deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-2628
Published: 2009-09-08
Description: The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows does not properly handle certain small heights in video content, which might allow remote attackers to execute arbitrary code via a crafted AVI file that triggers heap memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.vmware.com/pipermail/security-announce/2009/000065.html; http://secunia.com/advisories/34938; http://www.kb.cert.org/vuls/id/444513
CVE: CVE-2009-3103
Published: 2009-09-08
Description: Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka "SMBv2 Negotiation Vulnerability." NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0090.html; http://blog.48bits.com/?p=510; http://g-laurent.blogspot.com/2009/09/windows-vista7-smb20-negotiate-protocol.html
CVE: CVE-2009-3104
Published: 2009-09-08
Description: Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning is installed and enabled, allows remote attackers to cause a denial of service (CPU consumption and persistent connection loss) via unknown attack vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://osvdb.org/57429; http://secunia.com/advisories/36493; http://www.securityfocus.com/bid/34670
CVE: CVE-2009-3105
Published: 2009-09-08
Description: Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 211.241 for Domino 8.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR EZEL7UURYC.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/36626; http://www-01.ibm.com/support/docview.wss?uid=swg27016745; http://www.securityfocus.com/bid/36292
CVE: CVE-2009-3106
Published: 2009-09-08
Description: The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.37 does not properly implement security constraints on the (1) doGet and (2) doTrace methods, which allows remote attackers to bypass intended access restrictions and obtain sensitive information via a crafted HTTP HEAD request to a Web Application.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg27006876; http://www-1.ibm.com/support/docview.wss?uid=swg1PK83258; https://exchange.xforce.ibmcloud.com/vulnerabilities/53051
CVE: CVE-2008-7183
Published: 2009-09-08
Description: PHP remote file inclusion vulnerability in eva/index.php in EVA CMS 2.3.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the eva[caminho] parameter to index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://packetstorm.linuxsecurity.com/0806-exploits/evacms-rfi.txt; http://www.securityfocus.com/bid/29954; https://exchange.xforce.ibmcloud.com/vulnerabilities/43437
CVE: CVE-2008-7184
Published: 2009-09-08
Description: Cross-site scripting (XSS) vulnerability in Diigo Toolbar and Diigolet allows remote attackers to inject arbitrary web script or HTML via a public comment.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/493531/100/0/threaded; http://www.securityfocus.com/bid/29611; https://exchange.xforce.ibmcloud.com/vulnerabilities/43301
CVE: CVE-2008-7185
Published: 2009-09-08
Description: GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlist (.pls) file with a long Title field, possibly related to the g_hash_table_lookup function in b-playlist-manager.c.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.org/0806-advisories/rhythmbox-dos.txt; http://www.securityfocus.com/archive/1/493683/100/0/threaded; http://www.securityfocus.com/archive/1/493809/100/0/threaded
CVE: CVE-2009-0627
Published: 2009-09-08
Description: Unspecified vulnerability in Cisco NX-OS before 4.0(1a)N2(1), when running on Nexus 5000 platforms, allows remote attackers to cause a denial of service (crash) via an unspecified "sequence of TCP packets" related to "TCP State manipulation," possibly related to separate attacks against CVE-2008-4609.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml; http://www.securitytracker.com/id?1022847; http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml
CVE: CVE-2009-2139
Published: 2009-09-08
Description: Heap-based buffer overflow in svtools/source/filter.vcl/wmf/enhwmf.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allows remote attackers to execute arbitrary code via a crafted EMF file, a similar issue to CVE-2008-2238.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://cgit.freedesktop.org/ooo-build/ooo-build/commit/?id=49b4e38571912a7d28c4044e5b2bd57e51c77d55; http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html; http://marc.info/?l=oss-security&m=[PII_REDACTED]0739&w=2
CVE: CVE-2009-2632
Published: 2009-09-08
Description: Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to the incorrect use of the sizeof operator for determining buffer length, combined with an integer signedness error.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119
References: http://dovecot.org/list/dovecot-news/2009-September/000135.html; http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
CVE: CVE-2009-3107
Published: 2009-09-08
Description: Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/36502; http://www.securityfocus.com/bid/36110; http://www.securitytracker.com/id?1022779
CVE: CVE-2009-3108
Published: 2009-09-08
Description: The Aclient GUI in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 installs a client executable with insecure permissions (Everyone:Full Control), which allows local users to gain privileges by replacing the executable with a Trojan horse program.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/36502; http://www.securityfocus.com/bid/36111; http://www.securitytracker.com/id?1022779
CVE: CVE-2009-3109
Published: 2009-09-08
Description: Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authentication is being used between a deployment server and a client, allows remote attackers to bypass authentication and execute arbitrary commands as SYSTEM by spoofing the deployment server and sending "alternate commands" before the handshake is completed.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/36502; http://www.securityfocus.com/bid/36112; http://www.securitytracker.com/id?1022779
CVE: CVE-2009-3110
Published: 2009-09-08
Description: Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-362
References: http://secunia.com/advisories/36502; http://www.securityfocus.com/bid/36113; http://www.securitytracker.com/id?1022779
CVE: CVE-2008-7186
Published: 2009-09-09
Description: Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/archive/1/487351/100/200/threaded; http://www.securitytracker.com/id?1019285; http://www.vupen.com/english/advisories/2008/0367
CVE: CVE-2008-7187
Published: 2009-09-09
Description: Coppermine Photo Gallery (CPG) 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/archive/1/487351/100/200/threaded; http://www.securitytracker.com/id?1019285; http://www.vupen.com/english/advisories/2008/0367
CVE: CVE-2008-7188
Published: 2009-09-09
Description: ClipShare 2.6 does not properly restrict access to certain functionality, which allows remote attackers to change the profile of arbitrary users via a modified uid variable to siteadmin/useredit.php. NOTE: this can be used to recover the password of the user by using the modified e-mail address in the email parameter to recoverpass.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/28313; http://www.securityfocus.com/bid/27148; https://exchange.xforce.ibmcloud.com/vulnerabilities/39494
CVE: CVE-2008-7189
Published: 2009-09-09
Description: Multiple unspecified vulnerabilities in Local Media Browser before 0.1 have unknown impact and attack vectors related to "Security holes."
