rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-3197 
Cross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to (1) the db parameter in the "Creating a Database" functionality (db_create.php), and (2) the convcharset and collation_connection parameters related to an unspecified program that modifies the connection character set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-16T18:00:00.000Z
CVE-2008-3198 
Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page.  NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-17T10:00:00.000Z
CVE-2008-3199 
Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service (stack consumption) via unknown network traffic with a large "bytes-in-memory/bytes-on-wire ratio."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-17T10:00:00.000Z
CVE-2008-3200 
SQL injection vulnerability in vlc_forum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affich_message action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-17T10:00:00.000Z
CVE-2008-3201 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) acct_fname and (2) acct_lname parameters in an edit action, and the (3) PID, (4) PGID, and (5) rez parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-17T10:00:00.000Z
CVE-2008-3202 
Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the current_url parameter in a tellafriend action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-17T10:00:00.000Z
CVE-2008-3203 
js/pages/pages_data.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-17T10:00:00.000Z
CVE-2008-3204 
SQL injection vulnerability in tops_top.php in E-topbiz Million Pixels 3 allows remote attackers to execute arbitrary SQL commands via the id_cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-17T10:00:00.000Z
CVE-2008-3205 
Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the c parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-17T10:00:00.000Z
CVE-2008-3206 
SQL injection vulnerability in browse.groups.php in Yuhhu Pubs Black Cat allows remote attackers to execute arbitrary SQL commands via the category parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T15:00:00.000Z
CVE-2008-3207 
PHP remote file inclusion vulnerability in cms/modules/form.lib.php in Pragyan CMS 2.6.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the (1) sourceFolder or (2) moduleFolder parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T15:00:00.000Z
CVE-2008-3208 
Simple DNS Plus 4.1, 5.0, and possibly other versions before 5.1.101 allows remote attackers to cause a denial of service via multiple DNS reply packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T15:00:00.000Z
CVE-2008-3209 
Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remote attackers to execute arbitrary code via a long string argument to the GetNumberOfImagesInGifFile method in the BIImgFrm Control ActiveX control in biimgfrm.ocx.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T15:00:00.000Z
CVE-2008-3210 
rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service (daemon crash) via a SIP (1) INVITE or (2) OPTIONS message with a long domain name in a request URI, which triggers an assert error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T15:00:00.000Z
CVE-2008-3211 
Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T15:00:00.000Z
CVE-2008-3212 
Multiple SQL injection vulnerabilities in Scripteen Free Image Hosting Script 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to admin/login.php, or the (3) uname or (4) pass parameter to login.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T15:00:00.000Z
CVE-2008-3213 
SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter to portal/index.php in a tablon action. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T15:00:00.000Z
CVE-2008-3214 
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3215 
libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access.  NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3216 
The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the current working directory, which allows local users to overwrite arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3217 
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning.  NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3218 
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) unspecified OpenID values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3219 
The Drupal filter_xss_admin function in 5.x before 5.8 and 6.x before 6.3 does not "prevent use of the object HTML tag in administrator input," which has unknown impact and attack vectors, probably related to an insufficient cross-site scripting (XSS) protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3220 
Cross-site request forgery (CSRF) vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of "translated strings."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3221 
Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3222 
Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the current request during a login event," allows remote attackers to hijack web sessions via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3223 
SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3224 
Unspecified vulnerability in phpBB before 3.0.1 has unknown impact and attack vectors related to "urls gone through redirect() being used within login_box()."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3225 
Joomla! before 1.5.4 allows attackers to access administration functionality, which has unknown impact and attack vectors related to a missing "LDAP security fix."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3226 
The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3227 
Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3228 
Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3229 
Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3230 
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3231 
xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3232 
Unrestricted file upload vulnerability in ecrire/images.php in Dotclear 1.2.7.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3233 
Cross-site scripting (XSS) vulnerability in WordPress before 2.6, SVN development versions only, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3234 
sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by the role name, to the username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-18T16:00:00.000Z
CVE-2008-3235 
