deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-5828
Published: 2009-01-02
Description: Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAndPorts, (2) IPv4Internal-Addrs, and (3) IPv4Internal-Port header fields.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/4862; http://www.securityfocus.com/archive/1/499624/100/0/threaded; http://securityreason.com/securityalert/4862
CVE: CVE-2008-5838
Published: 2009-01-05
Description: SQL injection vulnerability in search_results.php in E-Php Scripts E-Shop (aka E-Php Shopping Cart) Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31506; http://www.securityfocus.com/bid/30692; http://www.securityfocus.com/bid/31319
CVE: CVE-2008-5839
Published: 2009-01-05
Description: Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attribute of an A element.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.sebug.net/exploit/4681/; http://www.securityfocus.com/bid/31294; https://exchange.xforce.ibmcloud.com/vulnerabilities/45343
CVE: CVE-2008-5840
Published: 2009-01-05
Description: PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendar_login cookies to 1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://securityreason.com/securityalert/4865; http://www.securityfocus.com/bid/31320; https://exchange.xforce.ibmcloud.com/vulnerabilities/45338
CVE: CVE-2008-5841
Published: 2009-01-05
Description: Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to (1) previews.php and (2) reviews.php, and the (3) id parameter to index.php in a viewarticle action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4867; http://www.securityfocus.com/bid/31340; https://exchange.xforce.ibmcloud.com/vulnerabilities/45366
CVE: CVE-2004-2761
Published: 2009-01-05
Description: The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://blog.mozilla.com/security/2008/12/30/md5-weaknesses-could-lead-to-certificate-forgery/; http://blogs.technet.com/swi/archive/2008/12/30/information-regarding-md5-collisions-problem.aspx; http://secunia.com/advisories/33826
CVE: CVE-2008-5842
Published: 2009-01-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via vectors associated with (1) a demo application shipped with WebTransactions and possibly (2) an unspecified "dynamic application."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english; http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english
CVE: CVE-2008-5843
Published: 2009-01-05
Description: Multiple untrusted search path vulnerabilities in pdfjam allow local users to gain privileges via a Trojan horse program in (1) the current working directory or (2) /var/tmp, related to the (a) pdf90, (b) pdfjoin, and (c) pdfnup scripts.
CVSS Score: 4.6 (MEDIUM)
References: http://openwall.com/lists/oss-security/2008/12/28/3; http://secunia.com/advisories/34312; https://bugs.gentoo.org/show_bug.cgi?id=252734
CVE: CVE-2008-5844
Published: 2009-01-05
Description: PHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and unintentionally disables magic_quotes_gpc regardless of the actual magic_quotes_gpc setting, which might make it easier for context-dependent attackers to conduct SQL injection attacks and unspecified other attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: http://bugs.php.net/bug.php?id=42718; http://bugs.php.net/bug.php?id=46759; http://www.php.net/ChangeLog-5.php#5.2.8
CVE: CVE-2008-5845
Published: 2009-01-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in Six Apart Movable Type (MT) before 4.23 allow remote attackers to inject arbitrary web script or HTML via a (1) MTEntryAuthorUsername, (2) MTAuthorDisplayName, (3) MTEntryAuthorDisplayName, or (4) MTCommenterName field in a Profile View template; a (5) listing screen or (6) edit screen in the CMS app; (7) a TrackBack title, related to the HTML sanitization library; or (8) a user archive name (aka archive title) on a published Community Blog template.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN45658190/index.html; http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000031.html; http://www.movabletype.org/mt_423_change_log.html
CVE: CVE-2008-5846
Published: 2009-01-05
Description: Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system-wide entry listing screen."
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www.movabletype.org/mt_423_change_log.html; http://www.securityfocus.com/bid/33133; https://exchange.xforce.ibmcloud.com/vulnerabilities/47759
CVE: CVE-2008-5847
Published: 2009-01-05
Description: Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column.
