deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-2736
Published: 2008-09-04
Description: Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0(3)15, 8.0(3)16, 8.1(1)4, and 8.1(1)5, when configured as a clientless SSL VPN endpoint, allows remote attackers to obtain usernames and passwords via unknown vectors, aka Bug ID CSCsq45636.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: http://secunia.com/advisories/31730; http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2007-6716
Published: 2008-09-04
Description: fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test.
CVSS Score: 5.5 (MEDIUM)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=848c4dd5153c7a0de55470ce99a8e13a63b4703f; http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html
CVE: CVE-2008-3904
Published: 2008-09-04
Description: src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lxde.svn.sourceforge.net/viewvc/lxde?view=rev&sortby=date&revision=845; http://www.openwall.com/lists/oss-security/2008/08/30/1; http://www.openwall.com/lists/oss-security/2008/09/03/1
CVE: CVE-2008-3905
Published: 2008-09-04
Description: resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses sequential transaction IDs and constant source ports for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/31430; http://secunia.com/advisories/32165; http://secunia.com/advisories/32219
CVE: CVE-2008-3906
Published: 2008-09-04
Description: CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/31643; http://secunia.com/advisories/36494; http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0286
CVE: CVE-2008-3907
Published: 2008-09-04
Description: The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://newsbeuter.wordpress.com/2008/09/01/newsbeuter-11-released-contains-security-fix-please-upgrade/; http://secunia.com/advisories/31676; http://secunia.com/advisories/31995
CVE: CVE-2008-3908
Published: 2008-09-04
Description: Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to execute arbitrary code via (1) a long argument on the command line; a long (2) WNSEARCHDIR, (3) WNHOME, or (4) WNDBVERSION environment variable; or (5) a user-supplied dictionary (aka data file).  NOTE: since WordNet itself does not run with special privileges, this issue only crosses privilege boundaries when WordNet is invoked as a third party component.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/32184; http://securityreason.com/securityalert/4217; http://www.gentoo.org/security/en/glsa/glsa-200810-01.xml
CVE: CVE-2008-3909
Published: 2008-09-04
Description: The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/47906; http://secunia.com/advisories/31837; http://secunia.com/advisories/31961
CVE: CVE-2008-3910
Published: 2008-09-04
Description: dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the (1) dns_simple_decode or (2) dns_decode function, which allows remote attackers to overwrite a buffer and have unspecified other impact.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://www.hsc.fr/ressources/outils/dns2tcp/index.html.en; http://www.openwall.com/lists/oss-security/2008/09/03/5; http://www.securityfocus.com/bid/31080
CVE: CVE-2008-3911
Published: 2008-09-04
Description: The proc_do_xprt function in net/sunrpc/sysctl.c in the Linux kernel 2.6.26.3 does not check the length of a certain buffer obtained from userspace, which allows local users to overflow a stack-based buffer and have unspecified other impact via a crafted read system call for the /proc/sys/sunrpc/transports file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27df6f25ff218072e0e879a96beeb398a79cdbc8; http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html; http://lkml.org/lkml/2008/8/30/140
CVE: CVE-2008-3916
Published: 2008-09-04
Description: Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename.  NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.gnu.org/archive/html/bug-ed/2008-08/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://lists.vmware.com/pipermail/security-announce/2010/000082.html
CVE: CVE-2008-3917
Published: 2008-09-04
Description: Cross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter in a search action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/31425; http://securityreason.com/securityalert/4219; http://www.securityfocus.com/archive/1/495562/100/0/threaded
CVE: CVE-2008-3918
Published: 2008-09-04
Description: SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the field parameter in a search action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31425; https://exchange.xforce.ibmcloud.com/vulnerabilities/45940; http://secunia.com/advisories/31425
CVE: CVE-2008-3919
Published: 2008-09-04
Description: Unspecified vulnerability in multiple JustSystems Ichitaro products allows remote attackers to execute arbitrary code via a crafted JTD document, as exploited in the wild in August 2008.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/31603; http://www.justsystems.com/jp/info/pd8002.html; http://www.securityfocus.com/bid/30828
CVE: CVE-2008-3920
Published: 2008-09-04
Description: Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to "recreate" and "hijack" existing accounts via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://bitlbee.org/main.php/changelog.html; http://secunia.com/advisories/31633; http://secunia.com/advisories/31690
CVE: CVE-2008-3921
Published: 2008-09-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in AWStats Totals 1.0 through 1.14 allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/31630; http://securityreason.com/securityalert/4218; http://userwww.service.emory.edu/~ekenda2/EMORY-2008-01.txt
CVE: CVE-2008-3922
Published: 2008-09-04
Description: awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/31630; http://securityreason.com/securityalert/4218; http://securityreason.com/securityalert/8259
CVE: CVE-2008-3923
Published: 2008-09-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in statistics.php in Content Management Made Easy (CMME) 1.12 allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) year parameters in an hstat_year action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/31599; http://securityreason.com/securityalert/4220; http://www.securityfocus.com/bid/30854
CVE: CVE-2008-3924
Published: 2008-09-04
Description: The "Make a backup" functionality in Content Management Made Easy (CMME) 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover (1) account names and (2) password hashes via a direct request for (a) backup/cmme_data.zip or (b) backup/cmme_cmme.zip.  NOTE: it was later reported that vector a also affects CMME 1.19.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/31599; http://securityreason.com/securityalert/4220; http://www.securityfocus.com/bid/30854
CVE: CVE-2008-3925
Published: 2008-09-04
Description: Cross-site request forgery (CSRF) vulnerability in admin.php in Content Management Made Easy (CMME) 1.12 allows remote attackers to trigger the logout of an administrative user via a logout action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://securityreason.com/securityalert/4220; https://exchange.xforce.ibmcloud.com/vulnerabilities/44686; https://www.exploit-db.com/exploits/6313
CVE: CVE-2008-3926
Published: 2008-09-04
Description: Multiple directory traversal vulnerabilities in Content Management Made Easy (CMME) 1.12 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the env parameter in a weblog action to index.php, or (2) create arbitrary directories via a .. (dot dot) in the env parameter in a login action to admin.php.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/31599; http://securityreason.com/securityalert/4220; http://www.securityfocus.com/bid/30854
CVE: CVE-2008-3927
Published: 2008-09-04
Description: genmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink attack on temporary files.
