deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-2681
Published: 2008-06-12
Description: Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to _db/compact.asp, which reveals the database path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://bugreport.ir/index.php?/40; http://secunia.com/advisories/30583; https://exchange.xforce.ibmcloud.com/vulnerabilities/42956
CVE: CVE-2008-2682
Published: 2008-06-12
Description: _RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including (1) cUserRole, (2) cUserName, and (3) cUserID.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://bugreport.ir/index.php?/40; http://secunia.com/advisories/30583; http://www.securityfocus.com/bid/29616
CVE: CVE-2008-2683
Published: 2008-06-12
Description: The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in the second argument.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/30548; http://securityreason.com/securityalert/8276; http://securityreason.com/securityalert/8277
CVE: CVE-2008-2684
Published: 2008-06-12
Description: The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFileURL method, which trigger memory corruption.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/30548; http://www.securityfocus.com/bid/29579; http://www.vupen.com/english/advisories/2008/1768/references
CVE: CVE-2008-2685
Published: 2008-06-12
Description: SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter, a different vector than CVE-2008-2626.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.davethewebguy.com/battleblog/article.asp?entry=24; http://www.vupen.com/english/advisories/2008/1737; https://exchange.xforce.ibmcloud.com/vulnerabilities/43018
CVE: CVE-2008-2364
Published: 2008-06-13
Description: The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-770
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432; http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html
CVE: CVE-2008-2654
Published: 2008-06-13
Description: Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and compiler.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484572; http://marc.info/?l=oss-security&m=[PII_REDACTED]1820&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]1816&w=2
CVE: CVE-2008-2686
Published: 2008-06-13
Description: webinc/bxe/scripts/loadsave.php in Flux CMS 1.5.0 and earlier allows remote attackers to execute arbitrary code by overwriting a PHP file in webinc/bxe/scripts/ via a filename in the XML parameter and PHP sequences in the request body, then making a direct request for this filename.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/29618; https://exchange.xforce.ibmcloud.com/vulnerabilities/42961; https://www.exploit-db.com/exploits/5767
CVE: CVE-2008-2687
Published: 2008-06-13
Description: Directory traversal vulnerability in inc/config.php in ProManager 0.73 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/29613; https://exchange.xforce.ibmcloud.com/vulnerabilities/42962; https://www.exploit-db.com/exploits/5762
CVE: CVE-2008-2688
Published: 2008-06-13
Description: SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30176; http://www.securityfocus.com/bid/29615; https://exchange.xforce.ibmcloud.com/vulnerabilities/42946
CVE: CVE-2008-2689
Published: 2008-06-13
Description: PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arbitrary PHP code via a URL in the bcrm_pub_root parameter.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/30290; http://www.securityfocus.com/bid/29598; https://exchange.xforce.ibmcloud.com/vulnerabilities/42922
CVE: CVE-2008-2690
Published: 2008-06-13
Description: Multiple PHP remote file inclusion vulnerabilities in BrowserCRM 5.002.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the bcrm_pub_root parameter to (1) kb.php, (2) login.php, (3) index.php, (4) contact_view.php, and (5) contact.php in pub/, different vectors than CVE-2008-2689.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/30290; https://exchange.xforce.ibmcloud.com/vulnerabilities/42922; http://secunia.com/advisories/30290
CVE: CVE-2008-2691
Published: 2008-06-13
Description: SQL injection vulnerability in read.asp in JiRo's FAQ Manager eXperience 1.0 allows remote attackers to execute arbitrary SQL commands via the fID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30569; http://www.securityfocus.com/bid/29594; https://exchange.xforce.ibmcloud.com/vulnerabilities/42919
CVE: CVE-2008-2692
Published: 2008-06-13
Description: SQL injection vulnerability in the yvComment (com_yvcomment) component 1.16.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the ArticleID parameter in a comment action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30567; http://www.securityfocus.com/bid/29596; https://exchange.xforce.ibmcloud.com/vulnerabilities/42920
CVE: CVE-2008-2693
Published: 2008-06-13
Description: Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via a long first argument to the SetByteOrder method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/30548; https://exchange.xforce.ibmcloud.com/vulnerabilities/42897; https://www.exploit-db.com/exploits/5746
CVE: CVE-2008-2694
Published: 2008-06-13
Description: Cross-site scripting (XSS) vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/29597; https://exchange.xforce.ibmcloud.com/vulnerabilities/42928; https://www.exploit-db.com/exploits/5754
CVE: CVE-2008-2695
Published: 2008-06-13
Description: Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/29597; https://exchange.xforce.ibmcloud.com/vulnerabilities/42926; https://www.exploit-db.com/exploits/5754
CVE: CVE-2008-2696
Published: 2008-06-13
