rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-3913 
Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) via unspecified vectors related to "error handling logic".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-09T14:00:00.000Z
CVE-2008-3914 
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-09T14:00:00.000Z
CVE-2008-3915 
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-09T14:00:00.000Z
CVE-2008-3916 
Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename.  NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3917 
Cross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter in a search action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3918 
SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the field parameter in a search action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3919 
Unspecified vulnerability in multiple JustSystems Ichitaro products allows remote attackers to execute arbitrary code via a crafted JTD document, as exploited in the wild in August 2008.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3920 
Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to "recreate" and "hijack" existing accounts via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3921 
Multiple cross-site scripting (XSS) vulnerabilities in AWStats Totals 1.0 through 1.14 allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3922 
awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3923 
Multiple cross-site scripting (XSS) vulnerabilities in statistics.php in Content Management Made Easy (CMME) 1.12 allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) year parameters in an hstat_year action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3924 
The "Make a backup" functionality in Content Management Made Easy (CMME) 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover (1) account names and (2) password hashes via a direct request for (a) backup/cmme_data.zip or (b) backup/cmme_cmme.zip.  NOTE: it was later reported that vector a also affects CMME 1.19.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3925 
Cross-site request forgery (CSRF) vulnerability in admin.php in Content Management Made Easy (CMME) 1.12 allows remote attackers to trigger the logout of an administrative user via a logout action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3926 
Multiple directory traversal vulnerabilities in Content Management Made Easy (CMME) 1.12 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the env parameter in a weblog action to index.php, or (2) create arbitrary directories via a .. (dot dot) in the env parameter in a login action to admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3927 
genmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3928 
test.sh in Honeyd 1.5c might allow local users to overwrite arbitrary files via a symlink attack on a temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3929 
gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3930 
migrate_aliases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3931 
javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T18:00:00.000Z
CVE-2008-3932 
Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allows attackers to cause a denial of service (hang) via a crafted NCP packet that triggers an infinite loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T19:00:00.000Z
CVE-2008-3933 
Wireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service (crash) via a packet with crafted zlib-compressed data that triggers an invalid read in the tvb_uncompress function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T19:00:00.000Z
CVE-2008-3934 
Unspecified vulnerability in Wireshark (formerly Ethereal) 0.99.6 through 1.0.2 allows attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-04T19:00:00.000Z
CVE-2008-3935 
Cross-site scripting (XSS) vulnerability in DIC shop_v50 3.0 and earlier and shop_v52 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T15:00:00.000Z
CVE-2008-3936 
The web interface in Dreambox DM500C allows remote attackers to cause a denial of service (application hang) via a long URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T15:00:00.000Z
CVE-2008-3937 
Multiple cross-site scripting (XSS) vulnerabilities in Open Media Collectors Database (OpenDb) 1.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) user_id parameter in an edit action to user_admin.php, the (2) title parameter to listings.php, and the (3) redirect_url parameter to user_profile.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T15:00:00.000Z
CVE-2008-3938 
Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allows remote attackers to change arbitrary passwords via an update_password action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T15:00:00.000Z
CVE-2008-3939 
Directory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers to read arbitrary files via directory traversal sequences in the URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T15:00:00.000Z
CVE-2008-3940 
Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a (1) .plan or (2) .project file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T15:00:00.000Z
CVE-2008-3941 
Cross-site scripting (XSS) vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter in a search action to the default URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T15:00:00.000Z
CVE-2008-3942 
SQL injection vulnerability in landsee.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T15:00:00.000Z
CVE-2008-3943 
SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitrary SQL commands via the r parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T15:00:00.000Z
CVE-2008-3944 
SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T15:00:00.000Z
CVE-2008-3945 
SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T15:00:00.000Z
CVE-2008-3946 
The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a (1) .plan or (2) .project file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T16:00:00.000Z
CVE-2008-3947 
DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T16:00:00.000Z
CVE-2008-3948 
SQL injection vulnerability in admin/users/self-2.php in XRMS allows remote attackers to execute arbitrary SQL commands and modify name and email fields via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T16:00:00.000Z
CVE-2008-3949 
emacs/lisp/progmodes/python.el in Emacs 22.1 and 22.2 imports Python script from the current working directory during editing of a Python file, which allows local users to execute arbitrary code via a Trojan horse Python file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T17:00:00.000Z
