rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-2053 
Unspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4.0.x before 4.0(2)_ES14, 4.1.x before 4.1(1)_ES11, and 7.x before 7.0(1) allows remote authenticated users with administrator role privileges to create, modify, or delete a superuser account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-22T10:00:00.000Z
CVE-2008-2054 
Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute arbitrary code on a client machine via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-29T16:00:00.000Z
CVE-2008-2055 
Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.1.x before 7.1(2)70, 7.2.x before 7.2(4), and 8.0.x before 8.0(3)10 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T21:00:00.000Z
CVE-2008-2056 
Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 and 8.1.x before 8.1(1)1 allows remote attackers to cause a denial of service (device reload) via a crafted Transport Layer Security (TLS) packet to the device interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T21:00:00.000Z
CVE-2008-2057 
The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2 allows remote attackers to cause a denial of service via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T21:00:00.000Z
CVE-2008-2058 
Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(3)2 and 8.0.x before 8.0(2)17 allows remote attackers to cause a denial of service (device reload) via a port scan against TCP port 443 on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T21:00:00.000Z
CVE-2008-2059 
Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T21:00:00.000Z
CVE-2008-2060 
Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of service (panic), and possibly bypass intended restrictions on network traffic, via a "specific series of jumbo Ethernet frames."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-18T19:29:00.000Z
CVE-2008-2061 
The Computer Telephony Integration (CTI) Manager service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3c) and 6.x before 6.1(2) allows remote attackers to cause a denial of service (TSP crash) via malformed network traffic to TCP port 2748.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-26T17:00:00.000Z
CVE-2008-2062 
The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3 before 4.3(2)SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsq35151.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-26T17:00:00.000Z
CVE-2008-2063 
SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL commands via the category parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-02T23:00:00.000Z
CVE-2008-2064 
Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface (API) to connect phpGedView with external programs like content management systems."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-02T23:00:00.000Z
CVE-2008-2065 
SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrary SQL commands via the catagorie parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-02T23:00:00.000Z
CVE-2008-2066 
Cross-site scripting (XSS) vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to inject arbitrary web script or HTML via the whatus parameter in a searchusers2 action.  NOTE: it was later reported that other versions before 3.0.1 are also vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-02T23:00:00.000Z
CVE-2008-2067 
SQL injection vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameter in a searchusers2 action.  NOTE: it was later reported that other versions before 3.0.1 are also vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-02T23:00:00.000Z
CVE-2008-2068 
Cross-site scripting (XSS) vulnerability in WordPress 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-02T23:00:00.000Z
CVE-2008-2069 
Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in a mailto: URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-02T23:00:00.000Z
CVE-2008-2070 
The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS protection and inject arbitrary script or HTML via repeated, improperly-ordered "<" and ">" characters in the (1) issue parameter to scripts2/knowlegebase, (2) user parameter to scripts2/changeip, (3) search parameter to scripts2/listaccts, and other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T16:00:00.000Z
CVE-2008-2071 
Multiple cross-site request forgery (CSRF) vulnerabilities in the WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allow remote attackers to perform unauthorized actions as cPanel administrators via requests to cpanel/whm/webmail and other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T16:00:00.000Z
CVE-2008-2072 
Cross-site scripting (XSS) vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to inject arbitrary web script or HTML via the l parameter, a different vector than CVE-2006-3260.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-05T16:00:00.000Z
CVE-2008-2073 
Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the l parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-05T16:00:00.000Z
CVE-2008-2074 
Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-05T16:00:00.000Z
CVE-2008-2075 
Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-05T16:00:00.000Z
CVE-2008-2076 
Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the style parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-05T16:00:00.000Z
CVE-2008-2077 
Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to "data form list view."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-05T16:00:00.000Z
CVE-2008-2078 
Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecified vectors related to the AWT Event Queue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-05T16:00:00.000Z
CVE-2008-2079 
MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-05T16:00:00.000Z
CVE-2008-2080 
Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CDF) library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-06T15:00:00.000Z
CVE-2008-2081 
Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the module parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-05T17:00:00.000Z
CVE-2008-2082 
Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web script or HTML via the module parameter, which leaks the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-05T17:00:00.000Z
CVE-2008-2083 
SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-05T17:00:00.000Z
CVE-2008-2084 
SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a listarticles action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-05T17:00:00.000Z
CVE-2008-2085 
Multiple stack-based buffer overflows in the (1) get_remote_ip_media and (2) get_remote_ipv6_media functions in call.cpp in SIPp 3.1 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted SIP message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T16:00:00.000Z