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0019.html; http://freshmeat.net/projects/localmediabrowser/releases/269578; http://osvdb.org/40529
CVE: CVE-2008-7190
Published: 2009-09-09
Description: Unspecified vulnerability in Adium before 1.2 has unknown impact and attack vectors related to javascript: URLs, possibly cross-site scripting (XSS).
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/41802; http://trac.adium.im/wiki/PreviousVersionHistory; http://osvdb.org/41802
CVE: CVE-2008-7191
Published: 2009-09-09
Description: Unspecified vulnerability in Polipo before 1.0.4 allows remote attackers to cause a denial of service (crash) via a long request URL.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/39912; http://www.pps.jussieu.fr/~jch/software/polipo/CHANGES.text; http://osvdb.org/39912
CVE: CVE-2009-2266
Published: 2009-09-09
Description: OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information (session details and order history of other users) via a crafted cookie.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.oxidforge.org/wiki/Security_bulletins/2009-003; http://www.oxidforge.org/wiki/Security_bulletins/2009-003
CVE: CVE-2009-3111
Published: 2009-09-09
Description: The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11.  NOTE: this is a regression error related to CVE-2003-0967.
CVSS Score: 5.0 (MEDIUM)
References: http://github.com/alandekok/freeradius-server/commit/860cad9e02ba344edb0038419e415fe05a9a01f4; http://intevydis.com/vd-list.shtml; http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
CVE: CVE-2008-7192
Published: 2009-09-09
Description: Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a different vulnerability than CVE-2008-0472.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/archive/1/487139/100/200/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/39990; http://www.securityfocus.com/archive/1/487139/100/200/threaded
CVE: CVE-2008-7193
Published: 2009-09-09
Description: PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by reading the PHPKITSID parameter from the HTTP Referer and using it in a request to (1) modify the user profile via upload_files/include.php or (2) create a new administrator via upload_files/pk/include.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/50998; http://www.securityfocus.com/archive/1/487249/100/200/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/40033
CVE: CVE-2009-3112
Published: 2009-09-09
Description: Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter.
