deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-5694
Published: 2008-12-19
Description: PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors.  NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treated as an issue in Sandbox.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://www.by-f10.com/bug.txt; http://www.securityfocus.com/archive/1/487903/100/200/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/47688
CVE: CVE-2008-5695
Published: 2008-12-19
Description: wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manage_options and upload_files capabilities to execute arbitrary code by uploading a PHP script and adding this script's pathname to active_plugins.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20
References: http://mu.wordpress.org/forums/topic.php?id=7534&page&replies=1; http://secunia.com/advisories/28789; http://securityreason.com/securityalert/4798
CVE: CVE-2008-5696
Published: 2008-12-19
Description: Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console, which allows remote attackers to reconfigure the Apache HTTP Server via console operations.
CVSS Score: 9.3 (HIGH)
CWE: CWE-255
References: http://secunia.com/advisories/32989; http://www.novell.com/support/viewContent.do?externalId=7001907; http://www.securityfocus.com/bid/32657
CVE: CVE-2008-2380
Published: 2008-12-22
Description: SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary SQL commands via query parameters containing apostrophes.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/50811; http://secunia.com/advisories/33235; http://secunia.com/advisories/34234
CVE: CVE-2008-5697
Published: 2008-12-22
Description: The skype_tool.copy_num method in the Skype extension BETA 2.2.0.95 for Firefox allows remote attackers to write arbitrary data to the clipboard via a string argument.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/4797; http://www.securityfocus.com/bid/31613; https://exchange.xforce.ibmcloud.com/vulnerabilities/45739
CVE: CVE-2008-5698
Published: 2008-12-22
Description: HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (application crash) via an invalid document.load call that triggers use of a deleted object.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/32208; http://securityreason.com/securityalert/4796; http://www.securityfocus.com/bid/31696
CVE: CVE-2008-5699
Published: 2008-12-22
Description: The name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv_50 through snv_104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/50934; http://secunia.com/advisories/33218; http://securitytracker.com/id?1021477
CVE: CVE-2008-5700
Published: 2008-12-22
Description: libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.
CVSS Score: 1.9 (LOW)
CWE: CWE-399
References: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=f2f1fa78a155524b849edf359e42a3001ea652c0; http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html; http://openwall.com/lists/oss-security/2008/12/09/2
CVE: CVE-2008-5701
Published: 2008-12-22
Description: Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64-bit MIPS platforms allows local users to cause a denial of service (system crash) via an o32 syscall with a small syscall number, which leads to an attempted read operation outside the bounds of the syscall table.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-189
References: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=e807f9574e37a3f202e677feaaad1b7c5d2c0db8; http://openwall.com/lists/oss-security/2008/12/09/1; http://secunia.com/advisories/33078
CVE: CVE-2008-5702
Published: 2008-12-22
Description: Buffer underflow in the ibwdt_ioctl function in drivers/watchdog/ib700wdt.c in the Linux kernel before 2.6.28-rc1 might allow local users to have an unknown impact via a certain /dev/watchdog WDIOC_SETTIMEOUT IOCTL call.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://bugzilla.kernel.org/show_bug.cgi?id=11399; http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=7c2500f17d65092d93345f3996cf82ebca17e9ff; http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html
CVE: CVE-2008-5703
Published: 2008-12-22
Description: gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/.smswatch or (b) /tmp/gpsdrivepos temporary file, related to (1) examples/gpssmswatch and (2) src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508597; http://openwall.com/lists/oss-security/2008/12/17/15; http://secunia.com/advisories/31694
CVE: CVE-2008-5704
Published: 2008-12-22
Description: src/unit_test.c in gpsdrive (aka gpsdrive-scripts) 2.10~pre4 might allow local users to overwrite arbitrary files via a symlink attack on the /tmp/gpsdrive-unit-test/proc temporary file, a different vector than CVE-2008-4959 and CVE-2008-5380.
CVSS Score: 7.6 (HIGH)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508597; http://openwall.com/lists/oss-security/2008/12/17/15; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508597
CVE: CVE-2008-5705
Published: 2008-12-22
Description: The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier, when user triggers are enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in an argument.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://bugs.debian.org/506530; http://openwall.com/lists/oss-security/2008/12/17/16; http://securityreason.com/securityalert/4800
CVE: CVE-2008-5706
Published: 2008-12-22
Description: The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/trigger.tmp temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/506530; http://openwall.com/lists/oss-security/2008/12/17/16; http://securityreason.com/securityalert/4800
CVE: CVE-2008-2434
Published: 2008-12-23
Description: The Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers to download an arbitrary library file onto a client system via a "custom update server" argument.  NOTE: this can be leveraged for code execution by writing to a Startup folder.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1038646&id=EN-1038646; http://osvdb.org/50941; http://secunia.com/advisories/31337
CVE: CVE-2008-2435
Published: 2008-12-23
Description: Use-after-free vulnerability in the Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers to execute arbitrary code via a crafted notifyOnLoadNative callback function.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1038646&id=EN-1038646; http://secunia.com/advisories/31583; http://secunia.com/secunia_research/2008-34/
CVE: CVE-2008-4303
Published: 2008-12-23
Description: Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitrary SQL commands via the loginForm parameter to general/login.php, and unspecified other vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://bugs.gentoo.org/show_bug.cgi?id=235052; http://secunia.com/advisories/19449; http://secunia.com/advisories/33258
CVE: CVE-2008-4304
Published: 2008-12-23
Description: general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified input related to the SSL_CLIENT_CERT environment variable. NOTE: in some environments, SSL_CLIENT_CERT always has a base64-encoded string value, which may impose constraints on injection for typical shells.