CVE-2008-2086 
Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-05T02:00:00.000Z
CVE-2008-2087 
SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the host_id parameter, a different vector than CVE-2005-3817.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-06T15:00:00.000Z
CVE-2008-2088 
SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-06T15:00:00.000Z
CVE-2008-2089 
Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (panic) via a crafted SCTP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-06T15:00:00.000Z
CVE-2008-2090 
Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (CPU consumption and network traffic amplification) via a crafted SCTP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-06T15:00:00.000Z
CVE-2008-2091 
Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute arbitrary local files via the i parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-06T16:00:00.000Z
CVE-2008-2092 
Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). NOTE: the severity of this issue has been disputed since there are limited attack scenarios.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-06T16:00:00.000Z
CVE-2008-2093 
SQL injection vulnerability in the Profiler (com_comprofiler) component in Community Builder for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-06T16:00:00.000Z
CVE-2008-2094 
SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-06T16:00:00.000Z
CVE-2008-2095 
SQL injection vulnerability in index.php in the FlippingBook (com_flippingbook) 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the book_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-06T16:00:00.000Z
CVE-2008-2096 
SQL injection vulnerability in BackLinkSpider allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to a site-specific component name such as link.php or backlinkspider.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-07T19:00:00.000Z
CVE-2008-2097 
Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-05T20:21:00.000Z
CVE-2008-2098 
Heap-based buffer overflow in the VMware Host Guest File System (HGFS) in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, VMware ACE 2 before 2.0.2 build 93057, and VMware Fusion before 1.1.2 build 87978, when folder sharing is used, allows guest OS users to execute arbitrary code on the host OS via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-02T14:00:00.000Z
CVE-2008-2099 
Unspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, and VMware ACE 2 before 2.0.2 build 93057 on Windows allows guest OS users to execute arbitrary code on the host OS via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-02T14:00:00.000Z
CVE-2008-2100 
Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-05T20:21:00.000Z
CVE-2008-2101 
The VMware Consolidated Backup (VCB) command-line utilities in VMware ESX 3.0.1 through 3.0.3 and ESX 3.5 place a password on the command line, which allows local users to obtain sensitive information by listing the process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-03T14:00:00.000Z
CVE-2008-2103 
Cross-site scripting (XSS) vulnerability in Bugzilla 2.17.2 and later allows remote attackers to inject arbitrary web script or HTML via the id parameter to the "Format for Printing" view or "Long Format" bug list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-07T20:07:00.000Z
CVE-2008-2104 
The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the XML-RPC interface, which bypasses the canconfirm check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-07T20:07:00.000Z
CVE-2008-2105 
email_in.pl in Bugzilla 2.23.4, 3.0.x before 3.0.4, and 3.1.x before 3.1.4 allows remote authenticated users to more easily spoof the changer of a bug via a @reporter command in the body of an e-mail message, which overrides the e-mail address as normally obtained from the From e-mail header.  NOTE: since From headers are easily spoofed, this only crosses privilege boundaries in environments that provide additional verification of e-mail addresses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-07T20:07:00.000Z
CVE-2008-2106 
Call of Duty 4 (CoD4) 1.5 and earlier allows remote authenticated users to cause a denial of service (crash) via a type 7 stats packet, which triggers a memcpy with a negative value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-07T20:07:00.000Z
CVE-2008-2107 
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mt_rand functions and possibly bypass protection mechanisms that rely on an unknown initial seed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-07T21:00:00.000Z
CVE-2008-2108 
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against protection mechanisms that use the rand and mt_rand functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-07T21:00:00.000Z
CVE-2008-2109 
field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\0', which triggers an infinite loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-07T21:00:00.000Z
CVE-2008-2110 
Unrestricted file upload vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-07T23:00:00.000Z
CVE-2008-2111 
The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-07T23:00:00.000Z
CVE-2008-2112 
Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown vectors related to utconfig.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-08T00:00:00.000Z
CVE-2008-2113 
SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-08T16:00:00.000Z
CVE-2008-2114 
SQL injection vulnerability in emall/search.php in Pre Shopping Mall 1.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-08T16:00:00.000Z
CVE-2008-2115 
Multiple cross-site scripting (XSS) vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) te and (2) dir parameters in a tempedit action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-08T16:00:00.000Z
CVE-2008-2116 
Multiple directory traversal vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to read arbitrary local files via a .. (dot dot) in the (1) te and (2) dir parameters in a tempedit action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-08T16:00:00.000Z
CVE-2008-2117 
Cross-site scripting (XSS) vulnerability in pages/news.page.inc in Project Alumni 1.0.9 allows remote attackers to inject arbitrary web script or HTML via the year parameter in a news action to index.php, a different vector than CVE-2007-6126.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-08T16:00:00.000Z
CVE-2008-2118 
SQL injection vulnerability in info.php in Project Alumni 1.0.9 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-08T16:00:00.000Z
CVE-2008-2119 
Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T19:17:00.000Z