deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-0688
Published: 2008-02-12
Description: Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/28774; http://securityreason.com/securityalert/3633; http://www.securityfocus.com/archive/1/487433/100/0/threaded
CVE: CVE-2008-0689
Published: 2008-02-12
Description: SQL injection vulnerability in index.php in the Marketplace (com_marketplace) 1.1.1 and 1.1.1-pl1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_category action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/27600; https://www.exploit-db.com/exploits/5055; http://www.securityfocus.com/bid/27600
CVE: CVE-2008-0690
Published: 2008-02-12
Description: SQL injection vulnerability in index.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a viewcat action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/27585; https://www.exploit-db.com/exploits/5047; http://www.securityfocus.com/bid/27585
CVE: CVE-2008-0691
Published: 2008-02-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) wp_footnotes_current_settings[priority], (2) wp_footnotes_current_settings[style_rules], (3) wp_footnotes_current_settings[pre_footnotes], and (4) wp_footnotes_current_settings[post_footnotes] parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/28772; http://securityreason.com/securityalert/3634; http://www.securityfocus.com/archive/1/487430/100/0/threaded
CVE: CVE-2008-0692
Published: 2008-02-12
Description: SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/28780; http://www.securityfocus.com/bid/27601; https://www.exploit-db.com/exploits/5056
CVE: CVE-2008-0693
Published: 2008-02-12
Description: Stack-based buffer overflow in PQCore.exe in Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 allows remote attackers to cause a denial of service (service outage) via a series of long packets to TCP port 48101.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/pqcorez-adv.txt; http://secunia.com/advisories/28741; http://www.securityfocus.com/bid/27604
CVE: CVE-2008-0694
Published: 2008-02-12
Description: Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/28744; http://www-1.ibm.com/support/docview.wss?uid=nas22f5a0f082f6821c4862573e10041f7bd; http://www.securityfocus.com/bid/27595
CVE: CVE-2008-0695
Published: 2008-02-12
Description: SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a showtopic action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/5040; https://www.exploit-db.com/exploits/5040
CVE: CVE-2008-0696
Published: 2008-02-12
Description: IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown impact and attack vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT; http://secunia.com/advisories/28771; http://www-1.ibm.com/support/docview.wss?uid=swg1IZ07337
CVE: CVE-2008-0697
Published: 2008-02-12
Description: Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT; http://secunia.com/advisories/28771; http://www-1.ibm.com/support/docview.wss?uid=swg1IZ03546
CVE: CVE-2008-0698
Published: 2008-02-12
Description: Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probably involving "invalid memory access."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT; http://secunia.com/advisories/28771; http://www-1.ibm.com/support/docview.wss?uid=swg1IZ05496
CVE: CVE-2008-0699
Published: 2008-02-12
Description: Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors.
CVSS Score: 9.0 (HIGH)
References: ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT; http://osvdb.org/41795; http://secunia.com/advisories/28771
CVE: CVE-2008-0700
Published: 2008-02-12
Description: Cross-site scripting (XSS) vulnerability in search.php in Crux Software CruxCMS 3.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://downloads.securityfocus.com/vulnerabilities/exploits/27588.html; http://www.securityfocus.com/bid/27588; http://downloads.securityfocus.com/vulnerabilities/exploits/27588.html
CVE: CVE-2008-0701
Published: 2008-02-12
Description: ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://jira.magnolia.info/browse/MAGNOLIA-2021; http://secunia.com/advisories/28745; http://sourceforge.net/project/shownotes.php?release_id=573088
CVE: CVE-2008-0702
Published: 2008-02-12
Description: Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of service (daemon crash or hang) and possibly execute arbitrary code via a long argument to the (1) USER or (2) PASS command, different vectors than CVE-2004-1641.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28760; http://securityreason.com/securityalert/3639; http://www.securityfocus.com/archive/1/487431/100/0/threaded
CVE: CVE-2008-0703
Published: 2008-02-12
Description: Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) permalink or (2) section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://securityreason.com/securityalert/3629; http://www.securityfocus.com/archive/1/487368/100/0/threaded; http://www.securityfocus.com/bid/27541
CVE: CVE-2008-0215
Published: 2008-02-12
Description: Multiple unspecified vulnerabilities in HP Storage Essentials Storage Resource Management (SRM) before 6.0.0 allow remote attackers to obtain unspecified access to a managed device via unknown attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01316132; http://secunia.com/advisories/28813; http://www.securityfocus.com/bid/27643
CVE: CVE-2008-0714
Published: 2008-02-12
Description: SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lost_password_go action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/28803; http://www.securityfocus.com/bid/27651; https://exchange.xforce.ibmcloud.com/vulnerabilities/40289
CVE: CVE-2008-0715
Published: 2008-02-12
Description: Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file.  NOTE: this might be the same as CVE-2007-6009.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28797; http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+AcdSee+Photo+Manager; http://www.vupen.com/english/advisories/2008/0443
CVE: CVE-2008-0716
Published: 2008-02-12
Description: The agent in Symantec Altiris Notification Server before 6.0 SP3 R7 allows local users to gain privileges via a "Shatter" style attack.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/28832; http://securityresponse.symantec.com/avcenter/security/Content/2008.02.06.html; http://www.securityfocus.com/bid/27645
