deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-5570
Published: 2008-12-15
Description: Directory traversal vulnerability in index.php in PHP Multiple Newsletters 2.7, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/50660; http://secunia.com/advisories/33065; http://securityreason.com/securityalert/4751
CVE: CVE-2008-5571
Published: 2008-12-15
Description: SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter (aka user field) or the (2) psw parameter (aka passwd field).  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/50548; http://secunia.com/advisories/33030; http://securityreason.com/securityalert/4749
CVE: CVE-2008-5572
Published: 2008-12-15
Description: Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/50547; http://secunia.com/advisories/33030; http://securityreason.com/securityalert/4748
CVE: CVE-2008-5573
Published: 2008-12-15
Description: SQL injection vulnerability in the login feature in Poll Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) Password and (2) username parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/50576; http://secunia.com/advisories/33044; http://securityreason.com/securityalert/4741
CVE: CVE-2008-5574
Published: 2008-12-15
Description: SQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL commands via the u parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/50655; http://secunia.com/advisories/33096; http://securityreason.com/securityalert/4747
CVE: CVE-2008-5575
Published: 2008-12-15
Description: Session fixation vulnerability in Pro Clan Manager 0.4.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://securityreason.com/securityalert/4752; http://www.securityfocus.com/archive/1/498864/100/0/threaded; http://www.securityfocus.com/bid/32606
CVE: CVE-2008-5576
Published: 2008-12-15
Description: admin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass authentication and gain administrative access via a large value of the current_user[users_level] parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://securityreason.com/securityalert/4739; https://exchange.xforce.ibmcloud.com/vulnerabilities/47456; https://www.exploit-db.com/exploits/5149
CVE: CVE-2008-5577
Published: 2008-12-15
Description: PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to execute arbitrary PHP code via a URL in the inc_function parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://securityreason.com/securityalert/4739; https://exchange.xforce.ibmcloud.com/vulnerabilities/47457; https://www.exploit-db.com/exploits/5149
CVE: CVE-2008-5578
Published: 2008-12-15
Description: Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via (1) the f parameter in a showforum action, (2) the u parameter in a profile action, (3) the viewcat parameter, or (4) a combination of scb_uid and scb_ident cookie values.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4739; http://www.securityfocus.com/bid/27866; https://www.exploit-db.com/exploits/5149
CVE: CVE-2008-5579
Published: 2008-12-15
Description: Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://securityreason.com/securityalert/4733; http://www.securityfocus.com/archive/1/487695/100/200/threaded; http://www.securityfocus.com/bid/27671
CVE: CVE-2008-5580
Published: 2008-12-15
Description: mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4733; http://www.securityfocus.com/archive/1/487695/100/200/threaded; http://www.securityfocus.com/bid/27671
CVE: CVE-2008-5581
Published: 2008-12-15
Description: PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4733; http://www.securityfocus.com/archive/1/487695/100/200/threaded; http://www.securityfocus.com/bid/27671
CVE: CVE-2008-5582
Published: 2008-12-15
Description: SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the email parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4732; http://www.securityfocus.com/bid/28009; https://www.exploit-db.com/exploits/5192
CVE: CVE-2008-5583
Published: 2008-12-15
Description: Cross-site request forgery (CSRF) vulnerability in index.php in ProjectPier 0.8 and earlier allows remote attackers to perform actions as an administrator via the query string, as demonstrated by a delete project action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/29016; http://securityreason.com/securityalert/4734; http://www.projectpier.org/node/679
CVE: CVE-2008-5584
Published: 2008-12-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) a message, (2) a milestone, or (3) a display name in a profile, or the (4) a or (5) c parameter to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/29016; http://securityreason.com/securityalert/4734; http://www.projectpier.org/node/679
CVE: CVE-2008-5585
Published: 2008-12-16
Description: Multiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) portal/includes/portal_block.php and (2) includes/acp/acp_lcxbbportal.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.org/0812-exploits/icxbbportal-rfi.txt; http://securityreason.com/securityalert/4738; http://www.securityfocus.com/bid/32647
CVE: CVE-2008-5586
Published: 2008-12-16
Description: SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/32958; http://securityreason.com/securityalert/4736; http://www.securityfocus.com/bid/32590
CVE: CVE-2008-5587
Published: 2008-12-16
Description: Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the _language parameter to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html; http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html; http://secunia.com/advisories/33014
CVE: CVE-2008-5588
Published: 2008-12-16
Description: SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4740; http://www.securityfocus.com/bid/32659; https://exchange.xforce.ibmcloud.com/vulnerabilities/47113
CVE: CVE-2008-5589
Published: 2008-12-16
Description: SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the (1) txtusername parameter (aka username field) or the (2) txtpassword parameter (aka password field).  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/33012; http://securityreason.com/securityalert/4746; http://www.securityfocus.com/bid/32686
