deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-2425
Published: 2008-05-23
Description: SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the letter parameter in a Search action, a different vector than CVE-2008-2416.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30281; https://exchange.xforce.ibmcloud.com/vulnerabilities/42800; http://secunia.com/advisories/30281
CVE: CVE-2008-2443
Published: 2008-05-27
Description: SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30244; http://www.securityfocus.com/bid/29200; http://www.vupen.com/english/advisories/2008/1524/references
CVE: CVE-2008-2444
Published: 2008-05-27
Description: SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the langsel parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30186; http://www.securityfocus.com/bid/29193; https://exchange.xforce.ibmcloud.com/vulnerabilities/42391
CVE: CVE-2008-2445
Published: 2008-05-27
Description: Cross-site scripting (XSS) vulnerability in profile.php in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the userid parameter in a show action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/30235; http://www.securityfocus.com/bid/29188; https://exchange.xforce.ibmcloud.com/vulnerabilities/42383
CVE: CVE-2008-2446
Published: 2008-05-27
Description: Multiple SQL injection vulnerabilities in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) userid parameter to (a) profile.php in a "show moreinfo" action; the (2) bildid parameter to (b) picturegallery.php in a shownext action; the (3) id parameter to (c) filebase.php in a freigeben action, (d) schedule.php in a del action, and (e) profile.php in an observe action; and the (4) pmid parameter in a delete action and (5) folderid parameter in a showfolder action to (f) message.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30235; http://www.securityfocus.com/bid/29188; https://exchange.xforce.ibmcloud.com/vulnerabilities/42385
CVE: CVE-2008-2447
Published: 2008-05-27
Description: SQL injection vulnerability in products.php in the Mytipper ZoGo-shop plugin 1.15.5 and 1.16 Beta 13 for e107 allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30232; http://www.securityfocus.com/bid/29185; https://exchange.xforce.ibmcloud.com/vulnerabilities/42384
CVE: CVE-2008-2448
Published: 2008-05-27
Description: Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) admin/duzenle.asp and (b) admin_oku.asp; the (2) kid parameter to (c) kategori.asp and (d) admin_kategori.asp; and unspecified parameters to (e) uye.asp and (f) oku.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30233; http://www.securityfocus.com/bid/29189; http://www.securityfocus.com/bid/29192
CVE: CVE-2008-2449
Published: 2008-05-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in Isaac McGowan phpInstantGallery 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) gallery parameter to (a) index.php and (b) image.php, and the (2) imgnum parameter to image.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/30524; http://www.securityfocus.com/bid/29152; https://exchange.xforce.ibmcloud.com/vulnerabilities/42374
CVE: CVE-2008-2450
Published: 2008-05-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Statistics (aka ke_stats) extension 0.1.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://typo3.org/teams/security/security-bulletins/typo3-20080513-4; https://exchange.xforce.ibmcloud.com/vulnerabilities/42366; http://typo3.org/teams/security/security-bulletins/typo3-20080513-4
CVE: CVE-2008-2451
Published: 2008-05-27
Description: Multiple SQL injection vulnerabilities in the Statistics (aka ke_stats) extension 0.1.2 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://typo3.org/teams/security/security-bulletins/typo3-20080513-4; https://exchange.xforce.ibmcloud.com/vulnerabilities/42368; http://typo3.org/teams/security/security-bulletins/typo3-20080513-4
CVE: CVE-2008-2452
Published: 2008-05-27
Description: Cross-site scripting (XSS) vulnerability in the Questionaire (aka pbsurvey) extension 1.2.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://typo3.org/teams/security/security-bulletins/typo3-20080513-2; https://exchange.xforce.ibmcloud.com/vulnerabilities/42365; http://typo3.org/teams/security/security-bulletins/typo3-20080513-2
CVE: CVE-2008-2453
Published: 2008-05-27
Description: Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL commands via the fatherID parameter to (1) browse.php and (2) search.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30209; http://www.securityfocus.com/bid/29169; https://exchange.xforce.ibmcloud.com/vulnerabilities/42380
CVE: CVE-2008-2454
Published: 2008-05-27
Description: SQL injection vulnerability in the xsstream-dm (com_xsstream-dm) component 0.01 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the movie parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/491943/100/0/threaded; http://www.securityfocus.com/bid/29144; https://exchange.xforce.ibmcloud.com/vulnerabilities/42323
CVE: CVE-2008-2455
Published: 2008-05-27
Description: SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the rid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30212; http://www.securityfocus.com/bid/29181; https://exchange.xforce.ibmcloud.com/vulnerabilities/42386
CVE: CVE-2008-2456
Published: 2008-05-27
Description: SQL injection vulnerability in index.php in ComicShout 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the comic_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30319; http://www.comicshout.com/; http://www.securityfocus.com/bid/29301
CVE: CVE-2008-2457
Published: 2008-05-27
Description: SQL injection vulnerability in jokes_category.php in PHP-Jokesite 2.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30314; http://www.securityfocus.com/bid/29308; http://www.vupen.com/english/advisories/2008/1592/references
