Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5056 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:17.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the department_id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32268 - http://activecampaign.com/support/forum/showthread.php?t=4554 - http://osvdb.org/49858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46560 - http://holisticinfosec.org/content/view/93/45/
CVE ID: CVE-2008-5057 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:16.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the film parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46522 - http://www.securityfocus.com/bid/32239 - http://www.securityfocus.com/bid/32239/exploit - http://secunia.com/advisories/32675 - http://osvdb
ocus.com/bid/32239 - http://www.securityfocus.com/bid/32239/exploit - http://secunia.com/advisories/32675 - http://osvdb.org/49803
CVE ID: CVE-2008-5058 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:16.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary SQL commands via the user parameter, as reachable from siteadmin/adminlogin.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46384 - http://www.vupen.com/english/advisories/2008/3023 - http://www.securityfocus.com/bid/32132 - https://www.exploit-db.com/exploits/7004
en.com/english/advisories/2008/3023 - http://www.securityfocus.com/bid/32132 - https://www.exploit-db.com/exploits/7004 - http://secunia.com/advisories/32541 - http://osvdb.org/49662
CVE ID: CVE-2008-5059 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:17.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript event in the new_language parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46512 - http://securityreason.com/securityalert/4587 - https://www.exploit-db.com/exploits/6916
CVE ID: CVE-2008-5060 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:16.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ModernBill 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to (1) export_batch.inc.php, (2) run_auto_suspend.cron.php, and (3) send_email_cache.php in include/scripts/; (4) include/misc/mod_2checkout/2checkout_return.inc.php; and (5) include/html/nettools.popup.php, different vectors than CVE-2006-4034 and CVE-2005-1054. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32529 -
d CVE-2005-1054. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46513 - http://securityreason.com/securityalert/4587 - https://www.exploit-db.com/exploits/6916
CVE ID: CVE-2008-5061 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:16.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49679 - http://www.vupen.com/english/advisories/2008/3077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46456 - http://www.securityfocus.com/bid/32196 - http://secunia.com/advisories/32640 - http://securityreason.com/securityalert/4590 - https://www.exploit-db.com/exp
96 - http://secunia.com/advisories/32640 - http://securityreason.com/securityalert/4590 - https://www.exploit-db.com/exploits/7049
CVE ID: CVE-2008-5062 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:17.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to read arbitrary files via directory traversal sequences in the thefile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49680 - http://www.vupen.com/english/advisories/2008/3077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46455 - http://www.securityfocus.com/bid/32196 - http://secunia.com/advisories/32640 - http://securityreason.com/securityalert/4590 - https://w
rityfocus.com/bid/32196 - http://secunia.com/advisories/32640 - http://securityreason.com/securityalert/4590 - https://www.exploit-db.com/exploits/7049
CVE ID: CVE-2008-5063 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:16.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Admin/ADM_Pagina.php in OTManager 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the Tipo parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32235 - http://osvdb.org/49850 - http://secunia.com/advisories/32645 - http://www.exploit-db.com/exploits/7077 - http://securityreason.com/securityalert/4586 - http://www.vupen.com/english/advisories/2008/3093
CVE ID: CVE-2008-5064 State: PUBLISHED Published: 2008-11-13T17:00:00 Last Updated: 2024-08-07T10:40:16.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32422 - http://packetstorm.linuxsecurity.com/0810-exploits/hhwebsoccer-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/46164 - http://www.securityfocus.com/bid/31963
CVE ID: CVE-2008-5065 State: PUBLISHED Published: 2008-11-13T17:00:00 Last Updated: 2024-08-07T10:40:16.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: TlGuestBook 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlGuestBook_login cookie to admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6860 - http://www.securityfocus.com/bid/31958 - http://securityreason.com/securityalert/4585
CVE ID: CVE-2008-5066 State: PUBLISHED Published: 2008-11-13T17:00:00 Last Updated: 2024-08-07T10:40:17.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6859 - http://www.vupen.com/english/advisories/2008/2959 - http://www.securityfocus.com/bid/31959 - http://securityreason.com/securityalert/4592
