deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-1652
Published: 2008-04-02
Description: Directory traversal vulnerability in the _serve_request_multiple function in lib/Perlbal/ClientHTTPBase.pm in Perlbal before 1.70, when concat get is enabled, allows remote attackers to read arbitrary files in a parent directory via a directory traversal sequence in an unspecified parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://search.cpan.org/src/BRADFITZ/Perlbal-1.70/CHANGES; http://secunia.com/advisories/29565; http://www.vupen.com/english/advisories/2008/1045/references
CVE: CVE-2008-1653
Published: 2008-04-02
Description: Directory traversal vulnerability in index.php in Sava's Link Manager 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the q parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/29589; http://www.securityfocus.com/bid/28537; https://exchange.xforce.ibmcloud.com/vulnerabilities/41595
CVE: CVE-2008-1654
Published: 2008-04-02
Description: Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site Request Forgery (CSRF) style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP control point, as demonstrated by changing the primary DNS server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://lists.apple.com/archives/security-announce/2008//May/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html; http://seclists.org/bugtraq/2008/Jan/0182.html
CVE: CVE-2008-1657
Published: 2008-04-02
Description: OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-005.txt.asc; http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc; http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
CVE: CVE-2008-1331
Published: 2008-04-02
Description: cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/29798; http://www.securityfocus.com/archive/1/492383/100/0/threaded; http://www.securityfocus.com/bid/28758
CVE: CVE-2007-5661
Published: 2008-04-04
Description: The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://knowledge.macrovision.com/selfservice/microsites/search.do?cmd=displayKC&externalId=Q113640; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=649; http://secunia.com/advisories/29549
CVE: CVE-2008-0555
Published: 2008-04-04
Description: The ExpandCert function in Apache-SSL before apache_1.3.41+ssl_1.59 does not properly handle (1) '/' and (2) '=' characters in a Distinguished Name (DN) in a client certificate, which might allow remote attackers to bypass authentication via a crafted DN that triggers overwriting of environment variables.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-287
References: http://secunia.com/advisories/29644; http://securityreason.com/securityalert/3797; http://www.apache-ssl.org/advisory-cve-2008-0555.txt
CVE: CVE-2008-0884
Published: 2008-04-04
Description: The Replace function in the capp-lspp-config script in the (1) lspp-eal4-config-ibm and (2) capp-lspp-eal4-config-hp packages before 0.65-2 in Red Hat Enterprise Linux (RHEL) 5 uses lstat instead of stat to determine the /etc/pam.d/system-auth file permissions, leading to a change to world-writable permissions for the /etc/pam.d/system-auth-ac file, which allows local users to gain privileges by modifying this file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-732
References: http://rhn.redhat.com/errata/RHSA-2008-0193.html; http://secunia.com/advisories/29642; http://securitytracker.com/id?1019740
CVE: CVE-2008-1373
Published: 2008-04-04
Description: Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00003.html; http://secunia.com/advisories/29573; http://secunia.com/advisories/29603
CVE: CVE-2008-1374
Published: 2008-04-04
Description: Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file.  NOTE: this issue is due to an incomplete fix for CVE-2004-0888.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://secunia.com/advisories/29630; http://secunia.com/advisories/31388; http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0245
CVE: CVE-2008-1680
Published: 2008-04-04
Description: PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenance/index.php, which reveals settings such as magic_quotes_gpc.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/41745; https://www.exploit-db.com/exploits/5295; https://exchange.xforce.ibmcloud.com/vulnerabilities/41745
CVE: CVE-2008-1013
Published: 2008-04-04
Description: Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/29650; http://securitytracker.com/id?1019757; http://support.apple.com/kb/HT1241
CVE: CVE-2008-1014
Published: 2008-04-04
Description: Apple QuickTime before 7.4.5 does not properly handle external URLs in movies, which allows remote attackers to obtain sensitive information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-200
References: http://secunia.com/advisories/29650; http://securitytracker.com/id?1019758; http://support.apple.com/kb/HT1241
CVE: CVE-2008-1015
Published: 2008-04-04
Description: Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html; http://secunia.com/advisories/29650; http://secunia.com/advisories/31034
CVE: CVE-2008-1016
Published: 2008-04-04
Description: Apple QuickTime before 7.4.5 does not properly handle movie media tracks, which allows remote attackers to execute arbitrary code via a crafted movie that triggers memory corruption.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/29650; http://securitytracker.com/id?1019760; http://support.apple.com/kb/HT1241
CVE: CVE-2008-1017
Published: 2008-04-04
Description: Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html; http://secunia.com/advisories/29650; http://secunia.com/advisories/31034
CVE: CVE-2008-1018
Published: 2008-04-04
Description: Heap-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via an MP4A movie with a malformed Channel Compositor (aka chan) atom.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html; http://secunia.com/advisories/29650; http://secunia.com/advisories/31034