CVSS Score: 10.0 (HIGH)
CWE: CWE-78
References: http://bugs.gentoo.org/show_bug.cgi?id=235052; http://secunia.com/advisories/33258; http://security.gentoo.org/glsa/glsa-200812-20.xml
CVE: CVE-2008-4305
Published: 2008-12-23
Description: Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and earlier allows remote authenticated administrators to inject arbitrary PHP code into include/settings.php via the URI.
CVSS Score: 9.0 (HIGH)
CWE: CWE-94
References: http://bugs.gentoo.org/show_bug.cgi?id=235052; http://secunia.com/advisories/19449; http://secunia.com/advisories/33258
CVE: CVE-2008-5514
Published: 2008-12-23
Description: Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/33275; http://secunia.com/advisories/33638; http://securitytracker.com/id?1021485
CVE: CVE-2008-5557
Published: 2008-12-23
Description: Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0477.html; http://bugs.php.net/bug.php?id=45722; http://cvs.php.net/viewvc.cgi/php-src/ext/mbstring/libmbfl/filters/mbfilter_htmlent.c?r1=1.7&r2=1.8
CVE: CVE-2008-5707
Published: 2008-12-24
Description: SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the catno parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/497279/100/0/threaded; http://www.securityfocus.com/bid/31740; http://www.securityfocus.com/archive/1/497279/100/0/threaded
CVE: CVE-2008-2382
Published: 2008-12-24
Description: The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html; http://secunia.com/advisories/33293
CVE: CVE-2008-5708
Published: 2008-12-24
Description: redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://securityreason.com/securityalert/4804; http://www.securityfocus.com/bid/31736; https://exchange.xforce.ibmcloud.com/vulnerabilities/45824
CVE: CVE-2008-5709
Published: 2008-12-24
Description: Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.
CVSS Score: 9.0 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/32204; http://support.avaya.com/elmodocs2/security/ASA-2008-391.htm; http://www.securityfocus.com/bid/31645
CVE: CVE-2008-5710
Published: 2008-12-24
Description: Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1.x, 4.0.3, and 5.x allow remote attackers to read (1) configuration files, (2) log files, (3) binary image files, and (4) help files via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://secunia.com/advisories/32035; http://support.avaya.com/elmodocs2/security/ASA-2008-394.htm; http://www.securityfocus.com/bid/31639
CVE: CVE-2008-5711
Published: 2008-12-24
Description: Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/4805; http://www.securityfocus.com/bid/27756; https://www.exploit-db.com/exploits/5102
CVE: CVE-2008-5712
Published: 2008-12-24
Description: The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1) a long COLOR attribute in an HR element; or a long (a) BGCOLOR or (b) BORDERCOLOR attribute in a (2) TABLE, (3) TD, or (4) TR element.  NOTE: the FONT vector is already covered by CVE-2008-4514.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://securityreason.com/securityalert/4806; https://exchange.xforce.ibmcloud.com/vulnerabilities/47696; https://www.exploit-db.com/exploits/6704
CVE: CVE-2008-5713
Published: 2008-12-24
Description: The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service (soft lockup) by sending a large amount of network traffic, as demonstrated by multiple simultaneous invocations of the Netperf benchmark application in UDP_STREAM mode.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=2ba2506ca7ca62c56edaa334b0fe61eb5eab6ab0; http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25; http://openwall.com/lists/oss-security/2008/12/23/1
CVE: CVE-2008-5714
Published: 2008-12-24
Description: Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html; http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html; http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
CVE: CVE-2008-5715
Published: 2008-12-24
Description: Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via JavaScript code with a long string value for the hash property (aka location.hash). NOTE: it was later reported that earlier versions are also affected, and that the impact is CPU consumption and application hang in unspecified circumstances perhaps involving other platforms.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/51032; http://securityreason.com/securityalert/4807; http://websecurity.com.ua/3424/
CVE: CVE-2008-5716
Published: 2008-12-24
Description: xend in Xen 3.3.0 does not properly restrict a guest VM's write access within the /local/domain xenstore directory tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid.  NOTE: this issue exists because of erroneous set_permissions calls in the fix for CVE-2008-4405.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://lists.xensource.com/archives/html/xen-devel/2008-12/msg00842.html; http://lists.xensource.com/archives/html/xen-devel/2008-12/msg00845.html; http://lists.xensource.com/archives/html/xen-devel/2008-12/msg00846.html
CVE: CVE-2008-5717
Published: 2008-12-26
Description: Cross-site scripting (XSS) vulnerability in Hitachi JP1/Integrated Management - Service Support 08-10 through 08-10-05, 08-11 through 08-11-03, and 08-50 through 08-50-03 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/33193; http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS08-023/index.html; http://www.securityfocus.com/bid/32834
CVE: CVE-2008-5718
Published: 2008-12-26
Description: The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title.
