cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8.1 cpe:/o:linux:linux_kernel:2.6.9 cpe:/o:linux:linux_kernel:2.6.9:rc1 cpe:/o:linux:linux_kernel:2.6.9:rc2 cpe:/o:linux:linux_kernel:2.6.9:rc3 cpe:/o:linux:linux_kernel:2.6.9:rc4 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11.1 cpe:/o:linux:linux_kernel:2.6.11.2 cpe:/o:linux:linux_kernel:2.6.11.3 cpe:/o:linux:linux_kernel:2.6.11.4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6.11.7 cpe:/o:linux:linux_kernel:2.6.11.8 cpe:/o:linux:linux_kernel:2.6.11.9 cpe:/o:linux:linux_kernel:2.6.11.10 cpe:/o:linux:linux_kernel:2.6.11.11 cpe:/o:linux:linux_kernel:2.6.11.12 cpe:/o:linux:linux_kernel:2.6.12 cpe:/o:linux:linux_kernel:2.6.12.1 cpe:/o:linux:linux_kernel:2.6.12.2 cpe:/o:linux:linux_kernel:2.6.12.3 cpe:/o:linux:linux_kernel:2.6.12.4 cpe:/o:linux:linux_kernel:2.6.12.5 cpe:/o:linux:linux_kernel:2.6.12.6 cpe:/o:linux:linux_kernel:2.6.13 cpe:/o:linux:linux_kernel:2.6.13.1 cpe:/o:linux:linux_kernel:2.6.13.2 cpe:/o:linux:linux_kernel:2.6.13.3 cpe:/o:linux:linux_kernel:2.6.13.4 cpe:/o:linux:linux_kernel:2.6.13.5 cpe:/o:linux:linux_kernel:2.6.14 cpe:/o:linux:linux_kernel:2.6.14.1 cpe:/o:linux:linux_kernel:2.6.14.2 cpe:/o:linux:linux_kernel:2.6.14.3 cpe:/o:linux:linux_kernel:2.6.14.4 cpe:/o:linux:linux_kernel:2.6.14.5 cpe:/o:linux:linux_kernel:2.6.14.6 cpe:/o:linux:linux_kernel:2.6.14.7 cpe:/o:linux:linux_kernel:2.6.15 cpe:/o:linux:linux_kernel:2.6.15.1 cpe:/o:linux:linux_kernel:2.6.15.2 cpe:/o:linux:linux_kernel:2.6.15.3 cpe:/o:linux:linux_kernel:2.6.15.4 cpe:/o:linux:linux_kernel:2.6.15.5 cpe:/o:linux:linux_kernel:2.6.15.6 cpe:/o:linux:linux_kernel:2.6.15.7 cpe:/o:linux:linux_kernel:2.6.16 cpe:/o:linux:linux_kernel:2.6.16:rc1 cpe:/o:linux:linux_kernel:2.6.16.1 cpe:/o:linux:linux_kernel:2.6.16.2 cpe:/o:linux:linux_kernel:2.6.16.3 cpe:/o:linux:linux_kernel:2.6.16.4 cpe:/o:linux:linux_kernel:2.6.16.5 cpe:/o:linux:linux_kernel:2.6.16.6 cpe:/o:linux:linux_kernel:2.6.16.7 cpe:/o:linux:linux_kernel:2.6.16.8 cpe:/o:linux:linux_kernel:2.6.16.9 cpe:/o:linux:linux_kernel:2.6.16.10 cpe:/o:linux:linux_kernel:2.6.16.11 cpe:/o:linux:linux_kernel:2.6.16.12 cpe:/o:linux:linux_kernel:2.6.16.13 cpe:/o:linux:linux_kernel:2.6.16.14 cpe:/o:linux:linux_kernel:2.6.16.15 cpe:/o:linux:linux_kernel:2.6.16.16 cpe:/o:linux:linux_kernel:2.6.16.17 cpe:/o:linux:linux_kernel:2.6.16.18 cpe:/o:linux:linux_kernel:2.6.16.19 cpe:/o:linux:linux_kernel:2.6.16.20 cpe:/o:linux:linux_kernel:2.6.16.21 cpe:/o:linux:linux_kernel:2.6.16.22 cpe:/o:linux:linux_kernel:2.6.16.23 cpe:/o:linux:linux_kernel:2.6.16.24 cpe:/o:linux:linux_kernel:2.6.16.25 cpe:/o:linux:linux_kernel:2.6.16.26 cpe:/o:linux:linux_kernel:2.6.16.27 cpe:/o:linux:linux_kernel:2.6.16.28 cpe:/o:linux:linux_kernel:2.6.16.29 cpe:/o:linux:linux_kernel:2.6.16.30 cpe:/o:linux:linux_kernel:2.6.16.31 cpe:/o:linux:linux_kernel:2.6.16.31:-rc1 cpe:/o:linux:linux_kernel:2.6.16.31:-rc2 cpe:/o:linux:linux_kernel:2.6.16.31:-rc3 cpe:/o:linux:linux_kernel:2.6.16.31:-rc4 cpe:/o:linux:linux_kernel:2.6.16.31:-rc5 cpe:/o:linux:linux_kernel:2.6.16.32 cpe:/o:linux:linux_kernel:2.6.16.33 cpe:/o:linux:linux_kernel:2.6.16.34 cpe:/o:linux:linux_kernel:2.6.16.35 cpe:/o:linux:linux_kernel:2.6.16.36 cpe:/o:linux:linux_kernel:2.6.16.37 cpe:/o:linux:linux_kernel:2.6.16.38 cpe:/o:linux:linux_kernel:2.6.16.39 cpe:/o:linux:linux_kernel:2.6.16.40 cpe:/o:linux:linux_kernel:2.6.16.41 cpe:/o:linux:linux_kernel:2.6.16.42 cpe:/o:linux:linux_kernel:2.6.16.43 cpe:/o:linux:linux_kernel:2.6.16.44 cpe:/o:linux:linux_kernel:2.6.16.45 cpe:/o:linux:linux_kernel:2.6.16.46 cpe:/o:linux:linux_kernel:2.6.16.47 cpe:/o:linux:linux_kernel:2.6.16.48 cpe:/o:linux:linux_kernel:2.6.16.49 cpe:/o:linux:linux_kernel:2.6.16.50 cpe:/o:linux:linux_kernel:2.6.16.51 cpe:/o:linux:linux_kernel:2.6.16.52 cpe:/o:linux:linux_kernel:2.6.16.53 cpe:/o:linux:linux_kernel:2.6.16.54 cpe:/o:linux:linux_kernel:2.6.16.55 cpe:/o:linux:linux_kernel:2.6.16.56 cpe:/o:linux:linux_kernel:2.6.16.57 cpe:/o:linux:linux_kernel:2.6.16.58 cpe:/o:linux:linux_kernel:2.6.16.59 cpe:/o:linux:linux_kernel:2.6.16.60 cpe:/o:linux:linux_kernel:2.6.16.61 cpe:/o:linux:linux_kernel:2.6.16.62 cpe:/o:linux:linux_kernel:2.6.17 cpe:/o:linux:linux_kernel:2.6.17:rc1 cpe:/o:linux:linux_kernel:2.6.17:rc2 cpe:/o:linux:linux_kernel:2.6.17:rc3 cpe:/o:linux:linux_kernel:2.6.17:rc4 cpe:/o:linux:linux_kernel:2.6.17:rc5 cpe:/o:linux:linux_kernel:2.6.17:rc6 cpe:/o:linux:linux_kernel:2.6.17.1 cpe:/o:linux:linux_kernel:2.6.17.2 cpe:/o:linux:linux_kernel:2.6.17.3 cpe:/o:linux:linux_kernel:2.6.17.4 cpe:/o:linux:linux_kernel:2.6.17.5 cpe:/o:linux:linux_kernel:2.6.17.6 cpe:/o:linux:linux_kernel:2.6.17.7 cpe:/o:linux:linux_kernel:2.6.17.8 cpe:/o:linux:linux_kernel:2.6.17.9 cpe:/o:linux:linux_kernel:2.6.17.10 cpe:/o:linux:linux_kernel:2.6.17.11 cpe:/o:linux:linux_kernel:2.6.17.12 cpe:/o:linux:linux_kernel:2.6.17.13 cpe:/o:linux:linux_kernel:2.6.17.14 cpe:/o:linux:linux_kernel:2.6.18 cpe:/o:linux:linux_kernel:2.6.18:rc1 cpe:/o:linux:linux_kernel:2.6.18:rc2 cpe:/o:linux:linux_kernel:2.6.18:rc3 cpe:/o:linux:linux_kernel:2.6.18:rc4 cpe:/o:linux:linux_kernel:2.6.18:rc5 cpe:/o:linux:linux_kernel:2.6.18:rc6 cpe:/o:linux:linux_kernel:2.6.18:rc7 cpe:/o:linux:linux_kernel:2.6.18.1 cpe:/o:linux:linux_kernel:2.6.18.2 cpe:/o:linux:linux_kernel:2.6.18.3 cpe:/o:linux:linux_kernel:2.6.18.4 cpe:/o:linux:linux_kernel:2.6.18.5 cpe:/o:linux:linux_kernel:2.6.18.6 cpe:/o:linux:linux_kernel:2.6.18.7 cpe:/o:linux:linux_kernel:2.6.18.8 cpe:/o:linux:linux_kernel:2.6.19 cpe:/o:linux:linux_kernel:2.6.19.1 cpe:/o:linux:linux_kernel:2.6.19.2 cpe:/o:linux:linux_kernel:2.6.19.3 cpe:/o:linux:linux_kernel:2.6.19.4 cpe:/o:linux:linux_kernel:2.6.19.5 cpe:/o:linux:linux_kernel:2.6.19.6 cpe:/o:linux:linux_kernel:2.6.19.7 cpe:/o:linux:linux_kernel:2.6.20 cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:linux:linux_kernel:2.6.20.2 cpe:/o:linux:linux_kernel:2.6.20.3 cpe:/o:linux:linux_kernel:2.6.20.4 cpe:/o:linux:linux_kernel:2.6.20.5 cpe:/o:linux:linux_kernel:2.6.20.6 cpe:/o:linux:linux_kernel:2.6.20.7 cpe:/o:linux:linux_kernel:2.6.20.8 cpe:/o:linux:linux_kernel:2.6.20.9 cpe:/o:linux:linux_kernel:2.6.20.10 cpe:/o:linux:linux_kernel:2.6.20.11 cpe:/o:linux:linux_kernel:2.6.20.12 cpe:/o:linux:linux_kernel:2.6.20.13 cpe:/o:linux:linux_kernel:2.6.20.14 cpe:/o:linux:linux_kernel:2.6.20.15 cpe:/o:linux:linux_kernel:2.6.20.16 cpe:/o:linux:linux_kernel:2.6.20.17 cpe:/o:linux:linux_kernel:2.6.20.18 cpe:/o:linux:linux_kernel:2.6.20.19 cpe:/o:linux:linux_kernel:2.6.20.20 cpe:/o:linux:linux_kernel:2.6.20.21 cpe:/o:linux:linux_kernel:2.6.21 cpe:/o:linux:linux_kernel:2.6.21.1 cpe:/o:linux:linux_kernel:2.6.21.2 cpe:/o:linux:linux_kernel:2.6.21.3 cpe:/o:linux:linux_kernel:2.6.21.4 cpe:/o:linux:linux_kernel:2.6.21.5 cpe:/o:linux:linux_kernel:2.6.21.6 cpe:/o:linux:linux_kernel:2.6.21.7 cpe:/o:linux:linux_kernel:2.6.22 cpe:/o:linux:linux_kernel:2.6.22.1 cpe:/o:linux:linux_kernel:2.6.22.2 cpe:/o:linux:linux_kernel:2.6.22.3 cpe:/o:linux:linux_kernel:2.6.22.4 cpe:/o:linux:linux_kernel:2.6.22.5 cpe:/o:linux:linux_kernel:2.6.22.6 cpe:/o:linux:linux_kernel:2.6.22.7 cpe:/o:linux:linux_kernel:2.6.22.8 cpe:/o:linux:linux_kernel:2.6.22.9 cpe:/o:linux:linux_kernel:2.6.22.10 cpe:/o:linux:linux_kernel:2.6.22.11 cpe:/o:linux:linux_kernel:2.6.22.12 cpe:/o:linux:linux_kernel:2.6.22.13 cpe:/o:linux:linux_kernel:2.6.22.14 cpe:/o:linux:linux_kernel:2.6.22.15 cpe:/o:linux:linux_kernel:2.6.23 cpe:/o:linux:linux_kernel:2.6.23:rc1 cpe:/o:linux:linux_kernel:2.6.23:rc2 cpe:/o:linux:linux_kernel:2.6.23.1 cpe:/o:linux:linux_kernel:2.6.23.2 cpe:/o:linux:linux_kernel:2.6.23.3 cpe:/o:linux:linux_kernel:2.6.23.4 cpe:/o:linux:linux_kernel:2.6.23.5 cpe:/o:linux:linux_kernel:2.6.23.6 cpe:/o:linux:linux_kernel:2.6.23.7 cpe:/o:linux:linux_kernel:2.6.23.8 cpe:/o:linux:linux_kernel:2.6.23.9 cpe:/o:linux:linux_kernel:2.6.23.10 cpe:/o:linux:linux_kernel:2.6.23.11 cpe:/o:linux:linux_kernel:2.6.23.12 cpe:/o:linux:linux_kernel:2.6.23.13