CVE-2008-3950 
Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service (browser crash) via a JavaScript alert call with an argument that lacks breakable characters and has a length that is a multiple of the memory page size, leading to an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-16T23:00:00.000Z
CVE-2008-3951 
SQL injection vulnerability in view_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the ann_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-09T13:09:00.000Z
CVE-2008-3952 
SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the idcat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-09T13:09:00.000Z
CVE-2008-3953 
SQL injection vulnerability in keyword_search_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to execute arbitrary SQL commands via the tage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-09T13:09:00.000Z
CVE-2008-3954 
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-09T13:09:00.000Z
CVE-2008-3955 
SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ordercode parameter in a veiworderstatus page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-09T13:09:00.000Z
CVE-2008-3956 
orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .opx file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-09T14:00:00.000Z
CVE-2008-3957 
The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-09T14:00:00.000Z
CVE-2008-3958 
IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.  NOTE: this may overlap CVE-2008-3858.  NOTE: this issue exists because of an incomplete fix for CVE-2008-3959.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-09T14:00:00.000Z
CVE-2008-3959 
IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-09T14:00:00.000Z
CVE-2008-3960 
Unspecified vulnerability in the JDBC Applet Server Service (aka db2jds) in IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (service crash) via "malicious packets."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-09T14:00:00.000Z
CVE-2008-3961 
Multiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted attackers to execute arbitrary code via a crafted AI file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-17T18:06:00.000Z
CVE-2008-3962 
The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive information (memory contents) in opportunistic circumstances by reading a message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-10T15:00:00.000Z
CVE-2008-3963 
MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-10T15:00:00.000Z
CVE-2008-3964 
Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a PNG image with crafted zTXt chunks, related to (1) the png_push_read_zTXt function in pngread.c, and possibly related to (2) pngtest.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-10T15:00:00.000Z
CVE-2008-3965 
SQL injection vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-10T15:00:00.000Z
CVE-2008-3966 
Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via (1) a certain referrer field in usercp2.php, (2) a certain location field in inc/functions_online.php, and certain (3) tsubject and (4) psubject fields in moderation.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-10T15:00:00.000Z
CVE-2008-3967 
moderation.php in MyBB (aka MyBulletinBoard) before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-10T15:00:00.000Z
CVE-2008-3968 
Cross-site scripting (XSS) vulnerability in userlist.php in PunBB before 1.2.20 allows remote attackers to inject arbitrary web script or HTML via the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-10T15:00:00.000Z
CVE-2008-3969 
Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to "overwrite" and "hijack" existing accounts via unknown vectors related to "inconsistent handling of the USTATUS_IDENTIFIED state." NOTE: this issue exists because of an incomplete fix for CVE-2008-3920.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-10T15:00:00.000Z
CVE-2008-3970 
pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-10T15:00:00.000Z
CVE-2008-3971 
Heap-based buffer overflow in the open_man_file function in callbacks.c in gmanedit 0.4.1 allows remote attackers to execute arbitrary code via a crafted man page, which is not properly handled during utf8 conversion.  NOTE: another overflow was reported using a configuration file, but that vector does not have a scenario that crosses privilege boundaries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-10T15:00:00.000Z
CVE-2008-3972 
pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the "OpenSC" string, which might allow physically proximate attackers to exploit vulnerabilities that the card owner expected were patched, as demonstrated by exploitation of CVE-2008-2235.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-10T15:00:00.000Z
CVE-2008-3973 
Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database allows local users to affect confidentiality via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-14T01:00:00.000Z
CVE-2008-3974 
Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.0.2.8 and 9.2.0.8DV allows remote authenticated users to affect availability, related to SYS.OLAPIMPL_T.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-14T01:00:00.000Z
CVE-2008-3975 
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2008-3977.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T21:00:00.000Z
CVE-2008-3976 
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-3413 and CVE-2009-3414.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T21:00:00.000Z
CVE-2008-3977 
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2008-3975.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T21:00:00.000Z
CVE-2008-3978 
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-14T01:00:00.000Z
CVE-2008-3979 
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.  NOTE: the previous information was obtained from the January 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability that allows remote authenticated users to gain MDSYS privileges via the MDSYS.SDO_TOPO_DROP_FTBL trigger.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-14T01:00:00.000Z
CVE-2008-3980 
Unspecified vulnerability in the Upgrade component in Oracle Database 10.1.0.5 and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T21:00:00.000Z
CVE-2008-3981 
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-14T01:00:00.000Z
CVE-2008-3982 
Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3983 and CVE-2008-3984.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T21:00:00.000Z