CVE: CVE-2008-2458
Published: 2008-05-27
Description: Cross-site scripting (XSS) vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the st parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/30321; http://www.securityfocus.com/archive/1/492264/100/0/threaded; http://www.securityfocus.com/bid/29295
CVE: CVE-2008-2459
Published: 2008-05-27
Description: Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/30311; http://www.securityfocus.com/bid/29306; https://exchange.xforce.ibmcloud.com/vulnerabilities/42540
CVE: CVE-2008-2460
Published: 2008-05-27
Description: SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL commands via the q parameter in a search action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/492290/100/0/threaded; http://www.securityfocus.com/bid/29293; https://exchange.xforce.ibmcloud.com/vulnerabilities/42541
CVE: CVE-2008-2461
Published: 2008-05-27
Description: SQL injection vulnerability in index.php in Netious CMS 0.4 allows remote attackers to execute arbitrary SQL commands via the pageid parameter, a different vector than CVE-2006-4047.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/29319; http://www.vupen.com/english/advisories/2008/1591/references; https://exchange.xforce.ibmcloud.com/vulnerabilities/42726
CVE: CVE-2008-2477
Published: 2008-05-28
Description: SQL injection vulnerability in index.php in MxBB (aka MX-System) Portal 2.7.3 allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30318; http://www.securityfocus.com/bid/29307; http://www.vupen.com/english/advisories/2008/1593/references
CVE: CVE-2008-2478
Published: 2008-05-28
Description: scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allows remote authenticated users with reseller privileges to execute arbitrary code via shell metacharacters in the Email address field (aka Email text box).  NOTE: the vendor disputes this, stating "I'm unable to reproduce such an issue on multiple servers running different versions of cPanel.
CVSS Score: 8.5 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/492223/100/0/threaded; http://www.securityfocus.com/archive/1/492259/100/0/threaded; http://www.securityfocus.com/bid/29277
CVE: CVE-2008-2479
Published: 2008-05-28
Description: Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) kind parameter to fix/browse.php and the (2) account parameter to auth/00_pass.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/30397; http://www.securityfocus.com/archive/1/492582/100/0/threaded; http://www.securityfocus.com/bid/29371
CVE: CVE-2008-2480
Published: 2008-05-28
Description: PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the _pages_dir parameter.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/30373; http://www.securityfocus.com/bid/29357; http://www.vupen.com/english/advisories/2008/1645/references
CVE: CVE-2008-2481
Published: 2008-05-28
Description: PHP remote file inclusion vulnerability in authentication/phpbb3/phpbb3.functions.php in phpRaider 1.0.7 and 1.0.7a, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pConfig_auth[phpbb_path] parameter.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://forums.phpraider.com/showthread.php?t=1087#v1_0_7b_-_May_29__2008; http://secunia.com/advisories/30375; http://www.securityfocus.com/bid/29356
CVE: CVE-2008-2482
Published: 2008-05-28
Description: Directory traversal vulnerability in install_mod.php in insanevisions OneCMS 2.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the load parameter in a go action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/30378; http://www.securityfocus.com/archive/1/492513/100/0/threaded; http://www.securityfocus.com/bid/29374
CVE: CVE-2008-2483
Published: 2008-05-28
Description: Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the op parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/30374; http://www.securityfocus.com/bid/29359; http://www.vupen.com/english/advisories/2008/1644/references
CVE: CVE-2008-2484
Published: 2008-05-28
Description: SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the email parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/30374; http://www.securityfocus.com/bid/29358; http://www.vupen.com/english/advisories/2008/1644/references
CVE: CVE-2008-2485
Published: 2008-05-28
Description: Cross-site scripting (XSS) vulnerability in the URL redirection script (inc/url_redirection.inc.php) in PCPIN Chat before 6.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://community.pcpin.com/?include=700&thread_id=6918; http://secunia.com/advisories/30371; http://www.securityfocus.com/archive/1/492563/100/0/threaded
CVE: CVE-2008-2486
Published: 2008-05-28
Description: Unspecified vulnerability in eMule Plus before 1.2d has unknown impact and attack vectors related to "staticservers.dat processing."
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/30277; http://sourceforge.net/project/shownotes.php?release_id=600155; http://www.securityfocus.com/bid/29361
CVE: CVE-2008-2487
Published: 2008-05-28
Description: SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30306; http://www.vupen.com/english/advisories/2008/1656/references; https://exchange.xforce.ibmcloud.com/vulnerabilities/42634
CVE: CVE-2008-2488
Published: 2008-05-28
Description: admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/30376; http://www.securityfocus.com/bid/29377; https://exchange.xforce.ibmcloud.com/vulnerabilities/42629
CVE: CVE-2008-2489
Published: 2008-05-28
Description: SQL injection vulnerability in the Library for Frontend Plugins (aka sg_zfelib) extension 1.1.512 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified "user input."