CVE-2008-0001

2008-01-15T15:00:00.000-05:00

2018-10-15T17:56:17.463-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=974a9f0b47da74e28f68b9c8645c3786aa5ace1a CONFIRM http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.16 SUSE SUSE-SA:2008:006 SUSE SUSE-SA:2008:013 REDHAT RHSA-2008:0055 SECTRACK 1019289 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0021 DEBIAN DSA-1479 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.14 MANDRIVA MDVSA-2008:044 MANDRIVA MDVSA-2008:112 REDHAT RHSA-2008:0089 BUGTRAQ 20080117 rPSA-2008-0021-1 kernel BID 27280 UBUNTU USN-574-1 UBUNTU USN-578-1 VUPEN ADV-2008-0151 XF linux-directory-security-bypass(39672) CONFIRM https://issues.rpath.com/browse/RPL-2146 FEDORA FEDORA-2008-0748 VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.

cpe:/a:apache:tomcat:6.0.5 cpe:/a:apache:tomcat:6.0.6 cpe:/a:apache:tomcat:6.0.7 cpe:/a:apache:tomcat:6.0.8 cpe:/a:apache:tomcat:6.0.9 cpe:/a:apache:tomcat:6.0.10 cpe:/a:apache:tomcat:6.0.11 cpe:/a:apache:tomcat:6.0.12 cpe:/a:apache:tomcat:6.0.13 cpe:/a:apache:tomcat:6.0.14 cpe:/a:apache:tomcat:6.0.15

CVE-2008-0002

2008-02-11T20:00:00.000-05:00

2018-10-15T17:56:25.933-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2008-10-09 SUSE SUSE-SR:2009:004 HP HPSBST02955 GENTOO GLSA-200804-10 SREASON 3638 CONFIRM http://support.apple.com/kb/HT3216 CONFIRM http://tomcat.apache.org/security-6.html BUGTRAQ 20080208 CVE-2008-0002: Tomcat information disclosure vulnerability BUGTRAQ 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components BID 27703 BID 31681 CONFIRM http://www.vmware.com/security/advisories/VMSA-2009-0016.html VUPEN ADV-2008-0488 VUPEN ADV-2008-2780 VUPEN ADV-2009-3316 FEDORA FEDORA-2008-1467 FEDORA FEDORA-2008-1603 Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.

cpe:/a:openpegasus:management_server:2.6.1

CVE-2008-0003

2008-01-08T15:46:00.000-05:00

2018-10-15T17:56:29.480-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBMA02331 MLIST [Security-announce] 20080415 VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus SECTRACK 1019159 VIM 20080115 vuldb confusion between OpenPegasus issues REDHAT RHSA-2008:0002 BUGTRAQ 20080416 VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus BID 27172 BID 27188 VUPEN ADV-2008-0063 VUPEN ADV-2008-0638 VUPEN ADV-2008-1234 VUPEN ADV-2008-1391 CONFIRM http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4129 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=426578 XF openpegasus-pambasic-bo(39527) FEDORA FEDORA-2008-0506 FEDORA FEDORA-2008-0572 Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360.

CVE-2008-0004

2009-03-26T06:12:08.780-04:00

2009-03-26T06:12:09.313-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

cpe:/a:apache:http_server:1.3 cpe:/a:apache:http_server:2.0

CVE-2008-0005

2008-01-11T19:46:00.000-05:00

2018-10-15T17:56:33.417-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 SUSE SUSE-SA:2008:021 MLIST [security-announce] 20090820 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server HP SSRT090085 HP HPSBUX02465 HP SSRT090208 GENTOO GLSA-200803-19 SREASONRES 20080110 Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability SREASON 3526 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm MANDRIVA MDVSA-2008:014 MANDRIVA MDVSA-2008:015 MANDRIVA MDVSA-2008:016 REDHAT RHSA-2008:0004 REDHAT RHSA-2008:0005 REDHAT RHSA-2008:0006 REDHAT RHSA-2008:0007 REDHAT RHSA-2008:0008 REDHAT RHSA-2008:0009 BUGTRAQ 20080110 SecurityReason - Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability BUGTRAQ 20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server BID 27234 SECTRACK 1019185 UBUNTU USN-575-1 VUPEN ADV-2008-0924 VUPEN ADV-2008-1875 XF apache-modproxyftp-utf7-xss(39615) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html FEDORA FEDORA-2008-1711 FEDORA FEDORA-2008-1695 mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.

cpe:/a:sun:solaris_libfont cpe:/a:sun:solaris_libxfont cpe:/a:x.org:xserver:1.4

CVE-2008-0006

2008-01-18T18:00:00.000-05:00

2018-10-15T17:56:41.150-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=204362 CONFIRM http://docs.info.apple.com/article.html?artnum=307562 HP SSRT080083 JVN JVN#88935101 JVNDB JVNDB-2008-001043 APPLE APPLE-SA-2008-03-18 MLIST [xorg] 20080117 X.Org security advisory: multiple vulnerabilities in the X server SUSE SUSE-SA:2008:003 SUSE SUSE-SR:2008:008 GENTOO GLSA-200801-09 GENTOO GLSA-200804-05 SECTRACK 1019232 SUNALERT 103192 SUNALERT 201230 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-038.htm CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-077.htm GENTOO GLSA-200805-07 MANDRIVA MDVSA-2008:021 MANDRIVA MDVSA-2008:022 MANDRIVA MDVSA-2008:024 OPENBSD [4.1] 20080208 012: SECURITY FIX: February 8, 2008 OPENBSD [4.2] 20080208 006: SECURITY FIX: February 8, 2008 REDHAT RHSA-2008:0029 REDHAT RHSA-2008:0030 REDHAT RHSA-2008:0064 BUGTRAQ 20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs BID 27336 BID 27352 VUPEN ADV-2008-0179 VUPEN ADV-2008-0184 VUPEN ADV-2008-0497 VUPEN ADV-2008-0703 VUPEN ADV-2008-0924 VUPEN ADV-2008-3000 CONFIRM http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=428044 XF xorg-pcffont-bo(39767) CONFIRM https://issues.rpath.com/browse/RPL-2010 UBUNTU USN-571-1 FEDORA FEDORA-2008-0760 FEDORA FEDORA-2008-0794 FEDORA FEDORA-2008-0831 FEDORA FEDORA-2008-0891 Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table.

cpe:/o:linux:linux_kernel:2.6.22.16

CVE-2008-0007

2008-02-07T21:00:00.000-05:00

2018-10-15T17:56:58.073-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SUSE SUSE-SA:2008:006 SUSE SUSE-SA:2008:017 MLIST [Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix MLIST [linux-kernel] 20080206 [patch 60/73] vm audit: add VM_DONTEXPAND to mmap for drivers that need it (CVE-2008-0007) SECTRACK 1019357 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048 DEBIAN DSA-1503 DEBIAN DSA-1504 DEBIAN DSA-1565 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.17 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1 MANDRIVA MDVSA-2008:044 MANDRIVA MDVSA-2008:072 MANDRIVA MDVSA-2008:112 MANDRIVA MDVSA-2008:174 REDHAT RHSA-2008:0211 REDHAT RHSA-2008:0233 REDHAT RHSA-2008:0237 REDHAT RHSA-2008:0787 BUGTRAQ 20080208 rPSA-2008-0048-1 kernel BID 27686 BID 27705 UBUNTU USN-618-1 VUPEN ADV-2008-0445 VUPEN ADV-2008-2222 Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.

cpe:/a:pulseaudio:pulseaudio:0.9.6 cpe:/a:pulseaudio:pulseaudio:0.9.8

CVE-2008-0008

2008-01-28T19:00:00.000-05:00

2017-07-28T21:34:06.727-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=207214 CONFIRM http://pulseaudio.org/changeset/2100 GENTOO GLSA-200802-07 DEBIAN DSA-1476 MANDRIVA MDVSA-2008:027 BID 27449 UBUNTU USN-573-1 VUPEN ADV-2008-0283 CONFIRM https://bugzilla.novell.com/show_bug.cgi?id=347822 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=425481 XF pulseaudio-padroproot-privilege-escalation(39992) FEDORA FEDORA-2008-0963 FEDORA FEDORA-2008-0994 The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) setuid, and (4) seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail via attacks such as resource exhaustion.

cpe:/o:linux:linux_kernel:2.6.22 cpe:/o:linux:linux_kernel:2.6.22:rc6 cpe:/o:linux:linux_kernel:2.6.22.1 cpe:/o:linux:linux_kernel:2.6.22.3 cpe:/o:linux:linux_kernel:2.6.22.4 cpe:/o:linux:linux_kernel:2.6.22.5 cpe:/o:linux:linux_kernel:2.6.22.6 cpe:/o:linux:linux_kernel:2.6.22.7 cpe:/o:linux:linux_kernel:2.6.22.16 cpe:/o:linux:linux_kernel:2.6.23 cpe:/o:linux:linux_kernel:2.6.23:rc1 cpe:/o:linux:linux_kernel:2.6.23:rc2 cpe:/o:linux:linux_kernel:2.6.23.1 cpe:/o:linux:linux_kernel:2.6.23.2 cpe:/o:linux:linux_kernel:2.6.23.3 cpe:/o:linux:linux_kernel:2.6.23.4 cpe:/o:linux:linux_kernel:2.6.23.5 cpe:/o:linux:linux_kernel:2.6.23.6 cpe:/o:linux:linux_kernel:2.6.23.7 cpe:/o:linux:linux_kernel:2.6.23.9 cpe:/o:linux:linux_kernel:2.6.23.14 cpe:/o:linux:linux_kernel:2.6.24:rc2 cpe:/o:linux:linux_kernel:2.6.24:rc3

CVE-2008-0009

2008-02-12T16:00:00.000-05:00

2018-10-15T17:57:03.417-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1 BUGTRAQ 20080212 CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference BID 27704 BID 27799 VUPEN ADV-2008-0487 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=431206 FEDORA FEDORA-2008-1422 FEDORA FEDORA-2008-1423 The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which might allow local users to access arbitrary kernel memory locations.