CVSS Score: 7.2 (HIGH)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496415; http://dev.gentoo.org/~rbu/security/debiantemp/tiger; http://secunia.com/advisories/31659
CVE: CVE-2008-3928
Published: 2008-09-04
Description: test.sh in Honeyd 1.5c might allow local users to overwrite arbitrary files via a symlink attack on a temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496365; http://dev.gentoo.org/~rbu/security/debiantemp/honeyd-common; http://secunia.com/advisories/31658
CVE: CVE-2008-3929
Published: 2008-09-04
Description: gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496369; http://dev.gentoo.org/~rbu/security/debiantemp/ampache; http://freshmeat.net/projects/ampache/releases/283935
CVE: CVE-2008-3930
Published: 2008-09-04
Description: migrate_aliases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496359; http://dev.gentoo.org/~rbu/security/debiantemp/citadel-server; http://secunia.com/advisories/31648
CVE: CVE-2008-3931
Published: 2008-09-04
Description: javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496418; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496363; http://dev.gentoo.org/~rbu/security/debiantemp/r-base-core
CVE: CVE-2008-3903
Published: 2008-09-04
Description: Asterisk Open Source 1.2.x before 1.2.32, 1.4.x before 1.4.24.1, and 1.6.0.x before 1.6.0.8; Asterisk Business Edition A.x.x, B.x.x before B.2.5.8, C.1.x.x before C.1.10.5, and C.2.x.x before C.2.3.3; s800i 1.3.x before 1.3.0.2; and Trixbox PBX 2.6.1, when Digest authentication and authalwaysreject are enabled, generates different responses depending on whether a SIP username is valid, which allows remote attackers to enumerate valid usernames.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: http://downloads.asterisk.org/pub/security/AST-2009-003.html; http://misel.com/?p=52; http://secunia.com/advisories/34982
CVE: CVE-2008-3932
Published: 2008-09-04
Description: Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allows attackers to cause a denial of service (hang) via a crafted NCP packet that triggers an infinite loop.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2675; http://secunia.com/advisories/31864; http://secunia.com/advisories/31886
CVE: CVE-2008-3933
Published: 2008-09-04
Description: Wireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service (crash) via a packet with crafted zlib-compressed data that triggers an invalid read in the tvb_uncompress function.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: http://secunia.com/advisories/31864; http://secunia.com/advisories/31886; http://secunia.com/advisories/32028
CVE: CVE-2008-3934
Published: 2008-09-04
Description: Unspecified vulnerability in Wireshark (formerly Ethereal) 0.99.6 through 1.0.2 allows attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: http://secunia.com/advisories/31864; http://secunia.com/advisories/31886; http://secunia.com/advisories/32028
CVE: CVE-2008-3935
Published: 2008-09-05
Description: Cross-site scripting (XSS) vulnerability in DIC shop_v50 3.0 and earlier and shop_v52 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://jvn.jp/en/jp/JVN79914432/index.html; http://secunia.com/advisories/31652; http://www.d-ic.com/free/05/shop_v50.html
CVE: CVE-2008-3936
Published: 2008-09-05
Description: The web interface in Dreambox DM500C allows remote attackers to cause a denial of service (application hang) via a long URI.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064115.html; http://secunia.com/advisories/31650; http://securityreason.com/securityalert/4221
CVE: CVE-2008-3937
Published: 2008-09-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Media Collectors Database (OpenDb) 1.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) user_id parameter in an edit action to user_admin.php, the (2) title parameter to listings.php, and the (3) redirect_url parameter to user_profile.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt; http://secunia.com/advisories/31719; http://www.securityfocus.com/bid/30989
CVE: CVE-2008-3938
Published: 2008-09-05
Description: Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allows remote attackers to change arbitrary passwords via an update_password action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt; http://secunia.com/advisories/31719; http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt
CVE: CVE-2008-3939
Published: 2008-09-05
Description: Directory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers to read arbitrary files via directory traversal sequences in the URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064227.html; http://secunia.com/advisories/31693; http://www.securityfocus.com/bid/30987
CVE: CVE-2008-3940
Published: 2008-09-05
Description: Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a (1) .plan or (2) .project file.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-134
References: http://deathrow.vistech.net/DEFCON16/VMS.PDF; http://secunia.com/advisories/31587; http://www.securityfocus.com/bid/30948
