rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-4609 
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-20T17:00:00.000Z
CVE-2008-4610 
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-20T17:00:00.000Z
CVE-2008-4611 
SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-20T18:00:00.000Z
CVE-2008-4612 
Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp and (2) content.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-20T18:00:00.000Z
CVE-2008-4613 
SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via the sortby parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-20T18:00:00.000Z
CVE-2008-4614 
PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to create and delete forums, topics, and replies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-20T18:00:00.000Z
CVE-2008-4615 
Unspecified vulnerability in i_utils.asp in PortalApp before 4.01a has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-20T18:00:00.000Z
CVE-2008-4616 
The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-20T18:00:00.000Z
CVE-2008-4617 
SQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-20T19:00:00.000Z
CVE-2008-4618 
The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows attackers to cause a denial of service (panic) via unspecified vectors, related to sctp_sf_violation_paramlen, sctp_sf_abort_violation, sctp_make_abort_violation, and incorrect data types in function calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-20T22:00:00.000Z
CVE-2008-4619 
The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted request to procedure 8 in program 100000 (rpcbind), related to the XDR_DECODE operation and the taddr2uaddr function.  NOTE: this might be a duplicate of CVE-2007-0165.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-20T22:00:00.000Z
CVE-2008-4620 
SQL injection vulnerability in Meeting Room Booking System (MRBS) before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to (1) month.php, and possibly (2) day.php and (3) week.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4621 
SQL injection vulnerability in bannerclick.php in ZeeScripts Zeeproperty allows remote attackers to execute arbitrary SQL commands via the adid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4622 
The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and gain administrative access by setting the fn-loggedin cookie to 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4623 
SQL injection vulnerability in the DS-Syndicate (com_ds-syndicate) component 1.1.1 for Joomla allows remote attackers to execute arbitrary SQL commands via the feed_id parameter to index2.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4624 
PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CFG[CDIR] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4625 
SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter, a different vector than CVE-2008-0683.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4626 
Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation (yappa-ng) 2.3.2 and possibly other versions through 2.3.3-beta0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the album parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4627 
SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4628 
SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL commands via the post_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4629 
Cross-site scripting (XSS) vulnerability in Usagi Project MyNETS 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4630 
Multiple unspecified vulnerabilities in Midgard Components (MidCOM) Framework before 8.09.1 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4631 
Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted message.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4632 
Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is disabled, allow remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the (1) post and (2) doc parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4633 
SQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for Drupal, when "Allow user to vote again" is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to a "previously cast vote."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4634 
Cross-site scripting (XSS) vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4635 
Unspecified vulnerability in Hisanaga Electric Co, Ltd. hisa_cart 1.29 and earlier, a module for XOOPS, allows remote attackers to obtain sensitive user information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T00:00:00.000Z
CVE-2008-4636 
yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-27T00:00:00.000Z
CVE-2008-4637 
Cross-site scripting (XSS) vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors in the advanced search feature.  NOTE: this is probably a variant of CVE-2008-4121.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T16:00:00.000Z
CVE-2008-4638 
qioadmin in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T16:00:00.000Z
CVE-2008-4639 
jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T16:00:00.000Z
CVE-2008-4640 
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T16:00:00.000Z
CVE-2008-4641 
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T16:00:00.000Z
CVE-2008-4642 
SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T18:00:00.000Z
CVE-2008-4643 
SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4644 
hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4645 
plugins/event_tracer/event_list.php in PhpWebGallery 1.7.2 and earlier allows remote authenticated administrators to execute arbitrary PHP code via PHP sequences in the sort parameter, which is processed by create_function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4646 
The Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system administrator password in plaintext in CreateDbInstall.log, which allows local users to gain privileges to the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4647 
SQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attackers to execute arbitrary SQL commands via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4648 
Cross-site scripting (XSS) vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO or the (2) option, (3) Itemid, (4) id, (5) task, (6) bid, and (7) contact_id parameters.  NOTE: the error might be located in modules/mod_language.php, and index.php might be the interaction point.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4649 
Session fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4650 
SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands via the eventdate parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4651 
Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby parameter to admin/cms/images.php and the (2) nav_id parameter in an editrecord action to admin/cms/nav.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4652 
Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4653 
SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4654 
Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4655 
SQL injection vulnerability in the Simple survey (simplesurvey) 1.7.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4656 
SQL injection vulnerability in the Frontend Users View (feusersview) 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4657 
SQL injection vulnerability in the Econda Plugin (econda) 0.0.2 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4658 
SQL injection vulnerability in the JobControl (dmmjobcontrol) 1.15.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4659 
SQL injection vulnerability in the Mannschaftsliste (kiddog_playerlist) 1.0.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4660 
SQL injection vulnerability in the M1 Intern (m1_intern) 1.0.0 extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4661 
Cross-site scripting (XSS) vulnerability in the Page Improvements (sm_pageimprovements) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T22:00:00.000Z
CVE-2008-4662 
Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T23:00:00.000Z
CVE-2008-4663 
Cross-site scripting (XSS) vulnerability in analysis.cgi 1.44, as used in K's CGI Access Log Kaiseki (1) jcode.pl and (2) Jcode.pm, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T23:00:00.000Z
CVE-2008-4664 
Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control (QvodInsert.dll) in QVOD Player before 2.1.5 build 0053 allows remote attackers to execute arbitrary code via a long URL property.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T00:00:00.000Z
CVE-2008-4665 
SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) news_read.php and (2) gifts_show.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T10:00:00.000Z
CVE-2008-4666 
SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T10:00:00.000Z
CVE-2008-4667 
Directory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the rss parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T10:00:00.000Z
CVE-2008-4668 
Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the folder parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T10:00:00.000Z
CVE-2008-4669 
Cross-site scripting (XSS) vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T10:00:00.000Z
CVE-2008-4670 
Cross-site scripting (XSS) vulnerability in search.php in Ed Pudol Clickbank Portal allows remote attackers to inject arbitrary web script or HTML via the search box.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T10:00:00.000Z
CVE-2008-4671 
Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) ip_address parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T10:00:00.000Z
CVE-2008-4672 
Cross-site scripting (XSS) vulnerability in search_results.php in buymyscripts Lyrics Script allows remote attackers to inject arbitrary web script or HTML via the k parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T10:00:00.000Z
CVE-2008-4673 
PHP remote file inclusion vulnerability in panel/common/theme/default/header_setup.php in WebBiscuits Software Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the (1) path[docroot] and (2) component parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T10:00:00.000Z
CVE-2008-4674 
SQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in browse mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T10:00:00.000Z
CVE-2008-4675 
SQL injection vulnerability in index.php in PHPcounter 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T10:00:00.000Z
CVE-2008-4676 
Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file.  NOTE: this might be the same issue as CVE-2008-3485, but the vendor advisory is too vague to be certain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T10:00:00.000Z
CVE-2008-4677 
autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores credentials for an FTP session, and sends those credentials when attempting to establish subsequent FTP sessions to servers on different hosts, which allows remote FTP servers to obtain sensitive information in opportunistic circumstances by logging usernames and passwords.  NOTE: the upstream vendor disputes a vector involving different ports on the same host, stating "I'm assuming that they're using the same id and password on that unchanged hostname, deliberately."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T17:00:00.000Z
CVE-2008-4678 
The HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 allows remote attackers to cause a denial of service (controller 0C4 abend and application hang) via a long HTTP Host header, related to "storage overlay" on the stack and a "parse failure."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-22T17:00:00.000Z