CVE-2008-0010

2008-02-12T16:00:00.000-05:00

2018-10-15T17:57:04.620-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt DEBIAN DSA-1494 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1 BUGTRAQ 20080212 CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference BID 27704 BID 27796 VUPEN ADV-2008-0487 EXPLOIT-DB 5093 FEDORA FEDORA-2008-1422 FEDORA FEDORA-2008-1423 The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations.

cpe:/a:microsoft:directx:7.0 cpe:/a:microsoft:directx:8.1 cpe:/a:microsoft:directx:9.0 cpe:/a:microsoft:directx:10.0

CVE-2008-0011

2008-06-11T22:32:00.000-04:00

2018-10-12T17:44:33.053-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP HPSBST02344 SECTRACK 1020222 BID 29581 CERT TA08-162B VUPEN ADV-2008-1780 MS MS08-033 Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a (1) AVI or (2) ASF file, aka the "MJPEG Decoder Vulnerability."

cpe:/a:trend_micro:serverprotect:5.7 cpe:/a:trend_micro:serverprotect:5.58

CVE-2008-0012

2008-11-17T18:30:00.377-05:00

2017-08-07T21:29:18.743-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://blogs.iss.net/archive/trend.html ISS 20081111 Trend Micro ServerProtect [PROCEDURE NAME REDACTED] Heap Overflows (3) CERT-VN VU#768681 BID 32261 VUPEN ADV-2008-3127 XF application-rpc-config1-bo(39918) Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a different vulnerability than CVE-2008-0013 and CVE-2008-0014.

cpe:/a:trend_micro:serverprotect:5.7 cpe:/a:trend_micro:serverprotect:5.58

CVE-2008-0013

2008-11-17T18:30:00.407-05:00

2017-08-07T21:29:18.837-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://blogs.iss.net/archive/trend.html ISS 20081111 Trend Micro ServerProtect [PROCEDURE NAME REDACTED] Heap Overflows (3) CERT-VN VU#768681 BID 32261 VUPEN ADV-2008-3127 XF application-rpc-config2-bo(39919) Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a different vulnerability than CVE-2008-0012 and CVE-2008-0014.

cpe:/a:trend_micro:serverprotect:5.7 cpe:/a:trend_micro:serverprotect:5.58

CVE-2008-0014

2008-11-17T18:30:00.420-05:00

2017-08-07T21:29:18.883-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://blogs.iss.net/archive/trend.html ISS 20081111 Trend Micro ServerProtect [PROCEDURE NAME REDACTED] Heap Overflows (3) CERT-VN VU#768681 BID 32261 VUPEN ADV-2008-3127 XF application-rpc-config3-bo(39920) Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a different vulnerability than CVE-2008-0012 and CVE-2008-0013.

cpe:/o:microsoft:windows_2003_server:-:sp2 cpe:/o:microsoft:windows_2003_server:-:sp2:itanium cpe:/o:microsoft:windows_2003_server:-:sp2:x64 cpe:/o:microsoft:windows_xp::sp2:professional_x64 cpe:/o:microsoft:windows_xp:-:sp2 cpe:/o:microsoft:windows_xp:-:sp3

CVE-2008-0015

2009-07-07T19:30:00.187-04:00

2018-10-12T17:44:34.007-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx MISC http://isc.sans.org/diary.html?storyid=6733 MISC http://www.csis.dk/dk/nyheder/nyheder.asp?tekstID=799 ISS 20090706 Multiple Microsoft Video Control ActiveX Remote Code Execution Vulnerabilities CERT-VN VU#180513 CONFIRM http://www.microsoft.com/technet/security/advisory/972890.mspx BID 35558 BID 35585 SECTRACK 1022514 CERT TA09-187A CERT TA09-195A CERT TA09-223A VUPEN ADV-2009-2232 MS MS09-032 MS MS09-037 Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted web page, as exploited in the wild in July 2009, aka "Microsoft Video ActiveX Control Vulnerability."

cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.9_rc cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5:beta1 cpe:/a:mozilla:firefox:1.5:beta2 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.1 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:1.5.3 cpe:/a:mozilla:firefox:1.5.4 cpe:/a:mozilla:firefox:1.5.5 cpe:/a:mozilla:firefox:1.5.6 cpe:/a:mozilla:firefox:1.5.7 cpe:/a:mozilla:firefox:1.5.8 cpe:/a:mozilla:firefox:1.8 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:seamonkey cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0::alpha cpe:/a:mozilla:seamonkey:1.0::dev cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.0.99 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11

CVE-2008-0016

2008-09-24T16:37:04.453-04:00

2017-09-28T21:30:05.113-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://download.novell.com/Download?buildid=WZXONb-tqBw~ SUSE SUSE-SA:2008:050 SLACKWARE SSA:2008-269-02 SLACKWARE SSA:2008-269-01 SLACKWARE SSA:2008-270-01 SUNALERT 256408 DEBIAN DSA-1649 DEBIAN DSA-1669 DEBIAN DSA-1696 DEBIAN DSA-1697 MANDRIVA MDVSA-2008:205 MANDRIVA MDVSA-2008:206 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-37.html REDHAT RHSA-2008:0882 REDHAT RHSA-2008:0908 BID 31397 SECTRACK 1020913 UBUNTU USN-645-1 UBUNTU USN-645-2 VUPEN ADV-2008-2661 VUPEN ADV-2009-0977 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=443288 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=451617 FEDORA FEDORA-2008-8401 FEDORA FEDORA-2008-8429 Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.

cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:firefox:2.0.0.17 cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0:beta2 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1::alpha cpe:/a:mozilla:seamonkey:1.1::beta cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:seamonkey:1.1.9 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~ cpe:/o:canonical:ubuntu_linux:7.10 cpe:/o:canonical:ubuntu_linux:8.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:8.10 cpe:/o:debian:debian_linux:4.0 cpe:/o:debian:debian_linux:5.0

CVE-2008-0017

2008-11-13T06:30:01.173-05:00

2018-10-26T10:19:01.227-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2018-10-25T11:16:16.157-04:00

SUSE SUSE-SA:2008:055 SUNALERT 256408 UBUNTU USN-667-1 DEBIAN DSA-1669 DEBIAN DSA-1671 DEBIAN DSA-1697 ISS 20081113 Mozilla Unchecked Allocation Remote Code Execution MANDRIVA MDVSA-2008:228 MANDRIVA MDVSA-2008:230 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-54.html REDHAT RHSA-2008:0977 REDHAT RHSA-2008:0978 BID 32281 SECTRACK 1021185 CERT TA08-319A VUPEN ADV-2008-3146 VUPEN ADV-2009-0977 MISC https://bugzilla.mozilla.org/show_bug.cgi?id=443299 FEDORA FEDORA-2008-9667 FEDORA FEDORA-2008-9669 The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.

CVE-2008-0020

2009-07-07T19:30:00.217-04:00

2018-10-12T17:44:36.270-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MISC http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx ISS 20090706 Multiple Microsoft Video Control ActiveX Remote Code Execution Vulnerabilities SECTRACK 1022712 CERT TA09-223A VUPEN ADV-2009-2232 MS MS09-037 Unspecified vulnerability in the Load method in the IPersistStreamInit interface in the Active Template Library (ATL), as used in the Microsoft Video ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption, aka "ATL Header Memcopy Vulnerability," a different vulnerability than CVE-2008-0015.

cpe:/a:cisco:unified_callmanager:5.0 cpe:/a:cisco:unified_callmanager:5.0%281%29 cpe:/a:cisco:unified_callmanager:5.0%282%29 cpe:/a:cisco:unified_callmanager:5.0%283%29 cpe:/a:cisco:unified_callmanager:5.0%283a%29 cpe:/a:cisco:unified_callmanager:5.0%284%29 cpe:/a:cisco:unified_callmanager:5.0_4a cpe:/a:cisco:unified_callmanager:5.1 cpe:/a:cisco:unified_callmanager:6.0 cpe:/a:cisco:unified_communications_manager:5.0 cpe:/a:cisco:unified_communications_manager:5.0_1 cpe:/a:cisco:unified_communications_manager:5.0_2 cpe:/a:cisco:unified_communications_manager:5.0_3 cpe:/a:cisco:unified_communications_manager:5.0_3a cpe:/a:cisco:unified_communications_manager:5.0_4 cpe:/a:cisco:unified_communications_manager:5.0_4a cpe:/a:cisco:unified_communications_manager:5.0_4a_su1 cpe:/a:cisco:unified_communications_manager:6.0 cpe:/a:cisco:unified_communications_manager:6.0_1 cpe:/a:cisco:unified_communications_manager:6.1

CVE-2008-0026

2008-02-14T07:00:00.000-05:00

2017-08-07T21:29:18.947-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CISCO 20080213 SQL injection in Cisco Unified Communications Manager BID 27775 SECTRACK 1019404 VUPEN ADV-2008-0542 XF cucm-interface-sql-injection(40484) SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the (1) admin and (2) user interface pages.

cpe:/a:cisco:unified_callmanager:4.0 cpe:/a:cisco:unified_callmanager:4.1 cpe:/a:cisco:unified_callmanager:4.1%283%29sr4 cpe:/a:cisco:unified_callmanager:4.1%283%29sr5 cpe:/a:cisco:unified_callmanager:4.1%283%29sr5b cpe:/a:cisco:unified_communications_manager:4.2 cpe:/a:cisco:unified_communications_manager:4.2.3sr2 cpe:/a:cisco:unified_communications_manager:4.2.3sr2b cpe:/a:cisco:unified_communications_manager:4.3

CVE-2008-0027

2008-01-16T22:00:00.000-05:00

2018-10-15T17:57:06.107-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://dvlabs.tippingpoint.com/advisory/TPTI-08-02 SREASON 3551 CISCO 20080116 Cisco Unified Communications Manager CTL Provider Heap Overflow BUGTRAQ 20080116 TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability BID 27313 SECTRACK 1019223 VUPEN ADV-2008-0171 XF cisco-cucm-ctl-bo(39704) Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 before 4.2(3)SR3 and 4.3 before 4.3(1)SR1, and CallManager 4.0 and 4.1 before 4.1(3)SR5c, allows remote attackers to cause a denial of service or execute arbitrary code via a long request.

cpe:/a:cisco:adaptive_security_appliance_software:- cpe:/a:cisco:adaptive_security_appliance_software:7.0 cpe:/a:cisco:adaptive_security_appliance_software:7.0%280%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%281%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%282%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%284%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%285%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%285.2%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%286%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%286.7%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%287%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%288%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0.1 cpe:/a:cisco:adaptive_security_appliance_software:7.0.1.4 cpe:/a:cisco:adaptive_security_appliance_software:7.0.2 cpe:/a:cisco:adaptive_security_appliance_software:7.0.3 cpe:/a:cisco:adaptive_security_appliance_software:7.0.4 cpe:/a:cisco:adaptive_security_appliance_software:7.0.4.2 cpe:/a:cisco:adaptive_security_appliance_software:7.0.4.3 cpe:/a:cisco:adaptive_security_appliance_software:7.0.5 cpe:/a:cisco:adaptive_security_appliance_software:7.0.5.12 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.4 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.8 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.18 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.22 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.26 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.29 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.32 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7.1 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7.4 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7.9 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7.12 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8:interim cpe:/a:cisco:adaptive_security_appliance_software:7.0.8.2 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8.8 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8.12 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8.13 cpe:/a:cisco:adaptive_security_appliance_software:7.1 cpe:/a:cisco:adaptive_security_appliance_software:7.1%282%29 cpe:/a:cisco:adaptive_security_appliance_software:7.1%282.5%29 cpe:/a:cisco:adaptive_security_appliance_software:7.1%282.27%29 cpe:/a:cisco:adaptive_security_appliance_software:7.1%282.48%29 cpe:/a:cisco:adaptive_security_appliance_software:7.1%282.49%29 cpe:/a:cisco:adaptive_security_appliance_software:7.1%285%29 cpe:/a:cisco:adaptive_security_appliance_software:7.1.1 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.16 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.20 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.24 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.28 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.38 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.42 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.46 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.49 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.53 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.61 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.64 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.72 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.81 cpe:/a:cisco:adaptive_security_appliance_software:7.2 cpe:/a:cisco:adaptive_security_appliance_software:7.2%281%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%281.22%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.5%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.7%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.8%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.10%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.14%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.15%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.16%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.17%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.18%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.19%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.48%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%283%29 cpe:/a:cisco:adaptive_security_appliance_software:8.0%283%29 cpe:/o:cisco:pix_firewall_software:- cpe:/o:cisco:pix_firewall_software:2.7 cpe:/o:cisco:pix_firewall_software:3.0 cpe:/o:cisco:pix_firewall_software:3.1 cpe:/o:cisco:pix_firewall_software:4.0 cpe:/o:cisco:pix_firewall_software:4.1%286%29 cpe:/o:cisco:pix_firewall_software:4.1%286b%29 cpe:/o:cisco:pix_firewall_software:4.2 cpe:/o:cisco:pix_firewall_software:4.2%281%29 cpe:/o:cisco:pix_firewall_software:4.2%282%29 cpe:/o:cisco:pix_firewall_software:4.2%285%29 cpe:/o:cisco:pix_firewall_software:4.3 cpe:/o:cisco:pix_firewall_software:4.4 cpe:/o:cisco:pix_firewall_software:4.4%284%29 cpe:/o:cisco:pix_firewall_software:4.4%287.202%29 cpe:/o:cisco:pix_firewall_software:4.4%288%29 cpe:/o:cisco:pix_firewall_software:5.0 cpe:/o:cisco:pix_firewall_software:5.1 cpe:/o:cisco:pix_firewall_software:5.1%284%29 cpe:/o:cisco:pix_firewall_software:5.1%284.206%29 cpe:/o:cisco:pix_firewall_software:5.2 cpe:/o:cisco:pix_firewall_software:5.2%281%29 cpe:/o:cisco:pix_firewall_software:5.2%282%29 cpe:/o:cisco:pix_firewall_software:5.2%283%29 cpe:/o:cisco:pix_firewall_software:5.2%283.210%29 cpe:/o:cisco:pix_firewall_software:5.2%284%29 cpe:/o:cisco:pix_firewall_software:5.2%285%29 cpe:/o:cisco:pix_firewall_software:5.2%286%29 cpe:/o:cisco:pix_firewall_software:5.2%287%29 cpe:/o:cisco:pix_firewall_software:5.2%288%29 cpe:/o:cisco:pix_firewall_software:5.2%289%29 cpe:/o:cisco:pix_firewall_software:5.3 cpe:/o:cisco:pix_firewall_software:5.3%281%29 cpe:/o:cisco:pix_firewall_software:5.3%281.200%29 cpe:/o:cisco:pix_firewall_software:5.3%282%29 cpe:/o:cisco:pix_firewall_software:5.3%283%29 cpe:/o:cisco:pix_firewall_software:6.0 cpe:/o:cisco:pix_firewall_software:6.0%281%29 cpe:/o:cisco:pix_firewall_software:6.0%282%29 cpe:/o:cisco:pix_firewall_software:6.0%283%29 cpe:/o:cisco:pix_firewall_software:6.0%284%29 cpe:/o:cisco:pix_firewall_software:6.0%284.101%29 cpe:/o:cisco:pix_firewall_software:6.1 cpe:/o:cisco:pix_firewall_software:6.1%281%29 cpe:/o:cisco:pix_firewall_software:6.1%282%29 cpe:/o:cisco:pix_firewall_software:6.1%283%29 cpe:/o:cisco:pix_firewall_software:6.1%284%29 cpe:/o:cisco:pix_firewall_software:6.1%285%29 cpe:/o:cisco:pix_firewall_software:6.1.5%28104%29 cpe:/o:cisco:pix_firewall_software:6.2 cpe:/o:cisco:pix_firewall_software:6.2%281%29 cpe:/o:cisco:pix_firewall_software:6.2%282%29 cpe:/o:cisco:pix_firewall_software:6.2%283%29 cpe:/o:cisco:pix_firewall_software:6.2%283.100%29 cpe:/o:cisco:pix_firewall_software:6.3 cpe:/o:cisco:pix_firewall_software:6.3%281%29 cpe:/o:cisco:pix_firewall_software:6.3%282%29 cpe:/o:cisco:pix_firewall_software:6.3%283%29 cpe:/o:cisco:pix_firewall_software:6.3%283.102%29 cpe:/o:cisco:pix_firewall_software:6.3%283.109%29 cpe:/o:cisco:pix_firewall_software:6.3%285%29 cpe:/o:cisco:pix_firewall_software:7.0 cpe:/o:cisco:pix_firewall_software:7.1 cpe:/o:cisco:pix_firewall_software:7.2 cpe:/o:cisco:pix_firewall_software:7.2%282%29 cpe:/o:cisco:pix_firewall_software:8.0%283%29