CVE ID: CVE-2008-5067 State: PUBLISHED Published: 2008-11-13T17:00:00Z Last Updated: 2024-09-17T03:59:49.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/49441 - http://www.securityfocus.com/bid/31968 - http://secunia.com/advisories/32457
CVE ID: CVE-2008-5068 State: PUBLISHED Published: 2008-11-13T17:00:00 Last Updated: 2024-08-07T10:40:16.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote attackers to inject arbitrary web script or HTML via the (1) begin parameter to index.php and the (2) searchtext parameter to search.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/49445 - http://secunia.com/advisories/32445 - http://www.securityfocus.com/bid/31970 - http://www.osvdb.org/494
svdb.org/49445 - http://secunia.com/advisories/32445 - http://www.securityfocus.com/bid/31970 - http://www.osvdb.org/49444
CVE ID: CVE-2008-5069 State: PUBLISHED Published: 2008-11-14T16:00:00 Last Updated: 2024-08-07T10:40:16.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in go.php in Panuwat PromoteWeb MySQL, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31425 - https://www.exploit-db.com/exploits/6577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45436
CVE ID: CVE-2008-5070 State: PUBLISHED Published: 2008-11-14T16:00:00 Last Updated: 2024-08-07T10:40:16.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to (1) profiles/index.php and (2) profiles/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31988 - http://securityreason.com/securityalert/4593 - https://www.exploit-db.com/exploits/6612 - http://www.securityfocus.com/bid/31463
CVE ID: CVE-2008-5071 State: PUBLISHED Published: 2008-11-14T16:00:00 Last Updated: 2024-08-07T10:40:16.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated users to execute arbitrary PHP code via the proj_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4591 - https://www.exploit-db.com/exploits/6606 - http://www.securityfocus.com/bid/31448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45488
CVE ID: CVE-2008-5072 State: PUBLISHED Published: 2008-11-14T16:00:00 Last Updated: 2024-08-07T10:40:16.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash) via a malformed FLV file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6565 - http://www.securityfocus.com/bid/31400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45446 - http://securityreason.com/securityalert/4588 - http://packetstormsecurity.org/filedesc/klite-dos-tgz.html
CVE ID: CVE-2008-5073 State: PUBLISHED Published: 2008-11-14T16:00:00 Last Updated: 2024-08-07T10:40:17.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argument to the CanUninstall method. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4595 - http://www.securityfocus.com/bid/31435 - http://www.securityfocus.com/archive/1/496786/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45462
CVE ID: CVE-2008-5074 State: PUBLISHED Published: 2008-11-14T16:00:00 Last Updated: 2024-08-07T10:40:17.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the linkid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45504 - http://www.securityfocus.com/bid/31469 - http://securityreason.com/securityalert/4594 - https://www.exploit-db.com/exploits/6620
CVE ID: CVE-2008-5075 State: PUBLISHED Published: 2008-11-14T16:00:00 Last Updated: 2024-08-07T10:40:16.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) img.php, (b) file.php, (c) mail.php, (d) thumb.php, (e) zip.php, and (f) zipit.php, and (2) the view parameter to (g) browser.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45487 - http://securityreason.com/securityalert/4596 - https://www.exploit-db.
hange.xforce.ibmcloud.com/vulnerabilities/45487 - http://securityreason.com/securityalert/4596 - https://www.exploit-db.com/exploits/6596 - http://www.securityfocus.com/bid/31445
CVE ID: CVE-2008-5076 State: PUBLISHED Published: 2008-11-14T18:00:00 Last Updated: 2024-08-07T10:40:16.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via a process name with "crazy control strings." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/11/14/3 - http://bugs.debian.org/504144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46321 - http://www.openwall.com/lists/oss-security/2008/11/02/1 - http://lists.o
nge.xforce.ibmcloud.com/vulnerabilities/46321 - http://www.openwall.com/lists/oss-security/2008/11/02/1 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://www.securityfocus.com/bid/32081
CVE ID: CVE-2008-5077 State: PUBLISHED Published: 2009-01-07T17:00:00 Last Updated: 2024-08-07T10:40:16.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=123859864430555&w=2 - http://www.vmware.com/security/advisories/VMSA-2009-0004.html - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html - http://support.apple.com/kb/HT3549 -
tml - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html - http://support.apple.com/kb/HT3549 - http://www.securityfocus.com/archive/1/499827/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-66-250826-1 - http://www.openssl.org/news/secadv_20090107.txt - http://www.vupen.com/english/advisories/2009/0558 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html - http://marc.info/?l=bugtraq&m=123859864430555&w=2 - http://www.securitytracker.com/id?1021523 - http://www.vupen.com/english/advisories/2009/0362 - http://security.gentoo.org/glsa/glsa-200902-02.xml - http://marc.info/?l=bugtraq&m=124277349419254&w=2 - http://www.vupen.