CVE: CVE-2008-1019
Published: 2008-04-04
Description: Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted PICT image file, related to an improperly terminated memory copy loop.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/29650; http://securitytracker.com/id?1019763; http://support.apple.com/kb/HT1241
CVE: CVE-2008-1020
Published: 2008-04-04
Description: Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file with Kodak encoding, related to error checking and error messages.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/29650; http://securitytracker.com/id?1019764; http://support.apple.com/kb/HT1241
CVE: CVE-2008-1021
Published: 2008-04-04
Description: Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted movie with run length encoding.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/29650; http://securitytracker.com/id?1019765; http://support.apple.com/kb/HT1241
CVE: CVE-2008-1022
Published: 2008-04-04
Description: Stack-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted VR movie with an obji atom of zero size.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/29650; http://securitytracker.com/id?1019766; http://support.apple.com/kb/HT1241
CVE: CVE-2008-1023
Published: 2008-04-04
Description: Heap-based buffer overflow in Clip opcode parsing in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/29650; http://securitytracker.com/id?1019767; http://support.apple.com/kb/HT1241
CVE: CVE-2008-1154
Published: 2008-04-04
Description: The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, does not require authentication for requests received from the network, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/29670; http://securitytracker.com/id?1019768; http://www.cisco.com/en/US/products/products_security_advisory09186a008096fd9a.shtml
CVE: CVE-2008-1681
Published: 2008-04-04
Description: Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://publib.boulder.ibm.com/infocenter/cmgmt/v8r3m0/topic/com.ibm.cmgmtreadmefp.doc/aparlist.htm; http://secunia.com/advisories/29647; http://www-1.ibm.com/support/docview.wss?uid=swg1IO07690
CVE: CVE-2008-1682
Published: 2008-04-04
Description: PHP remote file inclusion vulnerability in quiz/common/db_config.inc.php in the Online FlashQuiz (com_onlineflashquiz) 1.0.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://www.securityfocus.com/bid/28574; https://exchange.xforce.ibmcloud.com/vulnerabilities/41592; https://www.exploit-db.com/exploits/5345
CVE: CVE-2008-0311
Published: 2008-04-06
Description: Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (STMulticastService) 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=675; http://secunia.com/advisories/29631; http://securitytracker.com/id?1019786
CVE: CVE-2008-0708
Published: 2008-04-06
Description: HP USB 2.0 Floppy Drive Key product options (1) 442084-B21 and (2) 442085-B21 for certain HP ProLiant servers contain the (a) W32.Fakerecy and (b) W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0458&w=2; http://securitytracker.com/id?1019785; https://exchange.xforce.ibmcloud.com/vulnerabilities/41648
CVE: CVE-2008-0887
Published: 2008-04-06
Description: gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to the locked session, a related issue to CVE-2007-1859.
CVSS Score: 4.7 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html; http://osvdb.org/35531; http://rhn.redhat.com/errata/RHSA-2008-0197.html
CVE: CVE-2008-1602
Published: 2008-04-06
Description: Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/29669; http://securityreason.com/securityalert/3798; http://www.coresecurity.com/?action=item&id=2211
CVE: CVE-2008-1683
Published: 2008-04-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-0887.  Reason: This candidate is a duplicate of CVE-2008-0887.  Notes: All CVE users should reference CVE-2008-0887 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CWE: CWE-287
CVE: CVE-2008-1684
Published: 2008-04-06
Description: inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-59, CWE-362
References: http://secunia.com/advisories/29654; http://securitytracker.com/id?1019781; http://sunsolve.sun.com/search/document.do?assetkey=1-26-233284-1
CVE: CVE-2008-1685
Published: 2008-04-06
Description: gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used, considers the sum of a pointer and an int to be greater than or equal to the pointer, which might lead to removal of length testing code that was intended as a protection mechanism against integer overflow and buffer overflow attacks, and provide no diagnostic message about this removal. NOTE: the vendor has determined that this compiler behavior is correct according to section 6.5.6 of the C99 standard (aka ISO/IEC 9899:1999)
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119, CWE-189
References: http://gcc.gnu.org/bugzilla/show_bug.cgi?id=26763; http://www.kb.cert.org/vuls/id/162289; https://exchange.xforce.ibmcloud.com/vulnerabilities/41686
CVE: CVE-2008-0310
Published: 2008-04-07
Description: Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, probably PKGINST.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-22
References: http://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=676; http://secunia.com/advisories/29657
CVE: CVE-2008-0709
Published: 2008-04-07
Description: Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13, and 4.20 allow remote authenticated users to access other user accounts via unknown vectors, a different issue than CVE-2008-0214.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01391833; http://secunia.com/advisories/29643; http://securitytracker.com/id?1019746
CVE: CVE-2008-1142
Published: 2008-04-07
Description: rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections.  NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected.  NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.