CVE-2008-0028

2008-01-23T16:00:00.000-05:00

2018-10-26T10:19:13.757-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2018-10-26T09:25:10.357-04:00

CISCO 20080123 Cisco PIX and ASA Time-to-Live Vulnerability BID 27418 SECTRACK 1019262 SECTRACK 1019263 VUPEN ADV-2008-0259 XF pix-asa-ttl-dos(39862) Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7.2(3)6 and 8.0(3), when the Time-to-Live (TTL) decrement feature is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted IP packet.

cpe:/a:cisco:application_velocity_system:5.0.1

CVE-2008-0029

2008-01-23T16:00:00.000-05:00

2017-08-07T21:29:19.117-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CISCO 20080123 Default Passwords in the Application Velocity System BID 27421 SECTRACK 1019259 VUPEN ADV-2008-0260 XF ciscoavs-default-password-admin-account(39860) Cisco Application Velocity System (AVS) before 5.1.0 is installed with default passwords for some system accounts, which allows remote attackers to gain privileges.

CVE-2008-0030

2017-05-11T10:29:06.433-04:00

2017-05-11T10:29:06.447-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none.

cpe:/a:apple:quicktime:7.3

CVE-2008-0031

2008-01-15T21:00:00.000-05:00

2017-08-07T21:29:19.197-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307301 APPLE APPLE-SA-2008-01-15 BID 27298 SECTRACK 1019221 CERT TA08-016A VUPEN ADV-2008-0148 XF quicktime-sorenson-code-execution(39695) Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted Sorenson 3 video file, which triggers memory corruption.

cpe:/a:apple:quicktime:7.3

CVE-2008-0032

2008-01-15T22:00:00.000-05:00

2017-08-07T21:29:19.243-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307301 IDEFENSE 20080115 Apple QuickTime Macintosh Resource Processing Heap Corruption Vulnerability APPLE APPLE-SA-2008-01-15 BID 27301 SECTRACK 1019221 CERT TA08-016A VUPEN ADV-2008-0148 XF quicktime-macintosh-code-execution(39696) Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption.

cpe:/a:apple:quicktime:7.3.1.70

CVE-2008-0033

2008-01-15T22:00:00.000-05:00

2018-10-15T17:57:07.137-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307301 MISC http://dvlabs.tippingpoint.com/advisory/TPTI-08-01 APPLE APPLE-SA-2008-01-15 BUGTRAQ 20080115 TPTI-08-01: Apple Quicktime Image File IDSC Atom Memory Corruption Vulnerability BID 27299 SECTRACK 1019221 CERT TA08-016A VUPEN ADV-2008-0148 XF quicktime-idsc-code-execution(39697) Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a movie file with Image Descriptor (IDSC) atoms containing an invalid atom size, which triggers memory corruption.

cpe:/h:apple:iphone:1.0 cpe:/h:apple:iphone:1.0.1 cpe:/h:apple:iphone:1.0.2 cpe:/h:apple:iphone:1.1.1 cpe:/h:apple:iphone:1.1.2 cpe:/h:apple:iphone:1.02

CVE-2008-0034

2008-01-15T21:00:00.000-05:00

2017-08-07T21:29:19.383-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307302 APPLE APPLE-SA-2008-01-15 BID 27297 SECTRACK 1019219 VUPEN ADV-2008-0147 XF iphone-passcode-lock-security-bypass(39701) Unspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with physical access to execute applications without entering the passcode via vectors related to emergency calls.

cpe:/a:apple:safari

CVE-2008-0035

2008-01-15T21:00:00.000-05:00

2017-08-07T21:29:19.447-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307302 CONFIRM http://docs.info.apple.com/article.html?artnum=307430 APPLE APPLE-SA-2008-02-11 APPLE APPLE-SA-2008-01-15 BID 27296 SECTRACK 1019220 CERT TA08-043B VUPEN ADV-2008-0147 VUPEN ADV-2008-0495 XF iphone-ipod-foundation-code-execution(39700) Unspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1.1 through 1.1.2, and Mac OS X 10.5 through 10.5.1, allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted URL that triggers memory corruption in Safari.

cpe:/a:apple:quicktime:7.3

CVE-2008-0036

2008-01-15T22:00:00.000-05:00

2017-08-07T21:29:19.507-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307301 APPLE APPLE-SA-2008-07-10 APPLE APPLE-SA-2008-01-15 BID 27300 SECTRACK 1019221 CERT TA08-016A VUPEN ADV-2008-0148 VUPEN ADV-2008-2064 XF quicktime-pict-bo(39698) Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding.

cpe:/o:apple:mac_os_x:10.5 cpe:/o:apple:mac_os_x:10.5.1

CVE-2008-0037

2008-02-12T15:00:00.000-05:00

2011-03-07T22:03:49.187-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307430 APPLE APPLE-SA-2008-02-11 BID 27736 SECTRACK 1019365 CERT TA08-043B VUPEN ADV-2008-0495 X11 in Apple Mac OS X 10.5 through 10.5.1 does not properly handle when the "Allow connections from network client" preference is disabled, which allows remote attackers to bypass intended access restrictions and connect to the X server.

cpe:/o:apple:mac_os_x:10.5 cpe:/o:apple:mac_os_x:10.5.1

CVE-2008-0038

2008-02-12T15:00:00.000-05:00

2011-03-07T22:03:49.297-05:00

1.9

LOCAL

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307430 APPLE APPLE-SA-2008-02-11 BID 27736 SECTRACK 1019360 CERT TA08-043B VUPEN ADV-2008-0495 Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be launched if it is in a Time Machine backup, which might allow local users to bypass intended security restrictions or exploit vulnerabilities in the application.

cpe:/a:apple:mail

CVE-2008-0039

2008-02-12T15:00:00.000-05:00

2011-03-07T22:03:49.377-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307430 APPLE APPLE-SA-2008-02-11 BID 27736 SECTRACK 1019361 CERT TA08-043B VUPEN ADV-2008-0495 Unspecified vulnerability in Mail in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary commands via a crafted file:// URL.

cpe:/o:apple:mac_os_x:10.5 cpe:/o:apple:mac_os_x:10.5.1

CVE-2008-0040

2008-02-12T15:00:00.000-05:00

2011-03-07T22:03:49.487-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307430 APPLE APPLE-SA-2008-02-11 BID 27736 SECTRACK 1019362 CERT TA08-043B VUPEN ADV-2008-0495 Unspecified vulnerability in NFS in Apple Mac OS X 10.5 through 10.5.1 allows remote attackers to cause a denial of service (system shutdown) or execute arbitrary code via unknown vectors related to mbuf chains that trigger memory corruption.

cpe:/o:apple:mac_os_x:10.5 cpe:/o:apple:mac_os_x:10.5.1

CVE-2008-0041

2008-02-12T15:00:00.000-05:00

2011-03-07T22:03:49.563-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307430 APPLE APPLE-SA-2008-02-11 BID 27736 SECTRACK 1019363 CERT TA08-043B VUPEN ADV-2008-0495 Parental Controls in Apple Mac OS X 10.5 through 10.5.1 contacts www.apple.com "when a website is unblocked," which allows remote attackers to determine when a system is running Parental Controls.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x:10.5 cpe:/o:apple:mac_os_x:10.5.1

CVE-2008-0042

2008-02-12T15:00:00.000-05:00

2011-03-07T22:03:49.687-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307430 APPLE APPLE-SA-2008-02-11 CERT-VN VU#774345 BID 27736 SECTRACK 1019364 CERT TA08-043B VUPEN ADV-2008-0495 Argument injection vulnerability in Terminal.app in Terminal in Apple Mac OS X 10.4.11 and 10.5 through 10.5.1 allows remote attackers to execute arbitrary code via unspecified URL schemes.

cpe:/a:apple:iphoto:7.1

CVE-2008-0043

2008-02-07T21:00:00.000-05:00

2011-03-07T22:03:49.767-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307398 APPLE APPLE-SA-2008-02-05 BID 27636 SECTRACK 1019307 VUPEN ADV-2008-0428 Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x_server:10.4.11 cpe:/o:apple:mac_os_x_server:10.5.2

CVE-2008-0044

2008-03-18T18:44:00.000-04:00

2017-08-07T21:29:19.570-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28320 SECTRACK 1019640 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-afpclient-bo(41319) Multiple buffer overflows in AFP Client in Apple Mac OS X 10.4.11 and 10.5.2 allow remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted afp:// URL.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0045

2008-03-18T18:44:00.000-04:00

2017-08-07T21:29:19.633-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28323 SECTRACK 1019642 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-afpserver-security-bypass(41318) Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names.

cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x_server:10.5.2

CVE-2008-0046

2008-03-18T18:44:00.000-04:00

2017-08-07T21:29:19.713-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28368 SECTRACK 1019658 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-applicationfirewall-weak-security(41317) The Application Firewall in Apple Mac OS X 10.5.2 has an incorrect German translation for the "Set access for specific services and applications" radio button that might cause the user to believe that the button is used to restrict access only to specific services and applications, which might allow attackers to bypass intended access restrictions.

