deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-5900
Published: 2009-01-12
Description: CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CAArticles.mdb.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/33100; http://securityreason.com/securityalert/4909; https://exchange.xforce.ibmcloud.com/vulnerabilities/47351
CVE: CVE-2008-5901
Published: 2009-01-12
Description: iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for db/iyziforum.mdb.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://securityreason.com/securityalert/4908; https://exchange.xforce.ibmcloud.com/vulnerabilities/47330; https://www.exploit-db.com/exploits/7449
CVE: CVE-2008-4307
Published: 2009-01-13
Description: Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=c4d7c402b788b73dc24f1e54a57f89d3dc5eb7bc; http://openwall.com/lists/oss-security/2009/01/13/1; http://rhn.redhat.com/errata/RHSA-2009-0459.html
CVE: CVE-2008-5262
Published: 2009-01-13
Description: Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/il_hdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/33470; http://secunia.com/advisories/33637; http://secunia.com/advisories/33801
CVE: CVE-2008-5517
Published: 2009-01-13
Description: The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters related to (1) git_snapshot and (2) git_object.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512330; http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00002.html; http://repo.or.cz/w/git.git?a=commitdiff%3Bh=516381d5
CVE: CVE-2009-0024
Published: 2009-01-13
Description: The sys_remap_file_pages function in mm/fremap.c in the Linux kernel before 2.6.24.1 allows local users to cause a denial of service or gain privileges via unspecified vectors, related to the vm_file structure member, and the mmap_region and do_munmap functions.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.24.y.git%3Ba=commit%3Bh=8a459e44ad837018ea5c34a9efe8eb4ad27ded26; http://openwall.com/lists/oss-security/2009/01/12/1; http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1
CVE: CVE-2008-3973
Published: 2009-01-14
Description: Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database allows local users to affect confidentiality via unknown vectors.
CVSS Score: 1.7 (LOW)
References: http://osvdb.org/51351; http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-3974
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.0.2.8 and 9.2.0.8DV allows remote authenticated users to affect availability, related to SYS.OLAPIMPL_T.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/51347; http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-3978
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://osvdb.org/51353; http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-3979
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.  NOTE: the previous information was obtained from the January 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability that allows remote authenticated users to gain MDSYS privileges via the MDSYS.SDO_TOPO_DROP_FTBL trigger.
CVSS Score: 5.5 (MEDIUM)
References: http://osvdb.org/51354; http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-3981
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/51341; http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-3997
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 and 10.2.0.3 allows remote authenticated users to affect availability, related to SYS.DBMS_XSOQ_ODBO.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-3999
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to SYS.OLAPIMPL_T.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/51349; http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-4006
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-4015
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Streams component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_STREAMS_AUTH.
CVSS Score: 5.5 (MEDIUM)
References: http://osvdb.org/51345; http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-5436
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect integrity and availability via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://osvdb.org/51346; http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-5437
Published: 2009-01-14
Description: Unspecified vulnerability in the Job Queue component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_IJOB.
CVSS Score: 5.5 (MEDIUM)
References: http://osvdb.org/51352; http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-5439
Published: 2009-01-14
Description: Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/51350; http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-5440
Published: 2009-01-14
Description: Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this is a format string vulnerability via the msg parameter in the evtdump CGI module.
CVSS Score: 7.5 (HIGH)
References: http://joxeankoret.com/blog/?p=41; http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-5441
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5442 and CVE-2008-5443.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5442
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5441 and CVE-2008-5443.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5444
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5448
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5449.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5449
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5448.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-2623
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-4007
Published: 2009-01-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise Components component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-4014
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle BPEL Process Manager component in Oracle Application Server allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-4016
Published: 2009-01-14
Description: Unspecified vulnerability in the Collaborative Workspaces component in Oracle Collaboration Suite 10.1.2 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-4017
Published: 2009-01-14
Description: Unspecified vulnerability in the OC4J component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5438
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5443
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5441 and CVE-2008-5442.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5445
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors.  NOTE: the previous information was obtained from the January 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is a denial of service in observiced.exe via malformed private Protocol data that triggers a NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.fortiguardcenter.com/advisory/FGA-2009-02.html; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-5446
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors.  NOTE: the previous information was obtained from the January 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is related to unrestricted guest access to the "About Us Page" in the Oracle Applications Framework (OAF), which allows attackers to obtain sensitive system and application environment information.
CVSS Score: 3.5 (LOW)
References: http://secniche.org/papers/orabs.pdf; http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-5447
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5450
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Applications Platform Engineering component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows local users to affect confidentiality via unknown vectors.
CVSS Score: 1.2 (LOW)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5451
Published: 2009-01-14
Description: Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.5 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5452
Published: 2009-01-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5454
Published: 2009-01-14
Description: Unspecified vulnerability in the iProcurement component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5455
Published: 2009-01-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS - ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5456
Published: 2009-01-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5457
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/33526; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5458
Published: 2009-01-14
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 and CU2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5459
Published: 2009-01-14
Description: Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/33526; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5460
Published: 2009-01-14
Description: Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://secunia.com/advisories/33526; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-5461
Published: 2009-01-14
Description: Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0, and SP7 allows remote attackers to affect confidentiality, integrity, and availability, related to WLS.  NOTE: the previous information was obtained from the January 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is cross-site scripting.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-200, CWE-264
References: http://jvn.jp/en/jp/JVN93431860/index.html; http://secunia.com/advisories/33526; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
CVE: CVE-2008-5462
Published: 2009-01-14
Description: Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177; http://www.securitytracker.com/id?1021571
CVE: CVE-2008-5463
Published: 2009-01-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/33525; http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html; http://www.securityfocus.com/bid/33177
CVE: CVE-2008-4834
Published: 2009-01-14
Description: Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans request, aka "SMB Buffer Overflow Remote Code Execution Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/archive/1/500012/100/0/threaded; http://www.securityfocus.com/bid/33121; http://www.securitytracker.com/id?1021560
CVE: CVE-2008-4835
Published: 2009-01-14
Description: SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans2 request, related to "insufficiently validating the buffer size," aka "SMB Validation Remote Code Execution Vulnerability."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: http://www.securityfocus.com/archive/1/500013/100/0/threaded; http://www.securityfocus.com/bid/33122; http://www.securitytracker.com/id?1021560