CVE: CVE-2008-3941
Published: 2008-09-05
Description: Cross-site scripting (XSS) vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter in a search action to the default URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6550&w=2; http://securityreason.com/securityalert/4222; http://www.securityfocus.com/bid/30980
CVE: CVE-2008-3942
Published: 2008-09-05
Description: SQL injection vulnerability in landsee.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0808-exploits/phpemlak-sql.txt; http://www.securityfocus.com/bid/30962; https://exchange.xforce.ibmcloud.com/vulnerabilities/44887
CVE: CVE-2008-3943
Published: 2008-09-05
Description: SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitrary SQL commands via the r parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31696; http://securityreason.com/securityalert/4223; http://www.securityfocus.com/bid/31001
CVE: CVE-2008-3944
Published: 2008-09-05
Description: SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4224; http://www.securityfocus.com/bid/31005; https://www.exploit-db.com/exploits/6362
CVE: CVE-2008-3945
Published: 2008-09-05
Description: SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31653; http://securityreason.com/securityalert/4225; https://www.exploit-db.com/exploits/6336
CVE: CVE-2007-5474
Published: 2008-09-05
Description: The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via an Atheros information element with an invalid length, as demonstrated by an element that is too long.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20
References: http://securityreason.com/securityalert/4226; http://www.securityfocus.com/archive/1/495984/100/0/threaded; http://www.securityfocus.com/bid/31012
CVE: CVE-2008-1144
Published: 2008-09-05
Description: The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse EAPoL-Key packets, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via a malformed EAPoL-Key packet with a crafted "advertised length."
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/31770; http://securityreason.com/securityalert/4227; http://www.securityfocus.com/archive/1/495982/100/0/threaded
CVE: CVE-2008-1197
Published: 2008-09-05
Description: The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via a "Null SSID."
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/31770; http://securityreason.com/securityalert/4215; http://www.securityfocus.com/archive/1/495983/100/0/threaded
CVE: CVE-2008-2436
Published: 2008-09-05
Description: Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x before 5.08 allow remote attackers to execute arbitrary code via a long argument to the (1) GetPrinterURLList, (2) GetPrinterURLList2, or (3) GetFileList2 function in the Novell iPrint ActiveX control in ienipp.ocx.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/31370; http://secunia.com/secunia_research/2008-33/advisory; http://securityreason.com/securityalert/4228
CVE: CVE-2008-3530
Published: 2008-09-05
Description: sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-015.txt.asc; http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://secunia.com/advisories/31745
CVE: CVE-2008-3531
Published: 2008-09-05
Description: Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled, allows local users to gain privileges via a crafted (1) mount or (2) nmount system call, related to copying of "user defined data" in "certain error conditions."
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-119
References: http://security.FreeBSD.org/advisories/FreeBSD-SA-08:08.nmount.asc; http://www.securityfocus.com/bid/31002; http://www.securitytracker.com/id?1020816
CVE: CVE-2008-3664
Published: 2008-09-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via (1) the real name field, related to the user list; (2) the target parameter to login.php, (3) the title parameter to activities/some.php, (4) the company_name parameter to companies/some.php, (5) the last_name parameter to contacts/some.php, (6) the campaign_title parameter to campaigns/some.php, (7) the opportunity_title parameter to opportunities/some.php, (8) the case_title parameter to cases/some.php, (9) the file_id parameter to files/some.php, or (10) the starting parameter to reports/custom/mileage.php, a related issue to CVE-2008-1129.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/4229; http://www.securityfocus.com/archive/1/495981/100/0/threaded; http://www.securityfocus.com/bid/31008
CVE: CVE-2008-3890
Published: 2008-09-05
Description: The kernel in FreeBSD 6.3 through 7.0 on amd64 platforms can make an extra swapgs call after a General Protection Fault (GPF), which allows local users to gain privileges by triggering a GPF during the kernel's return from (1) an interrupt, (2) a trap, or (3) a system call.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/31743; http://security.freebsd.org/advisories/FreeBSD-SA-08:07.amd64.asc; http://www.securityfocus.com/bid/31003