cpe:/a:cups:cups:1.3.5

CVE-2008-0047

2008-03-18T19:44:00.000-04:00

2017-09-28T21:30:05.377-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 IDEFENSE 20080318 Multiple Vendor CUPS CGI Heap Overflow Vulnerability APPLE APPLE-SA-2008-03-18 SUSE SUSE-SA:2008:015 GENTOO GLSA-200804-01 DEBIAN DSA-1530 MANDRIVA MDVSA-2008:081 REDHAT RHSA-2008:0192 BID 28307 SECTRACK 1019646 UBUNTU USN-598-1 CERT TA08-079A VUPEN ADV-2008-0921 VUPEN ADV-2008-0924 FEDORA FEDORA-2008-2131 FEDORA FEDORA-2008-2897 Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0048

2008-03-18T18:44:00.000-04:00

2017-08-07T21:29:19.773-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28388 SECTRACK 1019647 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-appkit-nsdocument-bo(41315) Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via the a long file name to the NSDocument API.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0049

2008-03-18T18:44:00.000-04:00

2017-08-07T21:29:19.837-04:00

1.9

LOCAL

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28340 SECTRACK 1019647 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-appkit-code-execution(41314) AppKit in Apple Mac OS X 10.4.11 inadvertently makes an NSApplication mach port available for inter-process communication instead of inter-thread communication, which allows local users to execute arbitrary code via crafted messages to privileged applications.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0050

2008-03-18T18:44:00.000-04:00

2017-08-07T21:29:19.883-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 CONFIRM http://docs.info.apple.com/article.html?artnum=307563 APPLE APPLE-SA-2008-07-11 APPLE APPLE-SA-2008-03-18 BID 28290 BID 28356 SECTRACK 1019655 CERT TA08-079A VUPEN ADV-2008-0920 VUPEN ADV-2008-0924 VUPEN ADV-2008-2094 XF macos-cfnetwork-502badgateway-spoofing(41313) CFNetwork in Apple Mac OS X 10.4.11 allows remote HTTPS proxy servers to spoof secure websites via data in a 502 Bad Gateway error.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0051

2008-03-18T18:44:00.000-04:00

2017-08-07T21:29:19.947-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28375 SECTRACK 1019670 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-corefoundation-timezone-code-execution(41310) Integer overflow in CoreFoundation in Apple Mac OS X 10.4.11 might allow local users to execute arbitrary code via crafted time zone data.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0052

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:20.007-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28384 SECTRACK 1019671 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-coreservices-weak-security(41312) CoreServices in Apple Mac OS X 10.4.11 treats .ief as a safe file type, which allows remote attackers to force Safari users into opening an .ief file in AppleWorks, even when the "Open 'Safe' files" preference is set.

cpe:/a:apple:cups:1.1 cpe:/a:apple:cups:1.1.1 cpe:/a:apple:cups:1.1.2 cpe:/a:apple:cups:1.1.3 cpe:/a:apple:cups:1.1.4 cpe:/a:apple:cups:1.1.5 cpe:/a:apple:cups:1.1.5-1 cpe:/a:apple:cups:1.1.5-2 cpe:/a:apple:cups:1.1.6 cpe:/a:apple:cups:1.1.6-1 cpe:/a:apple:cups:1.1.6-2 cpe:/a:apple:cups:1.1.6-3 cpe:/a:apple:cups:1.1.7 cpe:/a:apple:cups:1.1.8 cpe:/a:apple:cups:1.1.9 cpe:/a:apple:cups:1.1.9-1 cpe:/a:apple:cups:1.1.10 cpe:/a:apple:cups:1.1.10-1 cpe:/a:apple:cups:1.1.11 cpe:/a:apple:cups:1.1.12 cpe:/a:apple:cups:1.1.13 cpe:/a:apple:cups:1.1.14 cpe:/a:apple:cups:1.1.15 cpe:/a:apple:cups:1.1.16 cpe:/a:apple:cups:1.1.17 cpe:/a:apple:cups:1.1.18 cpe:/a:apple:cups:1.1.19 cpe:/a:apple:cups:1.1.19:rc1 cpe:/a:apple:cups:1.1.19:rc2 cpe:/a:apple:cups:1.1.19:rc3 cpe:/a:apple:cups:1.1.19:rc4 cpe:/a:apple:cups:1.1.19:rc5 cpe:/a:apple:cups:1.1.20 cpe:/a:apple:cups:1.1.20:rc1 cpe:/a:apple:cups:1.1.20:rc2 cpe:/a:apple:cups:1.1.20:rc3 cpe:/a:apple:cups:1.1.20:rc4 cpe:/a:apple:cups:1.1.20:rc5 cpe:/a:apple:cups:1.1.20:rc6 cpe:/a:apple:cups:1.1.21 cpe:/a:apple:cups:1.1.21:rc1 cpe:/a:apple:cups:1.1.21:rc2 cpe:/a:apple:cups:1.1.22 cpe:/a:apple:cups:1.1.22:rc1 cpe:/a:apple:cups:1.1.22:rc2 cpe:/a:apple:cups:1.1.23 cpe:/a:apple:cups:1.1.23:rc1 cpe:/a:apple:cups:1.2:b1 cpe:/a:apple:cups:1.2:b2 cpe:/a:apple:cups:1.2:rc1 cpe:/a:apple:cups:1.2:rc2 cpe:/a:apple:cups:1.2:rc3 cpe:/a:apple:cups:1.2.0 cpe:/a:apple:cups:1.2.1 cpe:/a:apple:cups:1.2.2 cpe:/a:apple:cups:1.2.3 cpe:/a:apple:cups:1.2.4 cpe:/a:apple:cups:1.2.5 cpe:/a:apple:cups:1.2.6 cpe:/a:apple:cups:1.2.7 cpe:/a:apple:cups:1.2.8 cpe:/a:apple:cups:1.2.9 cpe:/a:apple:cups:1.2.10 cpe:/a:apple:cups:1.2.11 cpe:/a:apple:cups:1.2.12 cpe:/a:apple:cups:1.3:b1 cpe:/a:apple:cups:1.3:rc1 cpe:/a:apple:cups:1.3:rc2 cpe:/a:apple:cups:1.3.0 cpe:/a:apple:cups:1.3.1 cpe:/a:apple:cups:1.3.2 cpe:/a:apple:cups:1.3.3 cpe:/a:apple:cups:1.3.4 cpe:/a:apple:cups:1.3.5 cpe:/a:apple:cups:1.3.9 cpe:/a:apple:cups:1.4.1

CVE-2008-0053

2008-03-18T19:44:00.000-04:00

2017-09-28T21:30:05.457-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 SUSE SUSE-SA:2008:020 GENTOO GLSA-200804-01 DEBIAN DSA-1625 MANDRIVA MDVSA-2008:081 REDHAT RHSA-2008:0192 REDHAT RHSA-2008:0206 BID 28304 BID 28334 SECTRACK 1019672 UBUNTU USN-598-1 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-cups-inputvalidation-unspecified(41272) FEDORA FEDORA-2008-2897 Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0054

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:20.150-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28341 SECTRACK 1019649 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-nsselectorfromstring-code-execution(41355) Foundation in Apple Mac OS X 10.4.11 might allow context-dependent attackers to execute arbitrary code via a malformed selector name to the NSSelectorFromString API, which causes an "unexpected selector" to be used.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0055

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:20.213-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28343 SECTRACK 1019649 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-nsfilemanager-priv-escalation(41299) Foundation in Apple Mac OS X 10.4.11 creates world-writable directories while NSFileManager copies files recursively and only modifies the permissions afterward, which allows local users to modify copied files to cause a denial of service and possibly gain privileges.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0056

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:20.273-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28357 SECTRACK 1019649 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-foundation-nsfilemanager-bo(41309) Stack-based buffer overflow in Foundation in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via a "long pathname with an unexpected structure" that triggers the overflow in NSFileManager.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0057

2008-03-18T18:44:00.000-04:00

2017-08-07T21:29:20.337-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28358 SECTRACK 1019648 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-appkit-parser-bo(41298) Multiple integer overflows in a "legacy serialization format" parser in AppKit in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via a crafted serialized property list.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0058

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:20.400-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28359 SECTRACK 1019650 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-foundation-nsurl-code-execution(41297) Race condition in the NSURLConnection cache management functionality in Foundation for Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via unspecified manipulations that cause messages to be sent to a deallocated object.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0059

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:20.463-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28367 SECTRACK 1019650 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-foundation-code-execution(41296) Race condition in NSXML in Foundation for Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via a crafted XML file, related to "error handling logic."

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x_server:10.4.11 cpe:/o:apple:mac_os_x_server:10.5.2

CVE-2008-0060

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:20.523-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28371 SECTRACK 1019657 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-helpviewer-code-execution(41295) Help Viewer in Apple Mac OS X 10.4.11 and 10.5.2 allows remote attackers to execute arbitrary Applescript via a help:topic_list URL that injects HTML or JavaScript into a topic list page, as demonstrated using a help:runscript link.

cpe:/a:maradns:maradns:1.0.00 cpe:/a:maradns:maradns:1.0.01 cpe:/a:maradns:maradns:1.0.02 cpe:/a:maradns:maradns:1.0.03 cpe:/a:maradns:maradns:1.0.04 cpe:/a:maradns:maradns:1.0.05 cpe:/a:maradns:maradns:1.0.06 cpe:/a:maradns:maradns:1.0.07 cpe:/a:maradns:maradns:1.0.08 cpe:/a:maradns:maradns:1.0.09 cpe:/a:maradns:maradns:1.0.10 cpe:/a:maradns:maradns:1.0.11 cpe:/a:maradns:maradns:1.0.12 cpe:/a:maradns:maradns:1.0.13 cpe:/a:maradns:maradns:1.0.14 cpe:/a:maradns:maradns:1.0.15 cpe:/a:maradns:maradns:1.0.16 cpe:/a:maradns:maradns:1.0.17 cpe:/a:maradns:maradns:1.0.18 cpe:/a:maradns:maradns:1.0.19 cpe:/a:maradns:maradns:1.0.20 cpe:/a:maradns:maradns:1.0.21 cpe:/a:maradns:maradns:1.0.22 cpe:/a:maradns:maradns:1.0.23 cpe:/a:maradns:maradns:1.0.24 cpe:/a:maradns:maradns:1.0.25 cpe:/a:maradns:maradns:1.0.26 cpe:/a:maradns:maradns:1.0.27 cpe:/a:maradns:maradns:1.0.28 cpe:/a:maradns:maradns:1.0.29 cpe:/a:maradns:maradns:1.0.30 cpe:/a:maradns:maradns:1.0.31 cpe:/a:maradns:maradns:1.0.32 cpe:/a:maradns:maradns:1.0.33 cpe:/a:maradns:maradns:1.0.34 cpe:/a:maradns:maradns:1.0.35 cpe:/a:maradns:maradns:1.0.36 cpe:/a:maradns:maradns:1.0.37 cpe:/a:maradns:maradns:1.0.38 cpe:/a:maradns:maradns:1.0.39 cpe:/a:maradns:maradns:1.2.12.01 cpe:/a:maradns:maradns:1.2.12.02 cpe:/a:maradns:maradns:1.2.12.03 cpe:/a:maradns:maradns:1.2.12.04 cpe:/a:maradns:maradns:1.2.12.05 cpe:/a:maradns:maradns:1.2.12.06 cpe:/a:maradns:maradns:1.2.12.07 cpe:/a:maradns:maradns:1.3.01 cpe:/a:maradns:maradns:1.3.02 cpe:/a:maradns:maradns:1.3.03 cpe:/a:maradns:maradns:1.3.04 cpe:/a:maradns:maradns:1.3.05 cpe:/a:maradns:maradns:1.3.06 cpe:/a:maradns:maradns:1.3.07 cpe:/a:maradns:maradns:1.3.07.01 cpe:/a:maradns:maradns:1.3.07.02 cpe:/a:maradns:maradns:1.3.07.03

CVE-2008-0061

2008-01-03T17:46:00.000-05:00

2011-03-07T22:03:51.907-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=204351 CONFIRM http://maradns.blogspot.com/2007/08/maradns-update-all-versions.html GENTOO GLSA-200801-16 DEBIAN DSA-1445 CONFIRM http://www.maradns.org/changelog.html BID 27124 VUPEN ADV-2008-0026 MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an authoritative name (CNAME) record from resolving, aka "improper rotation of resource records."