CVSS Score: 9.3 (HIGH)
CWE: CWE-78
References: http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html; http://osvdb.org/50824; http://secunia.com/advisories/33227
CVE: CVE-2008-5719
Published: 2008-12-26
Description: Cross-site scripting (XSS) vulnerability in Hitachi Groupmax Web Workflow SDK Set for Active Server Pages before 06-52-/C and Hitachi Groupmax Workflow - Development Kit for Active Server Pages before 06-52-/A allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/33281; http://securitytracker.com/alerts/2008/Dec/1021483.html; http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS08-026/index.html
CVE: CVE-2008-5720
Published: 2008-12-26
Description: Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN17298485/index.html; http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000085.html; http://mayaa.seasar.org/news/vulnerability20081225.html
CVE: CVE-2008-5721
Published: 2008-12-26
Description: SapporoWorks BlackJumboDog (BJD) before 4.2.3 allows remote attackers to bypass authentication and obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://homepage2.nifty.com/spw/info/secure2.html; http://jvn.jp/en/jp/JVN98063934/index.html; http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000086.html
CVE: CVE-2008-5722
Published: 2008-12-26
Description: Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf (preferences) file.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/51025; http://securityreason.com/securityalert/4808; http://www.securityfocus.com/bid/33011
CVE: CVE-2008-5723
Published: 2008-12-26
Description: Directory traversal vulnerability in CGI RESCUE KanniBBS2000 (aka KanniBBS2000i, MiniBBS2000, and MiniBBS2000i) before 1.03 allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://jvn.jp/en/jp/JVN86833991/index.html; http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000078.html; http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/[PII_REDACTED]1811
CVE: CVE-2008-5724
Published: 2008-12-26
Description: The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/33210; http://www.eset.com/joomla/index.php?option=com_content&task=view&id=4113&Itemid=5; http://www.ntinternals.org/ntiadv0807/ntiadv0807.html
CVE: CVE-2008-5725
Published: 2008-12-26
Description: The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/33249; http://securityreason.com/securityalert/4809; http://www.ntinternals.org/ntiadv0810/ntiadv0810.html
CVE: CVE-2008-5726
Published: 2008-12-26
Description: SQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/51023; http://securityreason.com/securityalert/4810; http://www.securityfocus.com/bid/32993
CVE: CVE-2008-5727
Published: 2008-12-26
Description: SQL injection vulnerability in modules/auth/password_recovery.php in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the query string.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/50965; http://securityreason.com/securityalert/4818; http://www.securityfocus.com/bid/32990
CVE: CVE-2008-5728
Published: 2008-12-26
Description: Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the system parameter in modules/netshop/post.php; and the INCLUDE_FOLDER parameter in (2) auth.inc.php, (3) banner.inc.php, (4) blog.inc.php, and (5) forum.inc.php in modules/.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-22
References: http://securityreason.com/securityalert/4819; http://www.securityfocus.com/bid/32992; https://exchange.xforce.ibmcloud.com/vulnerabilities/47576
CVE: CVE-2008-5729
Published: 2008-12-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) form and (2) control parameters to FCKeditor/neditor.php, and the (3) path parameter to admin/siteinfo/iframe.inc.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/4819; http://www.securityfocus.com/bid/32992; https://exchange.xforce.ibmcloud.com/vulnerabilities/47577
CVE: CVE-2008-5730
Published: 2008-12-26
Description: Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impact via unspecified vectors involving (1) a %0a sequence in a cookie and (2) the add.php file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4819; http://www.securityfocus.com/bid/32992; https://exchange.xforce.ibmcloud.com/vulnerabilities/47579
CVE: CVE-2008-5731
Published: 2008-12-26
Description: The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and possibly gain privileges via a certain METHOD_BUFFERED IOCTL request that overwrites portions of memory, related to a "Driver Collapse." NOTE: some of these details are obtained from third party information.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://osvdb.org/50914; http://secunia.com/advisories/33310; http://securityreason.com/securityalert/4811