CVE: CVE-2008-5590
Published: 2008-12-16
Description: SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to execute arbitrary SQL commands via the forum_topic_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4743; http://www.securityfocus.com/bid/32672; https://exchange.xforce.ibmcloud.com/vulnerabilities/47144
CVE: CVE-2008-5591
Published: 2008-12-16
Description: Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter and possibly other "login fields." NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/33011; http://securityreason.com/securityalert/4742; http://www.securityfocus.com/bid/32658
CVE: CVE-2008-5592
Published: 2008-12-16
Description: Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users-zza21.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/33011; http://securityreason.com/securityalert/4742; https://exchange.xforce.ibmcloud.com/vulnerabilities/47111
CVE: CVE-2008-5593
Published: 2008-12-16
Description: Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page and (2) admin parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/33024; http://securityreason.com/securityalert/4750; http://www.securityfocus.com/bid/32680
CVE: CVE-2008-5594
Published: 2008-12-16
Description: Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page and (2) admin parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/33024; http://securityreason.com/securityalert/4744; http://www.securityfocus.com/bid/32677
CVE: CVE-2008-5595
Published: 2008-12-16
Description: SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0812-exploits/aspautodealer-sqldisclose.txt; http://secunia.com/advisories/33004; http://securityreason.com/securityalert/4754
CVE: CVE-2008-5596
Published: 2008-12-16
Description: Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for ikonBAnner_AdManager.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/33029; http://securityreason.com/securityalert/4755; https://www.exploit-db.com/exploits/7372
CVE: CVE-2008-5597
Published: 2008-12-16
Description: Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for db/cforum.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://securityreason.com/securityalert/4756; https://exchange.xforce.ibmcloud.com/vulnerabilities/47128; https://www.exploit-db.com/exploits/7353
CVE: CVE-2008-5598
Published: 2008-12-16
Description: Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. (dot dot) in the group parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://securityreason.com/securityalert/4760; http://www.securityfocus.com/bid/32678; https://www.exploit-db.com/exploits/7377
CVE: CVE-2008-5599
Published: 2008-12-16
Description: SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the password parameter (aka passwd field) in a login action.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/33009; http://securityreason.com/securityalert/4757; http://www.securityfocus.com/bid/32660
CVE: CVE-2008-5600
Published: 2008-12-16
Description: Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/33009; http://securityreason.com/securityalert/4757; https://exchange.xforce.ibmcloud.com/vulnerabilities/47125
CVE: CVE-2008-5601
Published: 2008-12-16
Description: User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/50439; http://secunia.com/advisories/32993; http://securityreason.com/securityalert/4758
CVE: CVE-2008-5602
Published: 2008-12-16
Description: Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for natterchat112.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://securityreason.com/securityalert/4761; https://exchange.xforce.ibmcloud.com/vulnerabilities/47147; https://www.exploit-db.com/exploits/7370
CVE: CVE-2008-5603
Published: 2008-12-16
Description: ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for news.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/23573; http://securityreason.com/securityalert/4762; https://exchange.xforce.ibmcloud.com/vulnerabilities/47143
CVE: CVE-2008-5604
Published: 2008-12-16
Description: Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/50433; http://secunia.com/advisories/32984; http://securityreason.com/securityalert/4765
CVE: CVE-2008-5605
Published: 2008-12-16
Description: Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter to classifieds.asp and the (2) ID parameter to Events.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4763; http://www.securityfocus.com/bid/32662; https://exchange.xforce.ibmcloud.com/vulnerabilities/47127
CVE: CVE-2008-5606
Published: 2008-12-16
Description: Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/33008; http://securityreason.com/securityalert/4764; https://exchange.xforce.ibmcloud.com/vulnerabilities/47152
CVE: CVE-2008-5607
Published: 2008-12-16
Description: SQL injection vulnerability in the JMovies (aka JM or com_jmovies) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4759; http://www.securityfocus.com/bid/32615; https://www.exploit-db.com/exploits/7331
CVE: CVE-2008-5608
Published: 2008-12-16
Description: ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://securityreason.com/securityalert/4754; https://exchange.xforce.ibmcloud.com/vulnerabilities/47124; https://www.exploit-db.com/exploits/7356
CVE: CVE-2008-4217
Published: 2008-12-17
Description: Integer signedness error in BOM in Apple Mac OS X before 10.5.6 allows remote attackers to execute arbitrary code via the headers in a crafted CPIO archive, leading to a stack-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html; http://secunia.com/advisories/33179; http://support.apple.com/kb/HT3338
CVE: CVE-2008-4218
Published: 2008-12-17
Description: Multiple integer overflows in the kernel in Apple Mac OS X before 10.5.6 on Intel platforms allow local users to gain privileges via a crafted call to (1) i386_set_ldt or (2) i386_get_ldt.