CVE: CVE-2008-0717
Published: 2008-02-12
Description: Cross-site scripting (XSS) vulnerability in Caching Proxy (CP) 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI mapping rules are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger injection into an error response.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/28785; http://www-1.ibm.com/support/docview.wss?uid=swg21294776; http://www.securityfocus.com/bid/27665
CVE: CVE-2008-0718
Published: 2008-02-12
Description: Unspecified vulnerability in the USB Mouse STREAMS module (usbms) in Sun Solaris 9 and 10, when 64-bit mode is enabled, allows local users to cause a denial of service (panic) via unspecified vectors.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/28921; http://sunsolve.sun.com/search/document.do?assetkey=1-26-201316-1; http://www.securityfocus.com/bid/27773
CVE: CVE-2008-0719
Published: 2008-02-12
Description: SQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonial_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/28831; http://www.securityfocus.com/bid/27664; https://www.exploit-db.com/exploits/5075
CVE: CVE-2008-0720
Published: 2008-02-12
Description: Cross-site scripting (XSS) vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webmin_search.cgi (aka the search section), and possibly other components accessed through a "search box" or "open file box." NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forum.aria-security.net/showthread.php?t=511; http://secunia.com/advisories/28827; http://www.securityfocus.com/archive/1/487656/100/0/threaded
CVE: CVE-2008-0721
Published: 2008-02-12
Description: SQL injection vulnerability in index.php in the Sermon (com_sermon) 0.2 component for Mambo allows remote attackers to execute arbitrary SQL commands via the gid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/27673; https://www.exploit-db.com/exploits/5076; http://www.securityfocus.com/bid/27673
CVE: CVE-2008-0722
Published: 2008-02-12
Description: Cross-site scripting (XSS) vulnerability in index.php in Pagetool 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the search_term parameter in a pagetool_search action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/27653; https://www.exploit-db.com/exploits/4983; http://www.securityfocus.com/bid/27653
CVE: CVE-2008-0723
Published: 2008-02-12
Description: Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other earlier 1.6.x versions, allows remote attackers to inject arbitrary web script or HTML via the hash parameter in an admin action to index.php, a different vulnerability than CVE-2006-2208.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0188&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6688&w=2; http://www.securityfocus.com/bid/27652
CVE: CVE-2008-0724
Published: 2008-02-12
Description: The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartext in a database, which makes it easier for context-dependent attackers to obtain access to user accounts.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://securityreason.com/securityalert/3631; http://www.securityfocus.com/archive/1/487436/100/0/threaded; https://www.exploit-db.com/exploits/5037
CVE: CVE-2008-0725
Published: 2008-02-12
Description: Multiple heap-based buffer overflows in the (1) FTP service and (2) administration service in Titan FTP Server 6.0.5.549 allow remote attackers to cause a denial of service (daemon hang) and possibly execute arbitrary code via a long command.  NOTE: the USER and PASS commands for the FTP service are covered by CVE-2008-0702.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28760; http://secunia.com/advisories/28760
CVE: CVE-2008-0416
Published: 2008-02-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox  before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow remote attackers to inject arbitrary web script or HTML via certain character encodings, including (1) a backspace character that is treated as whitespace, (2) 0x80 with Shift_JIS encoding, and (3) "zero-length non-ASCII sequences" in certain Asian character sets.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN21563357/index.html; http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000021.html; http://secunia.com/advisories/28839
CVE: CVE-2008-0420
Published: 2008-02-12
Description: modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.
CVSS Score: 9.3 (HIGH)
CWE: CWE-200
References: http://browser.netscape.com/releasenotes/; http://secunia.com/advisories/28758; http://secunia.com/advisories/28839
CVE: CVE-2007-5659
Published: 2008-02-12
Description: Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods.  NOTE: this issue might be subsumed by CVE-2008-0655.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=657; http://secunia.com/advisories/29065; http://secunia.com/advisories/29205
CVE: CVE-2007-5663
Published: 2008-02-12
Description: Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure JavaScript method in the EScript.api plug-in.  NOTE: this issue might be subsumed by CVE-2008-0655.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=656; http://secunia.com/advisories/29065; http://secunia.com/advisories/29205
CVE: CVE-2007-5666
Published: 2008-02-12
Description: Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory.  NOTE: this issue might be subsumed by CVE-2008-0655.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-94
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=655; http://secunia.com/advisories/29065; http://secunia.com/advisories/29205
CVE: CVE-2008-0037
Published: 2008-02-12
Description: X11 in Apple Mac OS X 10.5 through 10.5.1 does not properly handle when the "Allow connections from network client" preference is disabled, which allows remote attackers to bypass intended access restrictions and connect to the X server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://docs.info.apple.com/article.html?artnum=307430; http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html; http://secunia.com/advisories/28891
CVE: CVE-2008-0038
Published: 2008-02-12
Description: Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be launched if it is in a Time Machine backup, which might allow local users to bypass intended security restrictions or exploit vulnerabilities in the application.