CVSS Score: 2.6 (LOW)
CWE: CWE-255
References: http://securityreason.com/securityalert/4868; https://www.exploit-db.com/exploits/7529; http://securityreason.com/securityalert/4868
CVE: CVE-2009-0022
Published: 2009-01-05
Description: Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20
References: http://master.samba.org/samba/ftp/patches/security/samba-3.2.6-CVE-2009-0022.patch; http://osvdb.org/51152; http://secunia.com/advisories/33379
CVE: CVE-2008-5848
Published: 2009-01-06
Description: The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and (1) monitor or (2) control the module's Modbus/TCP I/O activity.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://ruxcon.org.au/files/2008/SIFT-Ruxcon2008-SCADA-Hacking-Modbus-Enabled-Devices.pdf; http://support.advantech.com.tw/support/DownloadSRDetail.aspx?SR_ID=1-95WMW; http://www.ruxcon.org.au/presentations.shtml#13
CVE: CVE-2008-5849
Published: 2009-01-06
Description: Check Point VPN-1 R55, R65, and other versions, when Port Address Translation (PAT) is used, allows remote attackers to discover intranet IP addresses via a packet with a small TTL, which triggers an ICMP_TIMXCEED_INTRANS (aka ICMP time exceeded in-transit) response containing an encapsulated IP packet with an intranet address, as demonstrated by a TCP packet to the firewall management server on port 18264.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/32728; http://www.portcullis-security.com/293.php; http://www.securityfocus.com/bid/32306
CVE: CVE-2008-5850
Published: 2009-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate was originally recorded for a "SPLAT Remote Root Exploit" that was claimed to exist for Check Point SmartCenter.  The claim has no actionable details and was disclosed by a person of unknown reliability who did not coordinate with the vendor.  No people of known reliability have confirmed the original claim.  The vendor has not indicated that they are aware of any vulnerability.  Since the claim has no actionable details or independent verification, it is outside the scope of CVE according to current inclusion criteria
CVE: CVE-2008-5851
Published: 2009-01-06
Description: SQL injection vulnerability in index.php in My PHP Baseball Stats (MyPBS) allows remote attackers to execute arbitrary SQL commands via the seasonID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4869; http://www.securityfocus.com/bid/32930; https://exchange.xforce.ibmcloud.com/vulnerabilities/47498
CVE: CVE-2008-5852
Published: 2009-01-06
Description: Emefa Guestbook 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for guestbook.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/33245; http://securityreason.com/securityalert/4876; https://exchange.xforce.ibmcloud.com/vulnerabilities/47534
CVE: CVE-2008-5853
Published: 2009-01-06
Description: Chilek Content Management System (aka ChiCoMaS) 2.0.4 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to (1) obtain database credentials via a direct request for config.inc or (2) read database backups via a request for a backup/ URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/30080; http://securityreason.com/securityalert/4872; http://www.bugreport.ir/index_59.htm
CVE: CVE-2008-5854
Published: 2009-01-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) ls_user and (2) ls_email parameters (aka the User form) in an ls_register action.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/33253; http://securityreason.com/securityalert/4873; http://www.securityfocus.com/bid/32941
CVE: CVE-2008-5855
Published: 2009-01-06
Description: myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/33253; http://securityreason.com/securityalert/4873; https://exchange.xforce.ibmcloud.com/vulnerabilities/47502
CVE: CVE-2008-5856
Published: 2009-01-06
Description: Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrary files via directory traversal sequences in the ftype parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/50807; http://secunia.com/advisories/33222; http://sourceforge.net/project/shownotes.php?release_id=648307
CVE: CVE-2008-5857
Published: 2009-01-06
Description: The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests.
CVSS Score: 6.5 (MEDIUM)
References: http://issues.knowledgetree.com/browse/KTS-3921; http://secunia.com/advisories/33277; http://wiki.knowledgetree.com/Version_3.5.4a#Security
CVE: CVE-2008-5858
Published: 2009-01-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-4281.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/33277; http://wiki.knowledgetree.com/Version_3.5.4a#Security; http://www.securityfocus.com/bid/32920
CVE: CVE-2008-5859
Published: 2009-01-06
Description: SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the show_page parameter.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/33250; http://securityreason.com/securityalert/4868; http://www.securityfocus.com/bid/32956
CVE: CVE-2008-5860
Published: 2009-01-06
Description: Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the edit_file parameter.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/33250; http://securityreason.com/securityalert/4868; https://www.exploit-db.com/exploits/7529
CVE: CVE-2008-5861
Published: 2009-01-06
Description: Directory traversal vulnerability in source.php in FreeLyrics 1.0 allows remote attackers to read arbitrary files via directory traversal sequences in the p parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/33252; http://securityreason.com/securityalert/4875; http://www.securityfocus.com/bid/32946
CVE: CVE-2008-5862
Published: 2009-01-06
Description: Directory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/33257; http://securityreason.com/securityalert/4877; http://www.securityfocus.com/bid/32928
CVE: CVE-2008-5863
Published: 2009-01-06