cpe:/a:mit:kerberos_5:1.6.3_kdc

CVE-2008-0062

2008-03-19T06:44:00.000-04:00

2018-10-15T17:57:08.323-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 SUSE SUSE-SA:2008:016 HP SSRT100495 CONFIRM http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html CONFIRM http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html CONFIRM http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0112 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112 DEBIAN DSA-1524 GENTOO GLSA-200803-31 CERT-VN VU#895609 MANDRIVA MDVSA-2008:069 MANDRIVA MDVSA-2008:070 MANDRIVA MDVSA-2008:071 REDHAT RHSA-2008:0164 REDHAT RHSA-2008:0180 REDHAT RHSA-2008:0181 REDHAT RHSA-2008:0182 BUGTRAQ 20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc BUGTRAQ 20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation BUGTRAQ 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues BID 28303 SECTRACK 1019626 UBUNTU USN-587-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0009.html VUPEN ADV-2008-0922 VUPEN ADV-2008-0924 VUPEN ADV-2008-1102 VUPEN ADV-2008-1744 XF krb5-kdc-code-execution(41275) FEDORA FEDORA-2008-2637 FEDORA FEDORA-2008-2647 KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.

cpe:/a:mit:kerberos_5:1.6.3_kdc

CVE-2008-0063

2008-03-19T06:44:00.000-04:00

2018-10-15T17:57:18.840-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 SUSE SUSE-SA:2008:016 CONFIRM http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html CONFIRM http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html CONFIRM http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0112 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112 DEBIAN DSA-1524 GENTOO GLSA-200803-31 MANDRIVA MDVSA-2008:069 MANDRIVA MDVSA-2008:070 MANDRIVA MDVSA-2008:071 REDHAT RHSA-2008:0164 REDHAT RHSA-2008:0180 REDHAT RHSA-2008:0181 REDHAT RHSA-2008:0182 BUGTRAQ 20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc BUGTRAQ 20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation BUGTRAQ 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues BID 28303 SECTRACK 1019627 UBUNTU USN-587-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0009.html VUPEN ADV-2008-0922 VUPEN ADV-2008-0924 VUPEN ADV-2008-1102 VUPEN ADV-2008-1744 XF krb5-kdc-kerberos4-info-disclosure(41277) FEDORA FEDORA-2008-2637 FEDORA FEDORA-2008-2647 The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."

cpe:/a:pierreegougelet:gfl_sdk:2.870::windows cpe:/a:pierreegougelet:nconvert:4.85 cpe:/a:pierreegougelet:xnview:1.91 cpe:/a:pierreegougelet:xnview:1.92

CVE-2008-0064

2008-01-31T15:00:00.000-05:00

2011-03-07T22:03:52.297-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27514 VUPEN ADV-2008-0328 VUPEN ADV-2008-0329 Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) XnView 1.91 and 1.92, (2) NConvert 4.85, and (3) libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE (.hdr) file.

cpe:/a:winamp:nullsoft_winamp:5.5 cpe:/a:winamp:nullsoft_winamp:5.21 cpe:/a:winamp:nullsoft_winamp:5.51

CVE-2008-0065

2008-01-22T15:00:00.000-05:00

2017-08-07T21:29:20.757-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27344 VUPEN ADV-2008-0183 CONFIRM http://www.winamp.com/player/version-history XF winamp-inmp3-bo(39778) Multiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arbitrary code via a long (1) artist or (2) name tag in Ultravox streaming metadata, related to construction of stream titles.

cpe:/a:autonomy:keyview cpe:/a:ibm:lotus_notes:7.0.2 cpe:/a:ibm:lotus_notes:7.0.3

CVE-2008-0066

2008-04-10T14:05:00.000-04:00

2018-10-15T17:57:28.873-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20080414 Secunia Research: Lotus Notes htmsr.dll Buffer Overflows BID 28454 SECTRACK 1019843 VUPEN ADV-2008-1153 VUPEN ADV-2008-1156 CONFIRM http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453 XF autonomy-keyview-html-multiple-bo(41724) Multiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allow remote attackers to execute arbitrary code via an HTML document with (1) "large chunks of data," or a long URL in the (2) BACKGROUND attribute of a BODY element or (3) SRC attribute of an IMG element.

cpe:/a:hp:openview_network_node_manager:7.51

CVE-2008-0067

2009-01-08T14:30:00.407-05:00

2018-10-15T17:57:30.200-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBMA02400 SREASON 4885 SREASON 8307 SECTRACK 1021521 BUGTRAQ 20090107 Secunia Research: HP OpenView Network Node Manager Multiple Vulnerabilities BID 33147 Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.

cpe:/a:hp:openview_network_node_manager:7.51 cpe:/a:hp:openview_network_node_manager:7.53

CVE-2008-0068

2008-04-16T14:05:00.000-04:00

2018-10-15T17:57:31.027-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/closedviewx-adv.txt HP SSRT080043 SREASON 3814 BUGTRAQ 20080411 Directory traversal and multiple Denials of Service in HP OpenView NNM 7.53 BUGTRAQ 20080414 Secunia Research: HP OpenView Network Node Manager OpenView5.exeDirectory Traversal BID 28745 SECTRACK 1019838 SECTRACK 1019839 VUPEN ADV-2008-1214 XF hpopenview-openview5-directory-traversal(41790) Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.

cpe:/a:pierreegougelet:xnview:1.92 cpe:/a:pierreegougelet:xnview:1.92.1

CVE-2008-0069

2008-04-02T13:44:00.000-04:00

2017-09-28T21:30:05.767-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 28579 VUPEN ADV-2008-1044 XF xnview-slideshow-bo(41542) EXPLOIT-DB 5346 Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow (.sld) file, a different vector than CVE-2008-1461.

cpe:/a:orb_networks:orb:2.0.1014

CVE-2008-0070

2008-03-31T13:44:00.000-04:00

2017-08-07T21:29:20.993-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 28431 VUPEN ADV-2008-0984 XF orb-dimensions-bo(41410) Integer overflow in Orb Networks Orb 2.00.1014 and Winamp Remote BETA allows remote attackers to execute arbitrary code via an RPC request that specifies a large number of array dimensions, which triggers a heap-based buffer overflow.

cpe:/a:bittorrent:bittorrent:3.9.1 cpe:/a:bittorrent:bittorrent:4.0.0 cpe:/a:bittorrent:bittorrent:4.0.1 cpe:/a:bittorrent:bittorrent:4.0.2 cpe:/a:bittorrent:bittorrent:4.0.3 cpe:/a:bittorrent:bittorrent:4.0.4 cpe:/a:bittorrent:bittorrent:4.1.0 cpe:/a:bittorrent:bittorrent:4.1.1 cpe:/a:bittorrent:bittorrent:4.1.2 cpe:/a:bittorrent:bittorrent:4.1.3 cpe:/a:bittorrent:bittorrent:4.1.4 cpe:/a:bittorrent:bittorrent:4.1.5 cpe:/a:bittorrent:bittorrent:4.1.6 cpe:/a:bittorrent:bittorrent:4.1.7 cpe:/a:bittorrent:bittorrent:4.1.8 cpe:/a:bittorrent:bittorrent:4.2.0 cpe:/a:bittorrent:bittorrent:4.2.1 cpe:/a:bittorrent:bittorrent:4.2.2 cpe:/a:bittorrent:bittorrent:4.3.0 cpe:/a:bittorrent:bittorrent:4.3.1 cpe:/a:bittorrent:bittorrent:4.3.2 cpe:/a:bittorrent:bittorrent:4.3.3 cpe:/a:bittorrent:bittorrent:4.3.4 cpe:/a:bittorrent:bittorrent:4.3.5 cpe:/a:bittorrent:bittorrent:4.3.6 cpe:/a:bittorrent:bittorrent:4.4.0 cpe:/a:bittorrent:bittorrent:4.4.1 cpe:/a:bittorrent:bittorrent:4.9.2 cpe:/a:bittorrent:bittorrent:4.9.3 cpe:/a:bittorrent:bittorrent:4.9.4 cpe:/a:bittorrent:bittorrent:4.9.5 cpe:/a:bittorrent:bittorrent:4.9.6 cpe:/a:bittorrent:bittorrent:4.9.7 cpe:/a:bittorrent:bittorrent:4.9.8 cpe:/a:bittorrent:bittorrent:4.9.9 cpe:/a:bittorrent:bittorrent:4.20.0 cpe:/a:bittorrent:bittorrent:4.20.1 cpe:/a:bittorrent:bittorrent:4.20.2 cpe:/a:bittorrent:bittorrent:4.20.4 cpe:/a:bittorrent:bittorrent:4.20.6 cpe:/a:bittorrent:bittorrent:4.20.7 cpe:/a:bittorrent:bittorrent:4.20.8 cpe:/a:bittorrent:bittorrent:4.20.9 cpe:/a:bittorrent:bittorrent:4.22.0 cpe:/a:bittorrent:bittorrent:4.22.1 cpe:/a:bittorrent:bittorrent:4.22.4 cpe:/a:bittorrent:bittorrent:4.24.0 cpe:/a:bittorrent:bittorrent:4.24.2 cpe:/a:bittorrent:bittorrent:4.26.0 cpe:/a:bittorrent:bittorrent:4.27.1 cpe:/a:bittorrent:bittorrent:4.27.2 cpe:/a:bittorrent:bittorrent:5.0.0 cpe:/a:bittorrent:bittorrent:5.0.1 cpe:/a:bittorrent:bittorrent:5.0.2 cpe:/a:bittorrent:bittorrent:5.0.3 cpe:/a:bittorrent:bittorrent:5.0.4 cpe:/a:bittorrent:bittorrent:5.0.5 cpe:/a:bittorrent:bittorrent:5.0.6 cpe:/a:bittorrent:bittorrent:5.0.7 cpe:/a:bittorrent:bittorrent:5.0.8 cpe:/a:bittorrent:bittorrent:5.0.9 cpe:/a:bittorrent:bittorrent:5.2.0 cpe:/a:bittorrent:bittorrent:6.0 cpe:/a:bittorrent:bittorrent:6.0.1 cpe:/a:bittorrent:bittorrent:6.0.2 cpe:/a:utorrent:utorrent:1.1.1 cpe:/a:utorrent:utorrent:1.1.3 cpe:/a:utorrent:utorrent:1.1.4 cpe:/a:utorrent:utorrent:1.1.5 cpe:/a:utorrent:utorrent:1.1.6 cpe:/a:utorrent:utorrent:1.1.7 cpe:/a:utorrent:utorrent:1.2 cpe:/a:utorrent:utorrent:1.2.1 cpe:/a:utorrent:utorrent:1.2.2 cpe:/a:utorrent:utorrent:1.3 cpe:/a:utorrent:utorrent:1.4 cpe:/a:utorrent:utorrent:1.4.2 cpe:/a:utorrent:utorrent:1.5 cpe:/a:utorrent:utorrent:1.6 cpe:/a:utorrent:utorrent:1.7 cpe:/a:utorrent:utorrent:1.7.1 cpe:/a:utorrent:utorrent:1.7.2 cpe:/a:utorrent:utorrent:1.7.3 cpe:/a:utorrent:utorrent:1.7.4 cpe:/a:utorrent:utorrent:1.7.5 cpe:/a:utorrent:utorrent:1.7.6 cpe:/a:utorrent:utorrent:1.7.7

CVE-2008-0071

2008-06-16T14:41:00.000-04:00

2018-10-15T17:57:32.730-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SREASON 3943 SECTRACK 1020266 BUGTRAQ 20080611 Secunia Research: uTorrent / BitTorrent Web UI HTTP "Range" Header DoS BID 29661 SECTRACK 1020265 VUPEN ADV-2008-1808 VUPEN ADV-2008-1809 EXPLOIT-DB 5918 The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header.

cpe:/a:gnome:evolution:2.12.3

CVE-2008-0072

2008-03-05T19:44:00.000-05:00

2018-10-15T17:57:34.263-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SUSE SUSE-SA:2008:014 GENTOO GLSA-200803-12 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0105 DEBIAN DSA-1512 CERT-VN VU#512491 MANDRIVA MDVSA-2008:063 REDHAT RHSA-2008:0177 REDHAT RHSA-2008:0178 BUGTRAQ 20080528 rPSA-2008-0105-1 evolution BID 28102 SECTRACK 1019540 UBUNTU USN-583-1 VUPEN ADV-2008-0768 XF evolution-emfmultipart-format-string(41011) CONFIRM https://issues.rpath.com/browse/RPL-2310 FEDORA FEDORA-2008-2290 FEDORA FEDORA-2008-2292 Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.