CVSS Score: 1.9 (LOW)
CWE: CWE-264
References: http://docs.info.apple.com/article.html?artnum=307430; http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html; http://secunia.com/advisories/28891
CVE: CVE-2008-0039
Published: 2008-02-12
Description: Unspecified vulnerability in Mail in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary commands via a crafted file:// URL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://docs.info.apple.com/article.html?artnum=307430; http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html; http://secunia.com/advisories/28891
CVE: CVE-2008-0040
Published: 2008-02-12
Description: Unspecified vulnerability in NFS in Apple Mac OS X 10.5 through 10.5.1 allows remote attackers to cause a denial of service (system shutdown) or execute arbitrary code via unknown vectors related to mbuf chains that trigger memory corruption.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://docs.info.apple.com/article.html?artnum=307430; http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html; http://secunia.com/advisories/28891
CVE: CVE-2008-0041
Published: 2008-02-12
Description: Parental Controls in Apple Mac OS X 10.5 through 10.5.1 contacts www.apple.com "when a website is unblocked," which allows remote attackers to determine when a system is running Parental Controls.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://docs.info.apple.com/article.html?artnum=307430; http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html; http://secunia.com/advisories/28891
CVE: CVE-2008-0042
Published: 2008-02-12
Description: Argument injection vulnerability in Terminal.app in Terminal in Apple Mac OS X 10.4.11 and 10.5 through 10.5.1 allows remote attackers to execute arbitrary code via unspecified URL schemes.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://docs.info.apple.com/article.html?artnum=307430; http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html; http://secunia.com/advisories/28891
CVE: CVE-2008-0318
Published: 2008-02-12
Description: Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://bugs.gentoo.org/show_bug.cgi?id=209915; http://docs.info.apple.com/article.html?artnum=307562; http://kolab.org/security/kolab-vendor-notice-19.txt
CVE: CVE-2008-0636
Published: 2008-02-12
Description: Level Platforms, Inc. (LPI) Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensitive information via a direct request to About/SC_About.htm, which provides version and patch information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/3659; http://www.securityfocus.com/archive/1/487811/100/0/threaded; http://www.securityfocus.com/archive/1/488201/100/0/threaded
CVE: CVE-2008-0726
Published: 2008-02-12
Description: Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html; http://secunia.com/advisories/28983; http://secunia.com/advisories/29065
CVE: CVE-2008-0728
Published: 2008-02-12
Description: The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://bugs.gentoo.org/show_bug.cgi?id=209915; http://docs.info.apple.com/article.html?artnum=307562; http://kolab.org/security/kolab-vendor-notice-19.txt
CVE: CVE-2008-0009
Published: 2008-02-12
Description: The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which might allow local users to access arbitrary kernel memory locations.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt; http://secunia.com/advisories/28835; http://secunia.com/advisories/28896
CVE: CVE-2008-0010
Published: 2008-02-12
Description: The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt; http://secunia.com/advisories/28835; http://secunia.com/advisories/28875
CVE: CVE-2008-0074
Published: 2008-02-12
Description: Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6386&w=2; http://secunia.com/advisories/28849; http://www.securityfocus.com/bid/27101
CVE: CVE-2008-0075
Published: 2008-02-12
Description: Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary code via crafted inputs to ASP pages.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6386&w=2; http://secunia.com/advisories/28893; http://www.securityfocus.com/bid/27676
CVE: CVE-2008-0084
Published: 2008-02-12
Description: Unspecified vulnerability in the TCP/IP support in Microsoft Windows Vista allows remote DHCP servers to cause a denial of service (hang and restart) via a crafted DHCP packet.
CVSS Score: 7.8 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6386&w=2; http://secunia.com/advisories/28828; http://www.securityfocus.com/bid/27634
CVE: CVE-2008-0088
Published: 2008-02-12
Description: Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote attackers to cause a denial of service (hang and restart) via a crafted LDAP request.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6386&w=2; http://secunia.com/advisories/28764; http://www.securityfocus.com/bid/27638