tp://security.gentoo.org/glsa/glsa-200902-02.xml - http://marc.info/?l=bugtraq&m=124277349419254&w=2 - http://www.vupen.com/english/advisories/2009/0289 - http://secunia.com/advisories/35074 - http://support.avaya.com/elmodocs2/security/ASA-2009-038.htm - http://secunia.com/advisories/34211 - http://www.vupen.com/english/advisories/2009/0040 - http://marc.info/?l=bugtraq&m=127678688104458&w=2 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.544796 - http://www.vupen.com/english/advisories/2009/0904 - http://www.vupen.com/english/advisories/2009/0913 - http://secunia.com/advis
ww.vupen.com/english/advisories/2009/0904 - http://www.vupen.com/english/advisories/2009/0913 - http://secunia.com/advisories/33557 - http://secunia.com/advisories/33765 - http://www.ocert.org/advisories/ocert-2008-016.html - http://secunia.com/advisories/33673 - http://www.securityfocus.com/archive/1/502322/100/0/threaded - http://secunia.com/advisories/33436 - http://secunia.com/advisories/35108 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=837653 - http://www.securityfocus.com/bid/33150 - http://www.redhat.com/support/errata/RHSA-2009-0004.html - http://www.vupen.com/english/advisories/2009/1297 - https://usn.ubuntu.com/
hat.com/support/errata/RHSA-2009-0004.html - http://www.vupen.com/english/advisories/2009/1297 - https://usn.ubuntu.com/704-1/ - http://secunia.com/advisories/33338 - http://www.vupen.com/english/advisories/2009/1338 - http://marc.info/?l=bugtraq&m=124277349419254&w=2 - http://secunia.com/advisories/33394 - http://voodoo-circle.sourceforge.net/sa/sa-20090123-01.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6380 - http://secunia.com/advisories/39005 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9155
CVE ID: CVE-2008-5078 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T10:40:17.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript 1.6.1, and possibly earlier, might allow remote attackers to execute arbitrary code via an epsf escape sequence with a long filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47680 - http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm - http://secunia.com/advisories/33181 - http://lists.opensuse.org/opensuse
avaya.com/elmodocs2/security/ASA-2008-504.htm - http://secunia.com/advisories/33181 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - http://www.redhat.com/support/errata/RHSA-2008-1021.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11807 - http://www.securitytracker.com/id?1021401 - https://bugzilla.redhat.com/show_bug.cgi?id=473958
CVE ID: CVE-2008-5079 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:40:17.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499044/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2009-0225.html - https://oval.cisecurity.org/repository/search/definition/ova
http://www.redhat.com/support/errata/RHSA-2009-0225.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11288 - http://marc.info/?l=linux-netdev&m=122841256115780&w=2 - http://secunia.com/advisories/33706 - https://issues.rpath.com/browse/RPL-2915 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html - http://secunia.com/advisories/33641 - http://www.redhat.com/support/errata/RHSA-2009-0053.html - http://secunia.com/advisories/33756 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html - http://secunia.com/advisories/33348 - http://secunia.com/advisories/32913 - http://secunia.com/advisories/336
358.html - http://secunia.com/advisories/33348 - http://secunia.com/advisories/32913 - http://secunia.com/advisories/33623 - http://www.securityfocus.com/archive/1/498943/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2009:032 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332 - http://www.securityfocus.com/bid/32676 - http://secunia.com/advisories/34981 - http://securityreason.com/securityalert/4694 - http://secunia.com/advisories/33083 - https://usn.ubuntu.com/714-1/ - http://www.debian.org/security/2009/dsa-1787 - http://www.ubuntu.com/usn/usn-715-1 - http://secunia.com/advisories/33854 - http://www.securitytracker.com/id?1021360 - http://secunia.com/advisorie
n-715-1 - http://secunia.com/advisories/33854 - http://www.securitytracker.com/id?1021360 - http://secunia.com/advisories/33704 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html
CVE ID: CVE-2008-5080 State: PUBLISHED Published: 2008-12-03T18:00:00 Last Updated: 2024-08-07T10:40:16.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the query_string parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47116 - https://bugzilla.redhat.com/show_bug.cgi?id=474396 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=49543
ties/47116 - https://bugzilla.redhat.com/show_bug.cgi?id=474396 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495432#21 - http://www.ubuntu.com/usn/usn-686-1
CVE ID: CVE-2008-5081 State: PUBLISHED Published: 2008-12-17T02:00:00 Last Updated: 2024-08-07T10:40:17.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33220 - http://www.openwall.com/lists/oss-security/2008/12/14/1 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - http://secunia.com/advisori
/2008/12/14/1 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - http://secunia.com/advisories/33279 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9987 - http://www.ubuntu.com/usn/usn-696-1 - http://www.debian.org/security/2008/dsa-1690 - http://www.securityfocus.com/bid/32825 - https://www.exploit-db.com/exploits/7520 - http://security.gentoo.org/glsa/glsa-200901-11.xml - http://secunia.com/advisories/33153 - http://secunia.com/advisories/33475 - http://avahi.org/milestone/Avahi%200.6.24