Description: Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and application crash) via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://bugzilla.gnome.org/show_bug.cgi?id=524715; http://dev.robotbattle.com/bugs/view.php?id=0000546; http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html
CVE: CVE-2008-2697
Published: 2008-06-13
Description: SQL injection vulnerability in the Rapid Recipe (com_rapidrecipe) component 1.6.6 and 1.6.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the recipe_id parameter in a viewrecipe action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30566; http://www.securityfocus.com/bid/29593; https://exchange.xforce.ibmcloud.com/vulnerabilities/42924
CVE: CVE-2008-2698
Published: 2008-06-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in photo_add-c.php (aka the "add comment" section) in WEBalbum 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) id, or (3) category parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3940; http://www.securityfocus.com/archive/1/493143/100/0/threaded; http://www.securityfocus.com/bid/29580
CVE: CVE-2008-2699
Published: 2008-06-13
Description: Multiple directory traversal vulnerabilities in Galatolo WebManager (GWM) 1.0 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in (1) the plugin parameter to admin/plugins.php or (2) the com parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/29595; https://exchange.xforce.ibmcloud.com/vulnerabilities/42923; https://www.exploit-db.com/exploits/5758
CVE: CVE-2008-2700
Published: 2008-06-13
Description: SQL injection vulnerability in view.php in Galatolo WebManager 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/46443; https://exchange.xforce.ibmcloud.com/vulnerabilities/42934; https://www.exploit-db.com/exploits/5760
CVE: CVE-2008-2701
Published: 2008-06-13
Description: SQL injection vulnerability in the GameQ (com_gameq) component 4.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category_id parameter in a page action to index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.org/0806-exploits/joomlagameq-sql.txt; http://secunia.com/advisories/30570; http://www.securityfocus.com/archive/1/498903/100/0/threaded
CVE: CVE-2008-2702
Published: 2008-06-13
Description: Directory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345.  NOTE: this can be leveraged for code execution by writing to a Startup folder.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/30559; http://vuln.sg/alftp41b2-en.html; http://www.securityfocus.com/bid/29585
CVE: CVE-2008-2703
Published: 2008-06-13
Description: Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NM_A_SZ_TRANSACTION_ID field name.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/30576; http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5026700.html; http://www.securityfocus.com/archive/1/493964/100/0/threaded
CVE: CVE-2008-2704
Published: 2008-06-13
Description: Novell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service (crash) via a long user ID, possibly involving a popup alert.  NOTE: it is not clear whether this issue crosses privilege boundaries.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/30576; http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5026700.html; http://www.securityfocus.com/archive/1/493964/100/0/threaded
CVE: CVE-2008-0071
Published: 2008-06-16
Description: The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/28703; http://secunia.com/advisories/30605; http://secunia.com/secunia_research/2008-7/advisory/
CVE: CVE-2008-2366
Published: 2008-06-16
Description: Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterprise Linux (RHEL) 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the ORIGIN symbol for use in the RPATH library path.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-16
References: http://secunia.com/advisories/30633; http://securitytracker.com/id?1020278; http://www.redhat.com/support/errata/RHSA-2008-0538.html
CVE: CVE-2008-2639
Published: 2008-06-16
Description: Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://isc.sans.org/diary.html?storyid=4556; http://secunia.com/advisories/30638; http://securityreason.com/securityalert/3944
CVE: CVE-2008-2705
Published: 2008-06-16
Description: Unspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain versions and configurations of Sun Directory Server Enterprise Edition (DSEE), allows remote attackers to bypass authentication via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/30652; http://sunsolve.sun.com/search/document.do?assetkey=1-26-238416-1; http://www.securityfocus.com/bid/29676
CVE: CVE-2008-2706
Published: 2008-06-16
Description: Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service (panic) by submitting and retrieving user-defined events, probably related to a NULL dereference.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/30653; http://sunsolve.sun.com/search/document.do?assetkey=1-26-235122-1; http://www.securityfocus.com/bid/29680
CVE: CVE-2008-2707
Published: 2008-06-16
Description: Unspecified vulnerability in the e1000g driver in Sun Solaris 10 and OpenSolaris before snv_93 allows remote attackers to cause a denial of service (network connectivity loss) via unknown vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/30700; http://securitytracker.com/id?1020290; http://sunsolve.sun.com/search/document.do?assetkey=1-26-238250-1
CVE: CVE-2008-1377
Published: 2008-06-16
Description: The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with crafted length values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.