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30400; http://typo3.org/teams/security/security-bulletins/typo3-20080527-2/; http://www.vupen.com/english/advisories/2008/1665/references
CVE: CVE-2008-2490
Published: 2008-05-28
Description: Cross-site scripting (XSS) vulnerability in the KJ Image Lightbox 2 (aka kj_imagelightbox2) extension 1.4.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified "user input."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/30386; http://typo3.org/teams/security/security-bulletins/typo3-20080527-1/; http://www.vupen.com/english/advisories/2008/1666/references
CVE: CVE-2008-2491
Published: 2008-05-28
Description: SQL injection vulnerability in adv_cat.php in AbleSpace 1.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/492576/100/0/threaded; http://www.securityfocus.com/bid/29369; https://exchange.xforce.ibmcloud.com/vulnerabilities/42635
CVE: CVE-2008-2492
Published: 2008-05-28
Description: Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to post3/view.asp and the (2) review parameter to post3/book.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/492586/100/0/threaded; http://www.securityfocus.com/bid/29375; https://exchange.xforce.ibmcloud.com/vulnerabilities/42660
CVE: CVE-2008-2493
Published: 2008-05-28
Description: Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to inject arbitrary web script or HTML via the review parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/492586/100/0/threaded; http://www.securityfocus.com/bid/29375; https://exchange.xforce.ibmcloud.com/vulnerabilities/42661
CVE: CVE-2008-2494
Published: 2008-05-28
Description: Cross-site scripting (XSS) vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via the l parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/492593/100/0/threaded; http://www.securityfocus.com/bid/29367; https://exchange.xforce.ibmcloud.com/vulnerabilities/42642
CVE: CVE-2008-2495
Published: 2008-05-28
Description: Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impact via a .. (dot dot) in the p parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/492593/100/0/threaded; http://www.securityfocus.com/bid/29367; https://exchange.xforce.ibmcloud.com/vulnerabilities/42641
CVE: CVE-2008-2496
Published: 2008-05-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in Quate CMS 0.3.4 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) login.php, and (3) credits.php in admin/, and (4) upgrade/index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/30377; http://www.securityfocus.com/bid/29348; https://exchange.xforce.ibmcloud.com/vulnerabilities/42603
CVE: CVE-2008-2497
Published: 2008-05-28
Description: CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-94
References: http://forum.mambo-foundation.org/showthread.php?t=11799; http://secunia.com/advisories/30343; http://www.securityfocus.com/bid/29373
CVE: CVE-2008-2498
Published: 2008-05-28
Description: Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) articleid and (2) mcname parameters.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://forum.mambo-foundation.org/showthread.php?t=11799; http://secunia.com/advisories/30343; http://www.securityfocus.com/bid/29373
CVE: CVE-2008-0891
Published: 2008-05-29
Description: Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service (crash) via a malformed Client Hello packet.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html; http://secunia.com/advisories/30405; http://secunia.com/advisories/30460
CVE: CVE-2008-0955
Published: 2008-05-29
Description: Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/30403; http://www.kb.cert.org/vuls/id/501843; http://www.securityfocus.com/bid/29391
CVE: CVE-2008-0958
Published: 2008-05-29
Description: Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTAudioGrabber2.dll allow remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/30414; http://secunia.com/advisories/30451; http://secunia.com/advisories/30452
CVE: CVE-2008-0959
Published: 2008-05-29
Description: Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4.0.0, (4) Alive MP3 WAV Converter 3.9.3.2, and possibly other products, allow remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/30395; http://secunia.com/advisories/30415; http://secunia.com/advisories/30418
CVE: CVE-2008-1105
Published: 2008-05-29
Description: Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00000.html; http://lists.vmware.com/pipermail/security-announce/2008/000023.html
CVE: CVE-2008-1672
Published: 2008-05-29
Description: OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses "particular cipher suites," which triggers a NULL pointer dereference.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html; http://secunia.com/advisories/30405; http://secunia.com/advisories/30460
CVE: CVE-2008-2054
Published: 2008-05-29
Description: Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute arbitrary code on a client machine via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/30422; http://www.cisco.com/en/US/products/products_security_advisory09186a00809a1f14.shtml; http://www.liquidmatrix.org/blog/2008/05/28/advisory-ciscoworks-arbitrary-code-execution-vulnerability/
CVE: CVE-2008-2137
Published: 2008-05-29
Description: The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://kerneltrap.org/mailarchive/git-commits-head/2008/5/8/1760604; http://secunia.com/advisories/30368; http://secunia.com/advisories/30499
CVE: CVE-2008-2157
Published: 2008-05-29
Description: robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified string field in a packet to TCP port 3500.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=703; http://secunia.com/advisories/30410; http://securitytracker.com/id?1020116
CVE: CVE-2008-2158
Published: 2008-05-29
Description: Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=702; http://secunia.com/advisories/30410; http://securitytracker.com/id?1020115