CVSS Score: 3.7 (LOW)
CWE: CWE-264
References: http://article.gmane.org/gmane.comp.security.oss.general/122; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469296; http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
CVE: CVE-2008-1689
Published: 2008-04-07
Description: Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (daemon crash) via a long request header in an HTTP request to TCP port 801.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://aluigi.altervista.org/adv/slmaildos-adv.txt; http://aluigi.org/poc/slmaildos.zip; http://secunia.com/advisories/29614
CVE: CVE-2008-1690
Published: 2008-04-07
Description: WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801.  NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://aluigi.org/poc/slmaildos.zip; http://secunia.com/advisories/29614; http://www.securityfocus.com/bid/28505
CVE: CVE-2008-1691
Published: 2008-04-07
Description: Unspecified vulnerability in SLMail.exe in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (UDP service outage) via a large packet to UDP port 54.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/slmaildos-adv.txt; http://secunia.com/advisories/29614; http://www.securityfocus.com/bid/28505
CVE: CVE-2007-4620
Published: 2008-04-07
Description: Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679; http://secunia.com/advisories/29665
CVE: CVE-2008-1328
Published: 2008-04-07
Description: Buffer overflow in the LGServer service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary code via unspecified "command arguments."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3800; http://www.securityfocus.com/archive/1/490463/100/0/threaded; http://www.securityfocus.com/bid/28616
CVE: CVE-2008-1329
Published: 2008-04-07
Description: Unspecified vulnerability in the NetBackup service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary commands, related to "insufficient verification of file uploads."
CVSS Score: 10.0 (HIGH)
References: http://securityreason.com/securityalert/3800; http://www.securityfocus.com/archive/1/490463/100/0/threaded; http://www.securityfocus.com/bid/28616
CVE: CVE-2008-1618
Published: 2008-04-07
Description: The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/29708; http://www.mwrinfosecurity.com/publications/mwri_watchguard-firebox-pptp-vpn-user-enumeration-advisory_2008-04-04.pdf; http://www.osvdb.org/44218
CVE: CVE-2008-1692
Published: 2008-04-07
Description: Eterm 0.9.4 opens a terminal window on :0 if -display is not specified and the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections.  NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=473127; http://secunia.com/advisories/29577; http://security.gentoo.org/glsa/glsa-200805-03.xml
CVE: CVE-2008-0312
Published: 2008-04-08
Description: Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute arbitrary code via a long argument to the GetEventLogInfo method.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=677; http://secunia.com/advisories/29660; http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html
CVE: CVE-2008-0313
Published: 2008-04-08
Description: The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly determine the location of the AutoFix Tool, which allows remote attackers to execute arbitrary code via a remote (1) WebDAV or (2) SMB share.
CVSS Score: 6.8 (MEDIUM)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=678; http://secunia.com/advisories/29660; http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html
CVE: CVE-2008-1696
Published: 2008-04-08
Description: Directory traversal vulnerability in makepost.php in DaZPHPNews 0.1-1, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the prefixdir parameter.
CVSS Score: 3.7 (LOW)
CWE: CWE-22
References: http://secunia.com/advisories/29653; http://www.securityfocus.com/bid/28582; https://exchange.xforce.ibmcloud.com/vulnerabilities/41608
CVE: CVE-2008-1697
Published: 2008-04-08
Description: Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request.  NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0871&w=2; http://secunia.com/advisories/29641; http://www.offensive-security.com/0day/hp-nnm-ov.py.txt