CVSS Score: 9.0 (HIGH)
CWE: CWE-189
References: ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-1377.diff; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=721
CVE: CVE-2008-1379
Published: 2008-06-16
Description: Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-1379.diff; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=722
CVE: CVE-2008-1806
Published: 2008-06-16
Description: Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=715; http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html; http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html
CVE: CVE-2008-1807
Published: 2008-06-16
Description: FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=716; http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html; http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html
CVE: CVE-2008-1808
Published: 2008-06-16
Description: Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=717; http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html; http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html
CVE: CVE-2008-2360
Published: 2008-06-16
Description: Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to calculate a heap buffer size, which triggers a heap-based buffer overflow.
CVSS Score: 9.0 (HIGH)
CWE: CWE-189
References: ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2360.diff; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=718; http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
CVE: CVE-2008-2361
Published: 2008-06-16
Description: Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service (daemon crash) via unspecified request fields that are used to calculate a glyph buffer size, which triggers a dereference of unmapped memory.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2361.diff; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=719; http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
CVE: CVE-2008-2362
Published: 2008-06-16
Description: Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGradient, or (3) SProcRenderCreateConicalGradient request with an invalid field specifying the number of bytes to swap in the request data, which triggers heap memory corruption.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2362.diff; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=720; http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
CVE: CVE-2008-2708
Published: 2008-06-16
Description: Unspecified vulnerability in the Sun (1) UltraSPARC T2 and (2) UltraSPARC T2+ kernel modules in Sun Solaris 10, and OpenSolaris before snv_93, allows local users to cause a denial of service (panic) via unspecified vectors, probably related to core files.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/30654; http://sunsolve.sun.com/search/document.do?assetkey=1-26-238688-1; http://www.securityfocus.com/bid/29678
CVE: CVE-2008-2709
Published: 2008-06-16
Description: Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service (task halt and main storage dump) via unspecified vectors involving the running of diagnostics on a modem port.  NOTE: there might be limited attack scenarios.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/30554; http://www-1.ibm.com/support/docview.wss?uid=nas21f21bcbaa63f[PII_REDACTED]5e003c6f64; http://www.securityfocus.com/bid/29660
CVE: CVE-2008-2710
Published: 2008-06-16
Description: Integer signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts/common/inet/ip/ip_multi.c in the kernel in Sun Solaris 10 and OpenSolaris before snv_92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large value of the imsf->imsf_numsrc field, which triggers an out-of-bounds write of kernel memory.  NOTE: this was reported as an integer overflow, but the root cause involves the bypass of a signed comparison.
CVSS Score: 7.2 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/30693; http://sunsolve.sun.com/search/document.do?assetkey=1-26-237965-1; http://www.securityfocus.com/bid/29699
CVE: CVE-2008-2711
Published: 2008-06-16
Description: fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to cause a denial of service (crash and persistent mail failure) via a malformed mail message with long headers, which triggers an erroneous dereference when using vsnprintf to format log messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html; http://secunia.com/advisories/30742; http://secunia.com/advisories/30895
CVE: CVE-2008-2712
Published: 2008-06-16
Description: Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw.  NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298.  NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html