2009-08-19T10:00:00 Last Updated: 2024-08-07T11:49:02.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: courier/1000@/api_error_email.html (aka "error reporting page") in Accellion File Transfer Appliance FTA_7_0_178, and possibly other versions before FTA_7_0_189, allows remote attackers to send spam e-mail via modified description and client_email parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31178 - http://www.securitytracker.com/id?1020870 - http://osvdb.org/48242 - http://zebux.free.fr/pub/Advisory/Advisory_Accellion_SPAM_Engine_Vulnerability_200808.txt - http:
tp://osvdb.org/48242 - http://zebux.free.fr/pub/Advisory/Advisory_Accellion_SPAM_Engine_Vulnerability_200808.txt - http://secunia.com/advisories/31848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45159
CVE ID: CVE-2008-7013 State: PUBLISHED Published: 2009-08-19T10:00:00 Last Updated: 2024-08-07T11:49:02.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service (client crash) via a crafted login response that triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496353/100/0/threaded - http://osvdb.org/51697
CVE ID: CVE-2008-7014 State: PUBLISHED Published: 2009-08-19T10:00:00 Last Updated: 2024-08-07T11:49:02.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: fhttpd 0.4.2 allows remote attackers to cause a denial of service (crash) via an Authorization HTTP header with an invalid character after the Basic value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31265 - https://www.exploit-db.com/exploits/6493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45278
CVE ID: CVE-2008-7015 State: PUBLISHED Published: 2009-08-19T10:00:00 Last Updated: 2024-08-07T11:49:02.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a denial of service (server exit) via a packet with a large length value that triggers a memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496280/100/0/threaded - http://osvdb.org/48292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45095 - http://www.securityfocus.com/bid/31140 - http://archives.neohapsi
//exchange.xforce.ibmcloud.com/vulnerabilities/45095 - http://www.securityfocus.com/bid/31140 - http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0189.html
CVE ID: CVE-2008-7016 State: PUBLISHED Published: 2009-08-21T14:00:00 Last Updated: 2024-08-07T11:49:02.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: tnftpd before 20080929 splits large command strings into multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via unknown vectors, probably involving a crafted ftp:// link to a tnftpd server. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31958 - http://osvdb.org/48637 - http://freshmeat.net/projects/tnftpd/?branch_id=14355&release_id=285654# - https://exchange.xforce.ibmcloud.com/vulnerabilities/45534
CVE ID: CVE-2008-7017 State: PUBLISHED Published: 2009-08-21T14:00:00 Last Updated: 2024-08-07T11:49:02.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in analyse.php in CAcert 20080921, and possibly other versions before 20080928, allows remote attackers to inject arbitrary web script or HTML via the CN (CommonName) field in the subject of an X.509 certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.cynops.de/advisories/AKLINK-SA-2008-007.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45515 - http://www.securityfocus.com/bid/31481
CVE ID: CVE-2008-7018 State: PUBLISHED Published: 2009-08-21T14:00:00 Last Updated: 2024-08-07T11:49:02.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NashTech Easy PHP Calendar 6.3.25 allows remote attackers to inject arbitrary web script or HTML via the Details field (descr parameter) in an Add New Event action in an unspecified request as generated by an add action in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496796 - http://www.securityfocus.com/bid/31478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45517
CVE ID: CVE-2008-7019 State: PUBLISHED Published: 2009-08-21T14:00:00 Last Updated: 2024-08-07T11:49:02.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Esqlanelapse 2.6.1 and 2.6.2 allows remote attackers to bypass authentication and gain privileges via modified (1) enombre and (2) euri cookies. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6583 - http://www.securityfocus.com/bid/31428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45438
CVE ID: CVE-2008-7020 State: PUBLISHED Published: 2009-08-21T14:00:00 Last Updated: 2024-08-07T11:49:02.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45275 - http://secunia.com/advisories/31903 - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf - h
es/45275 - http://secunia.com/advisories/31903 - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf - http://www.ivizsecurity.com/security-advisory-iviz-sr-08010.html - http://seclists.org/fulldisclosure/2008/Sep/0378.html
CVE ID: CVE-2008-7021 State: PUBLISHED Published: 2009-08-21T14:00:00 Last Updated: 2024-08-07T11:49:02.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as an image or logo, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45335 - http://www.securityfocus.com/bid/31297 - https://www.exploit-db.com/e