Description: SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote attackers to execute arbitrary SQL commands via the y parameter in a get_user action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4874; http://www.securityfocus.com/bid/32960; https://exchange.xforce.ibmcloud.com/vulnerabilities/47887
CVE: CVE-2008-5864
Published: 2009-01-06
Description: SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4871; http://www.securityfocus.com/bid/32952; https://exchange.xforce.ibmcloud.com/vulnerabilities/47540
CVE: CVE-2008-5865
Published: 2009-01-06
Description: SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the r_type parameter in a showhoteldetails action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/33215; http://securityreason.com/securityalert/4870; http://www.securityfocus.com/bid/32951
CVE: CVE-2008-5077
Published: 2009-01-07
Description: OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html
CVE: CVE-2009-0021
Published: 2009-01-07
Description: NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
CVE: CVE-2009-0025
Published: 2009-01-07
Description: BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33; http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8471&w=2
CVE: CVE-2009-0046
Published: 2009-01-07
Description: Sun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://www.ocert.org/advisories/ocert-2008-016.html; http://www.securityfocus.com/archive/1/499827/100/0/threaded; http://www.vupen.com/english/advisories/2009/0045
CVE: CVE-2009-0047
Published: 2009-01-07
Description: Gale 0.99 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287, CWE-310
References: http://www.ocert.org/advisories/ocert-2008-016.html; http://www.securityfocus.com/archive/1/499827/100/0/threaded; http://www.vupen.com/english/advisories/2009/0046
CVE: CVE-2009-0048
Published: 2009-01-07
Description: OpenEvidence 1.0.6 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://www.ocert.org/advisories/ocert-2008-016.html; http://www.securityfocus.com/archive/1/499827/100/0/threaded; http://www.vupen.com/english/advisories/2009/0047
CVE: CVE-2009-0049
Published: 2009-01-07
Description: Belgian eID middleware (eidlib) 2.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html; http://secunia.com/advisories/34029; http://www.ocert.org/advisories/ocert-2008-016.html
CVE: CVE-2009-0050
Published: 2009-01-07
Description: Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.ocert.org/advisories/ocert-2008-016.html; http://www.securityfocus.com/archive/1/499827/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/47837
CVE: CVE-2009-0051
Published: 2009-01-07
Description: ZXID 0.29 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://www.ocert.org/advisories/ocert-2008-016.html; http://www.securityfocus.com/archive/1/499827/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/47837
CVE: CVE-2009-0065
Published: 2009-01-07
Description: Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fcb95a105758b81ef0131cd18e2db5149f13e95; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832118; http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html
CVE: CVE-2009-0066
Published: 2009-01-07
Description: Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology (TXT) allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation of tboot.  NOTE: as of 20090107, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
CVSS Score: 7.6 (HIGH)
References: http://blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Wojtczuk; http://invisiblethingslab.com/press/itl-press-2009-01.pdf; http://theinvisiblethings.blogspot.com/2009/01/attacking-intel-trusted-execution.html
CVE: CVE-2009-0068
Published: 2009-01-07
Description: Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by overwriting the .desktop file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://www.openwall.com/lists/oss-security/2009/01/06/1; http://www.securityfocus.com/bid/33137; https://bugs.freedesktop.org/show_bug.cgi?id=19377
CVE: CVE-2008-5866
Published: 2009-01-07
Description: The Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 has public as its default SNMP read/write community, which makes it easier for remote attackers to obtain sensitive information or modify SNMP variables.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://securityreason.com/securityalert/4884; http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-24; http://www.securityfocus.com/archive/1/497182/100/0/threaded
CVE: CVE-2008-5867
Published: 2009-01-07
Description: Directory traversal vulnerability in Yerba SACphp 6.3 allows remote attackers to read arbitrary files, and possibly have other impact, via directory traversal sequences in the mod field contained in the base64-encoded SID parameter to an unspecified component.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/32093; http://www.securityfocus.com/bid/31619; https://exchange.xforce.ibmcloud.com/vulnerabilities/45733
CVE: CVE-2009-0069
Published: 2009-01-07
Description: Unspecified vulnerability in the nfs4rename_persistent_fh function in the NFS 4 (aka NFSv4) client in the kernel in Sun Solaris 10 and OpenSolaris before snv_102 allows local users to cause a denial of service (recursive mutex_enter and panic) via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://mail.opensolaris.org/pipermail/onnv-notify/2008-October/015342.html; http://secunia.com/advisories/33361; http://sunsolve.sun.com/search/document.do?assetkey=1-21-139466-02-1
CVE: CVE-2008-5868
Published: 2009-01-08
Description: Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows user-assisted attackers to execute arbitrary code via a long ProxyLogin value in a configuration (.cfg) file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/4882; https://www.exploit-db.com/exploits/7608; http://securityreason.com/securityalert/4882