cpe:/a:xine:xine-lib:1.1.10.1

CVE-2008-0073

2008-03-24T18:44:00.000-04:00

2017-08-07T21:29:21.150-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SUSE SUSE-SR:2008:007 SUSE SUSE-SR:2008:012 GENTOO GLSA-200804-25 GENTOO GLSA-200808-01 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=585488&group_id=9655 CONFIRM http://wiki.videolan.org/Changelog/0.8.6f DEBIAN DSA-1536 DEBIAN DSA-1543 MANDRIVA MDVSA-2008:178 MANDRIVA MDVSA-2008:219 BID 28312 SECTRACK 1019682 SLACKWARE SSA:2008-089-03 UBUNTU USN-635-1 CONFIRM http://www.videolan.org/security/sa0803.php VUPEN ADV-2008-0923 VUPEN ADV-2008-0985 CONFIRM http://xinehq.de/index.php/news XF xinelib-sdpplinparse-bo(41339) FEDORA FEDORA-2008-2945 FEDORA FEDORA-2008-2569 Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.

cpe:/a:microsoft:internet_information_server:5.1 cpe:/a:microsoft:internet_information_server:6.0 cpe:/a:microsoft:internet_information_server:6.0:beta cpe:/a:microsoft:internet_information_server:7.0 cpe:/a:microsoft:internet_information_services:5.0

CVE-2008-0074

2008-02-12T16:00:00.000-05:00

2019-07-03T13:25:49.997-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBST02314 BID 27101 SECTRACK 1019384 CERT TA08-043C VUPEN ADV-2008-0507 MS MS08-005 Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.

cpe:/a:microsoft:internet_information_server:5.1 cpe:/a:microsoft:internet_information_server:6.0 cpe:/a:microsoft:internet_information_server:6.0:beta

CVE-2008-0075

2008-02-12T16:00:00.000-05:00

2018-10-12T17:44:37.710-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBST02314 BID 27676 SECTRACK 1019385 CERT TA08-043C VUPEN ADV-2008-0508 MS MS08-006 Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary code via crafted inputs to ASP pages.

cpe:/a:microsoft:ie:5.01:windows_2000_sp4 cpe:/a:microsoft:ie:6:windows_server_2003_sp1 cpe:/a:microsoft:ie:6:windows_server_2003_sp1_itanium cpe:/a:microsoft:ie:6:windows_xp_sp2 cpe:/a:microsoft:ie:7:windows_server_2003_sp1 cpe:/a:microsoft:ie:7:windows_xp_sp2 cpe:/a:microsoft:internet_explorer:6::windows_server_2003_sp2 cpe:/a:microsoft:internet_explorer:6::windows_server_2003_sp2_itanium cpe:/a:microsoft:internet_explorer:6::windows_server_2003_x64_edition cpe:/a:microsoft:internet_explorer:6::windows_server_2003_x64_edition_sp2 cpe:/a:microsoft:internet_explorer:6::windows_xp_professional_x64_edition cpe:/a:microsoft:internet_explorer:6::windows_xp_professional_x64_edition_sp2 cpe:/a:microsoft:internet_explorer:7::windows_server_2003_sp1_itanium cpe:/a:microsoft:internet_explorer:7::windows_server_2003_sp2 cpe:/a:microsoft:internet_explorer:7::windows_server_2003_sp2_itanium cpe:/a:microsoft:internet_explorer:7::windows_server_2003_x64_edition cpe:/a:microsoft:internet_explorer:7::windows_server_2003_x64_edition_sp2 cpe:/a:microsoft:internet_explorer:7::windows_vista cpe:/a:microsoft:internet_explorer:7::windows_vista_x64 cpe:/a:microsoft:internet_explorer:7::windows_xp_professional_x64_edition cpe:/a:microsoft:internet_explorer:7::windows_xp_professional_x64_edition_sp2

CVE-2008-0076

2008-02-12T18:00:00.000-05:00

2018-10-12T17:44:38.427-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBST02314 BID 27668 SECTRACK 1019379 CERT TA08-043C VUPEN ADV-2008-0512 MS MS08-010 Unspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via crafted HTML layout combinations, aka "HTML Rendering Memory Corruption Vulnerability."

cpe:/a:microsoft:ie:6 cpe:/a:microsoft:ie:6:sp1 cpe:/a:microsoft:ie:7

CVE-2008-0077

2008-02-12T18:00:00.000-05:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20080212 Microsoft Internet Explorer Property Memory Corruption Vulnerability HP HPSBST02314 CERT-VN VU#228569 BUGTRAQ 20080213 ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability BID 27666 SECTRACK 1019380 CERT TA08-043C VUPEN ADV-2008-0512 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-006.html MS MS08-010 Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption Vulnerability."

cpe:/a:microsoft:activex cpe:/a:microsoft:ie:5.01:windows_2000_sp4 cpe:/a:microsoft:ie:6:windows_server_2003_sp1 cpe:/a:microsoft:ie:6:windows_server_2003_sp1_itanium cpe:/a:microsoft:ie:6:windows_xp_sp2 cpe:/a:microsoft:ie:7:windows_server_2003_sp1 cpe:/a:microsoft:ie:7:windows_xp_sp2 cpe:/a:microsoft:internet_explorer:6::windows_server_2003_sp2 cpe:/a:microsoft:internet_explorer:6::windows_server_2003_sp2_itanium cpe:/a:microsoft:internet_explorer:6::windows_server_2003_x64_edition cpe:/a:microsoft:internet_explorer:6::windows_server_2003_x64_edition_sp2 cpe:/a:microsoft:internet_explorer:6::windows_xp_professional_x64_edition cpe:/a:microsoft:internet_explorer:6::windows_xp_professional_x64_edition_sp2 cpe:/a:microsoft:internet_explorer:7::windows_server_2003_sp1_itanium cpe:/a:microsoft:internet_explorer:7::windows_server_2003_sp2 cpe:/a:microsoft:internet_explorer:7::windows_server_2003_sp2_itanium cpe:/a:microsoft:internet_explorer:7::windows_server_2003_x64_edition cpe:/a:microsoft:internet_explorer:7::windows_server_2003_x64_edition_sp2 cpe:/a:microsoft:internet_explorer:7::windows_vista cpe:/a:microsoft:internet_explorer:7::windows_vista_x64 cpe:/a:microsoft:internet_explorer:7::windows_xp_professional_x64_edition cpe:/a:microsoft:internet_explorer:7::windows_xp_professional_x64_edition_sp2

CVE-2008-0078

2008-02-12T18:00:00.000-05:00

2018-10-12T17:44:40.630-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBST02314 BID 27689 SECTRACK 1019381 CERT TA08-043C VUPEN ADV-2008-0512 MS MS08-010 Unspecified vulnerability in an ActiveX control (dxtmsft.dll) in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via a crafted image, aka "Argument Handling Memory Corruption Vulnerability."

CVE-2008-0079

2017-05-11T10:29:06.463-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none.

cpe:/a:microsoft:webdav_mini-redirector

CVE-2008-0080

2008-02-12T18:00:00.000-05:00

2018-10-30T12:26:31.857-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBST02314 BID 27670 SECTRACK 1019372 CERT TA08-043C VUPEN ADV-2008-0509 MS MS08-007 Heap-based buffer overflow in the WebDAV Mini-Redirector in Microsoft Windows XP SP2, Server 2003 SP1 and SP2, and Vista allows remote attackers to execute arbitrary code via a crafted WebDAV response.

cpe:/a:microsoft:excel:2000:sp3 cpe:/a:microsoft:excel:2002:sp3 cpe:/a:microsoft:excel:2003:sp2 cpe:/a:microsoft:excel_viewer:2003 cpe:/a:microsoft:office:2004::mac

CVE-2008-0081

2008-01-16T18:00:00.000-05:00

2018-10-12T17:44:42.130-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080028 SECTRACK 1019200 MSKB 947563 BID 27305 CERT TA08-071A VUPEN ADV-2008-0146 VUPEN ADV-2008-0846 MS MS08-014 XF microsoft-excel-unspecified-code-execution(39699) Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490.

cpe:/a:microsoft:windows_messenger:4.7 cpe:/a:microsoft:windows_messenger:5.1

CVE-2008-0082

2008-08-12T20:41:00.000-04:00

2018-10-15T17:57:40.810-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBST02360 BUGTRAQ 20080814 Microsoft Windows Messenger Remote Illegal Access Vulnerability BID 30551 SECTRACK 1020681 CERT TA08-225A VUPEN ADV-2008-2354 MS MS08-050 An ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unknown vectors.

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:::x64 cpe:/o:microsoft:windows_2003_server::sp1 cpe:/o:microsoft:windows_2003_server::sp1:itanium cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_2003_server::sp2:x64 cpe:/o:microsoft:windows_xp:::x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp2:x64

CVE-2008-0083

2008-04-08T19:05:00.000-04:00

2018-10-12T17:44:44.037-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080048 BID 28551 SECTRACK 1019799 CERT TA08-099A VUPEN ADV-2008-1146 MS MS08-022 The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors.

cpe:/o:microsoft:windows_vista

CVE-2008-0084

2008-02-12T16:00:00.000-05:00

2018-10-12T17:44:44.770-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov HP HPSBST02314 BID 27634 SECTRACK 1019383 CERT TA08-043C VUPEN ADV-2008-0506 MS MS08-004 Unspecified vulnerability in the TCP/IP support in Microsoft Windows Vista allows remote DHCP servers to cause a denial of service (hang and restart) via a crafted DHCP packet.

cpe:/a:microsoft:data_engine:1.0:sp4 cpe:/a:microsoft:sql_server:7.0:sp4 cpe:/a:microsoft:sql_server:2000:sp4 cpe:/a:microsoft:sql_server:2000:sp4:~~~~itanium~ cpe:/a:microsoft:sql_server:2005:sp1 cpe:/a:microsoft:sql_server:2005:sp1:~~~~itanium~ cpe:/a:microsoft:sql_server:2005:sp1:~~~~x64~ cpe:/a:microsoft:sql_server:2005:sp1:express cpe:/a:microsoft:sql_server:2005:sp2 cpe:/a:microsoft:sql_server:2005:sp2:~~~~itanium~ cpe:/a:microsoft:sql_server:2005:sp2:~~~~x64~ cpe:/a:microsoft:sql_server:2005:sp2:express cpe:/a:microsoft:sql_server_desktop_engine:2000:sp4 cpe:/a:microsoft:wmsde:2000 cpe:/a:microsoft:wyukon::sp2 cpe:/a:microsoft:wyukon::sp2:~~~~x64~

CVE-2008-0085

2008-07-08T19:41:00.000-04:00

2019-02-27T19:59:38.520-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-02-27T13:41:35.923-05:00

BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX SECTRACK 1020441 CERT TA08-190A CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html VUPEN ADV-2008-2022 MS MS08-040 SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 does not initialize memory pages when reallocating memory, which allows database operators to obtain sensitive information (database contents) via unknown vectors related to memory page reuse.

cpe:/a:microsoft:data_engine:1.0:sp4 cpe:/a:microsoft:sql_server:7.0:sp4 cpe:/a:microsoft:sql_server:2000:sp4 cpe:/a:microsoft:sql_server:2005:sp2 cpe:/a:microsoft:sql_server_desktop_engine:2000:sp4 cpe:/a:microsoft:sql_server_express_edition:2005:sp2

CVE-2008-0086

2008-07-08T19:41:00.000-04:00

2018-10-15T17:57:43.450-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20080708 Re: [Full-disclosure] iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX SECTRACK 1020441 CERT TA08-190A CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html VUPEN ADV-2008-2022 MS MS08-040 Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.

cpe:/o:microsoft:windows-nt:xp:sp2:~~pro~~x64~ cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp1 cpe:/o:microsoft:windows_2003_server::sp1:~~~~itanium~ cpe:/o:microsoft:windows_2003_server::sp2:~~~~itanium~ cpe:/o:microsoft:windows_2003_server::sp2:~~~~x64~ cpe:/o:microsoft:windows_vista:::~~~~x64~ cpe:/o:microsoft:windows_vista:-

CVE-2008-0087

2008-04-08T19:05:00.000-04:00

2018-10-30T12:25:38.340-04:00

8.8

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080048 BUGTRAQ 20080408 Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020) BID 28553 SECTRACK 1019802 MISC http://www.trusteer.com/docs/windowsresolver.html CERT TA08-099A VUPEN ADV-2008-1144 MS MS08-020 The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:sp1 cpe:/o:microsoft:windows_2003_server:sp2 cpe:/o:microsoft:windows_xp