Unspecified vulnerability in the PropFilePasswordEncoder utility in the Security component in IBM WebSphere Application Server (WAS) 5.1 before 5.1.1.19 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T16:00:00.000Z
CVE-2008-3236 
Unspecified vulnerability in Wsadmin in the System Management/Repository component in IBM WebSphere Application Server (WAS) 5.1 before 5.1.1.19 allows attackers to obtain sensitive information via vectors related to "previously encrypted properties" that are not encrypted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T16:00:00.000Z
CVE-2008-3237 
Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T16:00:00.000Z
CVE-2008-3238 
Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via (1) the seller_id parameter in sellers_othersitem.php, (2) the productid parameter in classifieds.php, and (3) the id parameter in shop.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T16:00:00.000Z
CVE-2008-3239 
Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HFP1, when register_globals is enabled, allows remote attackers to upload and execute arbitrary code via a filename in the CONF[CRON_LOGFILE] parameter and file contents in the CONF[LOCALE_LONG_DATE_TIME] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T16:00:00.000Z
CVE-2008-3240 
SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T16:00:00.000Z
CVE-2008-3241 
SQL injection vulnerability in players-detail.php in UltraStats 0.2.136, 0.2.140, and 0.2.142 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T16:00:00.000Z
CVE-2008-3242 
Heap-based buffer overflow in the PPMedia Class ActiveX control in PPMPlayer.dll in PPMate 2.3.1.93 allows remote attackers to execute arbitrary code via a long argument to the StartUrl method.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T16:00:00.000Z
CVE-2008-3243 
Multiple unspecified vulnerabilities in the scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allow remote attackers to cause a denial of service via (1) a crafted UPX-compressed file, which triggers an engine crash; (2) a crafted Microsoft Office file, which triggers an infinite loop; or (3) an ASPack-compressed file, which triggers an engine crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T16:00:00.000Z
CVE-2008-3244 
The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of service (engine crash) via a CHM file with a large nb_dir value that triggers an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T16:00:00.000Z
CVE-2008-3245 
SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9, 4.3.10, 4.4.8, and 5.2.6 allows remote attackers to execute arbitrary SQL commands via the viewCat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T16:00:00.000Z
CVE-2008-3246 
Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5) allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T16:00:00.000Z
CVE-2008-3247 
The LDT implementation in the Linux kernel 2.6.25.x before 2.6.25.11 on x86_64 platforms uses an incorrect size for ldt_desc, which allows local users to cause a denial of service (system crash) or possibly gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-24T15:18:00.000Z
CVE-2008-3248 
qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T16:00:00.000Z
CVE-2008-3249 
The client in Lenovo System Update before 3.14 does not properly validate the certificate when establishing an SSL connection, which allows remote attackers to install arbitrary packages via an SSL certificate whose X.509 headers match a public certificate used by IBM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T17:00:00.000Z
CVE-2008-3250 
SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL commands via the filter parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T17:00:00.000Z
CVE-2008-3251 
Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the opp parameter to tampereunited/opponent.php; or the id parameter to (2) index.php, (3) player.php, (4) matchdetails.php, or (5) additionalpage.php in tampereunited/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T17:00:00.000Z
CVE-2008-3252 
Stack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large number of lines starting with a period.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-21T17:00:00.000Z
CVE-2008-3253 
Cross-site scripting (XSS) vulnerability in the XenAPI HTTP interfaces in Citrix XenServer Express, Standard, and Enterprise Edition 4.1.0; Citrix XenServer Dell Edition (Express and Enterprise) 4.1.0; and HP integrated Citrix XenServer (Select and Enterprise) 4.1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-22T16:00:00.000Z
CVE-2008-3254 
SQL injection vulnerability in index.php in preCMS 1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a UserProfil action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-22T16:00:00.000Z
CVE-2008-3255 
Cross-site scripting (XSS) vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-22T16:00:00.000Z
CVE-2008-3256 
SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-22T16:00:00.000Z
CVE-2008-3257 
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-22T16:00:00.000Z
CVE-2008-3258 
Multiple SQL injection vulnerabilities in Zoph before 0.7.0.5 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-22T16:00:00.000Z
CVE-2008-3259 
OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the X11 forwarding port via a bind to a single IP address, as demonstrated on the HP-UX platform.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-22T16:00:00.000Z
CVE-2008-3260 
Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via (1) the cwd parameter in a rqMkHtml action to document/rqmkhtml.php, or the query string to (2) announcements/announcements.php, (3) calendar/agenda.php, (4) course/index.php, (5) course_description/index.php, (6) document/document.php, (7) exercise/exercise.php, (8) group/group_space.php, (9) phpbb/newtopic.php, (10) phpbb/reply.php, (11) phpbb/viewtopic.php, (12) wiki/wiki.php, or (13) work/work.php in claroline/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-22T17:00:00.000Z
CVE-2008-3261 
Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-22T17:00:00.000Z
CVE-2008-3262 
Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a requirement for the previous password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-22T17:00:00.000Z
CVE-2008-3263 
The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (call-number exhaustion and CPU consumption) by quickly sending a large number of IAX2 (IAX) POKE requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-22T23:00:00.000Z