CVSS Score: 10.0 (HIGH)
References: http://www.oxidforge.org/wiki/Security_bulletins/2009-001; http://www.oxidforge.org/wiki/Security_bulletins/2009-001
CVE: CVE-2009-3113
Published: 2009-09-09
Description: Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oxidforge.org/wiki/Security_bulletins/2009-002; http://www.oxidforge.org/wiki/Security_bulletins/2009-002
CVE: CVE-2009-2205
Published: 2009-09-09
Description: Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html; http://securitytracker.com/id?1022820; http://www.vupen.com/english/advisories/2009/2543
CVE: CVE-2009-3114
Published: 2009-09-09
Description: The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/36813; http://www-01.ibm.com/support/docview.wss?uid=swg21403834; http://www.scip.ch/?vuldb.4021
CVE: CVE-2009-3115
Published: 2009-09-09
Description: SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/36505; http://www.exploit-db.com/exploits/9547; http://www.securityfocus.com/bid/36182
CVE: CVE-2009-3116
Published: 2009-09-09
Description: SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the year parameter in a calendar action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/57464; http://secunia.com/advisories/36479; http://www.exploit-db.com/exploits/9535
CVE: CVE-2009-3117
Published: 2009-09-09
Description: SQL injection vulnerability in category.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/36124; http://www.exploit-db.com/exploits/9538; http://www.vupen.com/english/advisories/2009/2467
CVE: CVE-2009-3118
Published: 2009-09-09
Description: SQL injection vulnerability in mod/poll/comment.php in the vote module in Danneo CMS 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the comtext parameter, in conjunction with crafted comname and comtitle parameters, in a poll action to index.php, related to incorrect input sanitization in base/danneo.function.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0908-exploits/danneo052-sql.txt; http://secunia.com/advisories/36440; http://www.vupen.com/english/advisories/2009/2459
CVE: CVE-2009-3119
Published: 2009-09-09
Description: SQL injection vulnerability in screen.php in the Download System mSF (dsmsf) module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the view_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0908-exploits/phpfusiondsmsf-sql.txt; http://www.securityfocus.com/bid/36180; http://www.vupen.com/english/advisories/2009/2469
CVE: CVE-2009-3120
Published: 2009-09-09
Description: Cross-site scripting (XSS) vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bigace.cvs.sourceforge.net/viewvc/bigace/BIGACE/CORE/public/index.php?revision=1.22&view=markup; http://secunia.com/advisories/36523; http://bigace.cvs.sourceforge.net/viewvc/bigace/BIGACE/CORE/public/index.php?revision=1.22&view=markup
CVE: CVE-2009-3121
Published: 2009-09-09
Description: Cross-site scripting (XSS) vulnerability in the Ajax Table module 5.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/560298; http://osvdb.org/57436; http://secunia.com/advisories/36497
CVE: CVE-2009-3122
Published: 2009-09-09
Description: The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://drupal.org/node/560298; http://secunia.com/advisories/36497; http://www.osvdb.org/57435
CVE: CVE-2009-3123
Published: 2009-09-09
Description: Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the image parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/57426; http://packetstormsecurity.org/0908-exploits/wapmotor-lfi.txt; http://secunia.com/advisories/36416
CVE: CVE-2009-3124
Published: 2009-09-09
Description: Directory traversal vulnerability in get_message.cgi in QuarkMail allows remote attackers to read arbitrary files via a .. (dot dot) in the tf parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/0908-exploits/quarkmail-lfi.txt; http://www.vupen.com/english/advisories/2009/2460; http://packetstormsecurity.org/0908-exploits/quarkmail-lfi.txt
CVE: CVE-2007-6729
Published: 2009-09-10
Description: Cross-site scripting (XSS) vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2007/Dec/0559.html; http://secunia.com/advisories/28172; http://www.securityfocus.com/bid/27024
CVE: CVE-2007-6730
Published: 2009-09-10
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that (1) enable remote router management via goform/formRmtMgt or (2) modify the administrator password via goform/formPasswordSetup.
CVSS Score: 9.3 (HIGH)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2007/Dec/0559.html; http://secunia.com/advisories/28172; http://www.securityfocus.com/bid/27024
CVE: CVE-2008-7194
Published: 2009-09-10
Description: Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, and 8.0.0 for Windows, allows attackers to cause a denial of service via a crafted request.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/28606; http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html; http://www.securityfocus.com/bid/27391
CVE: CVE-2008-7195
Published: 2009-09-10
Description: Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Edition 7.0.1 for Solaris, allows attackers to cause a denial of service via unknown vectors related to SSL.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/28606; http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html; http://www.securityfocus.com/bid/27391
CVE: CVE-2008-7196
Published: 2009-09-10
Description: Unspecified vulnerability in metashell before 0.03 has unknown impact and attack vectors related to a "PATH execution security flaw," possibly an untrusted search path vulnerability.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0032.html; http://osvdb.org/40573; http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0032.html
CVE: CVE-2008-7197
Published: 2009-09-10
Description: Multiple unspecified vulnerabilities in G15Daemon before 1.9.4 have unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0019.html; http://osvdb.org/40528; http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0019.html
CVE: CVE-2008-7198
Published: 2009-09-10
Description: Multiple unspecified vulnerabilities in phpns before 2.1.1beta1 have unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0029.html; http://osvdb.org/40571; http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0029.html
CVE: CVE-2008-7199
Published: 2009-09-10
Description: Phoenix Contact FL IL 24 BK-PAC allows remote attackers to cause a denial of service (hang) via (1) unspecified manipulations as demonstrated by a Nessus scan or (2) malformed input to TCP port 502.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0268.html; http://osvdb.org/51002; http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0268.html
CVE: CVE-2008-7200
Published: 2009-09-10
Description: Double free vulnerability in Deliantra server engine before 2.4 has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://cvs.schmorp.de/cf.schmorp.de/server/Changes; http://osvdb.org/48898; http://cvs.schmorp.de/cf.schmorp.de/server/Changes
CVE: CVE-2008-7201
Published: 2009-09-10
Description: Lantronix MSS485-T allows remote attackers to cause a denial of service (unstable performance and service loss) via certain vulnerability scans, as demonstrated using (1) Nessus and (2) nmap.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0487.html; http://osvdb.org/51003; http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0487.html