change.xforce.ibmcloud.com/vulnerabilities/45335 - http://www.securityfocus.com/bid/31297 - https://www.exploit-db.com/exploits/6514
CVE ID: CVE-2008-7022 State: PUBLISHED Published: 2009-08-21T14:00:00 Last Updated: 2024-08-07T11:49:02.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in ChilkatMail_v7_9.dll in the Chilkat Software IMAP ActiveX control (ChilkatMail2.ChilkatMailMan2.1) allows remote attackers to execute arbitrary programs via the LoadXmlEmail method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45532
CVE ID: CVE-2008-7023 State: PUBLISHED Published: 2009-08-21T14:00:00 Last Updated: 2024-08-07T11:49:02.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allows remote attackers to bypass authentication. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496604/100/0/threaded - http://osvdb.org/51731 - http://www.securityfocus.com/bid/31336 - htt
ecurityfocus.com/archive/1/496604/100/0/threaded - http://osvdb.org/51731 - http://www.securityfocus.com/bid/31336 - http://www.securityfocus.com/archive/1/496622/100/0/threaded
CVE ID: CVE-2008-7024 State: PUBLISHED Published: 2009-08-21T14:00:00 Last Updated: 2024-08-07T11:49:02.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain administrator privileges by setting the user cookie to "admin" and setting the name parameter to "users." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31429 - https://www.exploit-db.com/exploits/6584 - http://secunia.com/advisories/32057 - http://www.securityfocus.com/archive/1/496761/100/0/threaded - http://osvdb.org/48639 - https://exchange.xforce.ibmclo
- http://www.securityfocus.com/archive/1/496761/100/0/threaded - http://osvdb.org/48639 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45439
CVE ID: CVE-2008-7025 State: PUBLISHED Published: 2009-08-21T14:00:00 Last Updated: 2024-08-07T11:49:02.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: TrueVector in Check Point ZoneAlarm 8.0.020.000, with vsmon.exe running, allows remote HTTP proxies to cause a denial of service (crash) and disable the HIDS module via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45480 - http://www.securityfocus.com/bid/31431 - http://www.securityfocus.com/archive/1/496764/100/0/threaded
CVE ID: CVE-2008-7026 State: PUBLISHED Published: 2009-08-21T14:00:00 Last Updated: 2024-08-07T11:49:03.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in (1) student/avatars/ or (2) professor/avatars/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/54294 - http://www.securityfocus.com/bid/31491 - http://www.securityfocus.com/archive/1/496851/100/0/threaded - http://forum.efr
http://www.securityfocus.com/bid/31491 - http://www.securityfocus.com/archive/1/496851/100/0/threaded - http://forum.efrontlearning.net/viewtopic.php?f=1&t=271 - https://www.exploit-db.com/exploits/6633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45574
CVE ID: CVE-2008-7027 State: PUBLISHED Published: 2009-08-21T14:00:00 Last Updated: 2024-08-07T11:49:02.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user and pass cookies to 1. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6579 - http://www.securityfocus.com/bid/31422
CVE ID: CVE-2008-7028 State: PUBLISHED Published: 2009-08-21T14:00:00 Last Updated: 2024-08-07T11:49:02.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: RPG.Board 0.8 Beta2 and earlier allows remote attackers to bypass authentication and gain privileges by setting the keep4u cookie to a certain value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45501 - http://www.securityfocus.com/bid/31466 - https://www.exploit-db.com/exploits/6591
CVE ID: CVE-2008-7029 State: PUBLISHED Published: 2009-08-24T10:00:00 Last Updated: 2024-08-07T11:49:02.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in usercp.php in AlilG Application AliBoard Beta allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in uploads/avatars/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27737 - http://www.securityfocus.com/archive/1/487921/100/200/threaded - http://osvdb.org/51183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
s.com/archive/1/487921/100/200/threaded - http://osvdb.org/51183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40276
CVE ID: CVE-2008-7030 State: PUBLISHED Published: 2009-08-24T10:00:00 Last Updated: 2024-08-07T11:49:02.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field to an unspecified component, possibly agentlist.asp. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/51076 - http://www.securityfocus.com/archive/1/488070/100/200/threaded - http://www.securityfocus.com/bid/27779 - https://exchange.xforce.i
securityfocus.com/archive/1/488070/100/200/threaded - http://www.securityfocus.com/bid/27779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40509
CVE ID: CVE-2008-7031 State: PUBLISHED Published: 2009-08-24T10:00:00 Last Updated: 2024-08-07T11:49:02.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40608 - http://osvdb.org/50997 - http://aluigi.org/adv/wachof-adv.txt - http://www.securityfocus.com/bid/27873 - http://www.securityfocus.com/archive/1/488366/1
aluigi.org/adv/wachof-adv.txt - http://www.securityfocus.com/bid/27873 - http://www.securityfocus.com/archive/1/488366/100/200/threaded - http://secunia.com/advisories/28272