CVSS Score: 7.2 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html; http://secunia.com/advisories/33179; http://support.apple.com/kb/HT3338
CVE: CVE-2008-4219
Published: 2008-12-17
Description: The kernel in Apple Mac OS X before 10.5.6 allows local users to cause a denial of service (infinite loop and system halt) by running an application that is dynamically linked to libraries on an NFS server, related to occurrence of an exception in this application.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html; http://secunia.com/advisories/33179; http://support.apple.com/kb/HT3338
CVE: CVE-2008-4220
Published: 2008-12-17
Description: Integer overflow in the inet_net_pton API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.  NOTE: this may be related to the WLB[PII_REDACTED] advisory published by SecurityReason on 20080822; however, as of 20081216, there are insufficient details to be sure.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html; http://secunia.com/advisories/33179; http://support.apple.com/kb/HT3338
CVE: CVE-2008-4221
Published: 2008-12-17
Description: The strptime API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted date string, related to improper memory allocation.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html; http://secunia.com/advisories/33179; http://support.apple.com/kb/HT3338
CVE: CVE-2008-4222
Published: 2008-12-17
Description: natd in network_cmds in Apple Mac OS X before 10.5.6, when Internet Sharing is enabled, allows remote attackers to cause a denial of service (infinite loop) via a crafted TCP packet.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html; http://secunia.com/advisories/33179; http://support.apple.com/kb/HT3338
CVE: CVE-2008-4223
Published: 2008-12-17
Description: Podcast Producer in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to bypass authentication and gain administrative access via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html; http://secunia.com/advisories/33179; http://support.apple.com/kb/HT3338
CVE: CVE-2008-4224
Published: 2008-12-17
Description: UDF in Apple Mac OS X before 10.5.6 allows user-assisted attackers to cause a denial of service (system crash) via a malformed UDF volume in a crafted ISO file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html; http://secunia.com/advisories/33179; http://support.apple.com/kb/HT3338
CVE: CVE-2008-4234
Published: 2008-12-17
Description: Incomplete blacklist vulnerability in the Quarantine feature in CoreTypes in Apple Mac OS X 10.5 before 10.5.6 allows user-assisted remote attackers to execute arbitrary code via an executable file with the content type indicating no application association for the file, which does not trigger a "potentially unsafe" warning message.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html; http://secunia.com/advisories/33179; http://support.apple.com/kb/HT3338
CVE: CVE-2008-4236
Published: 2008-12-17
Description: Apple Type Services (ATS) in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted embedded font in a PDF file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html; http://secunia.com/advisories/33179; http://securitytracker.com/id?1021398
CVE: CVE-2008-4237
Published: 2008-12-17
Description: Managed Client in Apple Mac OS X before 10.5.6 sometimes misidentifies a system when installing per-host configuration settings, which allows context-dependent attackers to have an unspecified impact by leveraging unintended settings, as demonstrated by the screen saver lock setting.
CVSS Score: 10.0 (HIGH)
References: http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html; http://secunia.com/advisories/33179; http://support.apple.com/kb/HT3338
CVE: CVE-2008-5609
Published: 2008-12-17
Description: SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://typo3.org/extensions/repository/view/commerce/0.9.7/; http://typo3.org/teams/security/security-bulletins/typo3-20081020-2/; http://www.vupen.com/english/advisories/2008/2870
CVE: CVE-2008-5616
Published: 2008-12-17
Description: Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/33136; http://secunia.com/advisories/34845; http://svn.mplayerhq.hu/mplayer/branches/1.0rc2/libmpdemux/demux_vqf.c?r1=24723&r2=28150&pathrev=28150
CVE: CVE-2008-5081
Published: 2008-12-17
Description: The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://avahi.org/milestone/Avahi%200.6.24; http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html; http://secunia.com/advisories/33153