CVE-2008-0088

2008-02-12T16:00:00.000-05:00

2019-04-30T10:27:13.913-04:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov HP HPSBST02314 BID 27638 SECTRACK 1019382 CERT TA08-043C VUPEN ADV-2008-0505 MS MS08-003 Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote attackers to cause a denial of service (hang and restart) via a crafted LDAP request.

cpe:/a:clip-share:clipshare

CVE-2008-0089

2008-01-03T20:46:00.000-05:00

2017-09-28T21:30:07.003-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27108 XF clipshare-uprofile-sql-injection(39364) EXPLOIT-DB 4830 SQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute arbitrary SQL commands via the UID parameter.

cpe:/a:divx:divx_player:6.6.0 cpe:/a:microsoft:ie:7

CVE-2008-0090

2008-01-03T20:46:00.000-05:00

2017-09-28T21:30:07.050-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27106 XF divxwebplayer-npUpload-dos(39386) EXPLOIT-DB 4829 A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long argument to the SetPassword method.

cpe:/a:agency4net:webftp:1

CVE-2008-0091

2008-01-03T20:46:00.000-05:00

2017-09-28T21:30:07.127-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov VIM 20080104 true: AGENCY4NET WEBFTP directory traversal; deletion possible BID 27092 VUPEN ADV-2008-0051 XF agency4net-download2-directory-traversal(39343) EXPLOIT-DB 4828 Directory traversal vulnerability in download2.php in AGENCY4NET WEBFTP 1 allows remote attackers to read and delete arbitrary files via a .. (dot dot) in the file parameter.

cpe:/a:phpwebsite:phpwebsite:1.4.0

CVE-2008-0092

2008-01-03T20:46:00.000-05:00

2018-10-15T17:57:46.107-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://phpwebsite.appstate.edu/blog/2143 SREASON 3511 BUGTRAQ 20080101 Cross-Site Scripting (XSS) in phpWebSite 1.4.0 search BID 27090 XF phpwebsite-search-xss(39391) Cross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

cpe:/a:eticket:eticket:1.5.5.2 cpe:/a:eticket:eticket:1.5.6_rc2 cpe:/a:eticket:eticket:1.5.6_rc3

CVE-2008-0093

2008-01-07T20:46:00.000-05:00

2017-08-07T21:29:21.477-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.digitrustgroup.com/advisories/web-application-security-eticket.html BID 27130 XF eticket-name-subject-xss(39400) Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to inject arbitrary web script or HTML via the (1) Name and (2) Subject parameters.

cpe:/a:modxcms:modxcms:0.9.6.1

CVE-2008-0094

2008-01-07T21:46:00.000-05:00

2018-10-15T17:57:46.810-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://modxcms.com/forums/index.php/topic,21290.0.html SREASON 3522 BUGTRAQ 20080102 MODx CMS Source code disclosure, local file inclusion BID 27096 BID 27097 XF modx-ajaxsearch-file-include(39352) Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to (1) include and execute arbitrary local files via a .. (dot dot) in the as_language parameter to assets/snippets/AjaxSearch/AjaxSearch.php, reached through index-ajax.php; and (2) read arbitrary local files via a .. (dot dot) in the file parameter to assets/js/htcmime.php.

cpe:/a:asterisk:asterisk_appliance_developer_kit:1.4_revision_95945 cpe:/a:asterisk:asterisk_business_edition:c.1.0beta7 cpe:/a:asterisk:asterisknow:beta_6 cpe:/a:asterisk:open_source:1.4.16 cpe:/a:asterisk:s800i:1.0.3.3

CVE-2008-0095

2008-01-07T21:46:00.000-05:00

2018-10-15T17:57:47.653-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://bugs.digium.com/view.php?id=11637 CONFIRM http://downloads.digium.com/pub/security/AST-2008-001.html SREASON 3520 BUGTRAQ 20080102 AST-2008-001: Crash from transfer using BYE with Also header BID 27110 SECTRACK 1019152 VUPEN ADV-2008-0019 XF asterisk-bye-also-dos(39361) FEDORA FEDORA-2008-0198 FEDORA FEDORA-2008-0199 The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message with an Also (Also transfer) header, which triggers a NULL pointer dereference.

cpe:/a:georgia_softworks:ssh2_server:7.01.0003

CVE-2008-0096

2008-01-07T21:46:00.000-05:00

2018-10-15T17:57:48.997-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/gswsshit-adv.txt SREASON 3517 BUGTRAQ 20080102 Multiple vulnerabilities in Georgia SoftWorks SSH2 Server 7.01.0003 BID 27103 Multiple buffer overflows in Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 and earlier allow remote attackers to execute arbitrary code via a (1) a long username, which triggers an overflow in the log function; or (2) a long password.

cpe:/a:georgia_softworks:ssh2_server:7.01.0003

CVE-2008-0097

2008-01-07T21:46:00.000-05:00

2018-10-15T17:57:49.497-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/gswsshit-adv.txt SREASON 3517 BUGTRAQ 20080102 Multiple vulnerabilities in Georgia SoftWorks SSH2 Server 7.01.0003 Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username field, as demonstrated by a certain LoginPassword message.

cpe:/a:realnetworks:realplayer:11_build_6.0.14.748

CVE-2008-0098

2008-01-07T21:46:00.000-05:00

2018-10-30T12:25:39.420-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://gleg.net/realplayer11.html MLIST [Dailydave] 20080101 0day RealPlayer exploit demo BID 27091 SECTRACK 1019153 MISC http://www.us-cert.gov/current/index.html#public_exploit_code_for_realplayer VUPEN ADV-2008-0016 Buffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: As of 20080103, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

cpe:/a:myphp_forum:myphp_forum:3.0

CVE-2008-0099

2008-01-07T21:46:00.000-05:00

2017-09-28T21:30:07.177-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 27118 EXPLOIT-DB 4831 Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the searchtext parameter to search.php, and unspecified other vectors.

cpe:/a:white_dune:white_dune:0.29beta791

CVE-2008-0100

2008-01-07T21:46:00.000-05:00

2018-10-15T17:57:49.920-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/whitedunboffs-adv.txt SREASON 3516 CONFIRM http://vrml.cip.ica.uni-stuttgart.de/dune/news.html BUGTRAQ 20080102 Buffer-overflow and format string in White_Dune 0.29beta791 BID 27102 XF whitedune-sceneerrorf-bo(39385) Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via a long string in a .WRL file.

cpe:/a:white_dune:white_dune:0.29beta791

CVE-2008-0101

2008-01-07T21:46:00.000-05:00

2018-10-15T17:57:50.733-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/whitedunboffs-adv.txt SREASON 3516 CONFIRM http://vrml.cip.ica.uni-stuttgart.de/dune/news.html BUGTRAQ 20080102 Buffer-overflow and format string in White_Dune 0.29beta791 BID 27102 XF whitedune-swdegugf-format-string(39388) Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file.

cpe:/a:microsoft:publisher:2000 cpe:/a:microsoft:publisher:2002 cpe:/a:microsoft:publisher:2003:sp2

CVE-2008-0102

2008-02-12T18:00:00.000-05:00

2018-10-12T17:44:49.083-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBST02314 BID 27739 SECTRACK 1019376 CERT TA08-043C VUPEN ADV-2008-0514 MS MS08-012 Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."

cpe:/a:microsoft:office:2000:sp3 cpe:/a:microsoft:office:2003:sp2 cpe:/a:microsoft:office:2004::mac%2bos cpe:/a:microsoft:office:xp:sp3

CVE-2008-0103

2008-02-12T19:00:00.000-05:00

2018-10-12T17:44:49.787-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBST02314 BID 27738 SECTRACK 1019375 CERT TA08-043C VUPEN ADV-2008-0515 MS MS08-013 Unspecified vulnerability in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Office document that contains a malformed object, related to a "memory handling error," aka "Microsoft Office Execution Jump Vulnerability."

cpe:/a:microsoft:office:2000 cpe:/a:microsoft:office:2003:sp2 cpe:/a:microsoft:office:xp cpe:/a:microsoft:publisher

CVE-2008-0104

2008-02-12T18:00:00.000-05:00

2018-10-30T12:26:20.577-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBST02314 BID 27740 SECTRACK 1019377 CERT TA08-043C VUPEN ADV-2008-0514 MS MS08-012 Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."

cpe:/a:microsoft:office:2003:sp2 cpe:/a:microsoft:office:2003:sp3 cpe:/a:microsoft:works:8.0 cpe:/a:microsoft:works:2005

CVE-2008-0105

2008-02-12T18:00:00.000-05:00

2018-10-12T17:44:51.193-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBST02314 BID 27658 SECTRACK 1019387 CERT TA08-043C VUPEN ADV-2008-0513 MS MS08-011 Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka "Microsoft Works File Converter Index Table Vulnerability."

CVE-2008-0106

2008-07-08T19:41:00.000-04:00

2018-10-15T17:57:51.623-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20080708 Re: [Full-disclosure] iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX SECTRACK 1020441 CERT TA08-190A CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html VUPEN ADV-2008-2022 MS MS08-040 Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.

cpe:/a:microsoft:data_engine:1.0:sp4 cpe:/a:microsoft:sql_server:7.0:sp4 cpe:/a:microsoft:sql_server:2000:sp4 cpe:/a:microsoft:sql_server:2000:sp4:itanium cpe:/a:microsoft:sql_server:2005:sp1 cpe:/a:microsoft:sql_server:2005:sp1:express cpe:/a:microsoft:sql_server:2005:sp1:itanium cpe:/a:microsoft:sql_server:2005:sp1:x64 cpe:/a:microsoft:sql_server:2005:sp2 cpe:/a:microsoft:sql_server:2005:sp2:express cpe:/a:microsoft:sql_server:2005:sp2:itanium cpe:/a:microsoft:sql_server:2005:sp2:x64 cpe:/a:microsoft:sql_server_desktop_engine:2000:sp4 cpe:/a:microsoft:wmsde:2000 cpe:/a:microsoft:wyukon::sp2 cpe:/a:microsoft:wyukon::sp2:x64 cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64

CVE-2008-0107

2008-07-08T19:41:00.000-04:00

2019-02-26T09:04:00.993-05:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov IDEFENSE 20080708 Microsoft SQL Server Restore Integer Underflow Vulnerability MISC http://www.insomniasec.com/advisories/ISVA-080709.1.htm BUGTRAQ 20080708 Re: [Full-disclosure] iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX BID 30119 SECTRACK 1020441 CERT TA08-190A CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html VUPEN ADV-2008-2022 MS MS08-040 Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 allows remote authenticated users to execute arbitrary code via a (1) SMB or (2) WebDAV pathname for an on-disk file (aka stored backup file) with a crafted record size value, which triggers a heap-based buffer overflow, aka "SQL Server Memory Corruption Vulnerability."

cpe:/a:microsoft:office:2003:sp2 cpe:/a:microsoft:office:2003:sp3 cpe:/a:microsoft:works:8.0 cpe:/a:microsoft:works:2005

CVE-2008-0108

2008-02-12T18:00:00.000-05:00

2018-10-12T17:44:54.397-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20080208 Microsoft Office Works Converter Stack-based Buffer Overflow Vulnerability HP HPSBST02314 BID 27659 SECTRACK 1019388 CERT TA08-043C VUPEN ADV-2008-0513 MS MS08-011 EXPLOIT-DB 5107 Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka "Microsoft Works File Converter Field Length Vulnerability."

cpe:/a:microsoft:office:2000:sp3 cpe:/a:microsoft:office:2003 cpe:/a:microsoft:office:2003:sp2 cpe:/a:microsoft:office:xp:sp3 cpe:/a:microsoft:word

CVE-2008-0109

2008-02-12T18:00:00.000-05:00

2018-10-15T17:57:55.513-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBST02314 CERT-VN VU#692417 BUGTRAQ 20080213 [Reversemode Advisory] February Advisories : Microsoft Word 2003 + Fortinet Forticlient BID 27656 SECTRACK 1019374 CERT TA08-043C VUPEN ADV-2008-0511 MS MS08-009 Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors and memory corruption.

cpe:/a:microsoft:office:2000:sp3 cpe:/a:microsoft:office:2003:sp2 cpe:/a:microsoft:office:2003:sp3 cpe:/a:microsoft:office:2007 cpe:/a:microsoft:office:xp:sp3

CVE-2008-0110

2008-03-11T19:44:00.000-04:00

2018-10-12T17:44:56.273-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080028 CERT-VN VU#393305 BID 28147 SECTRACK 1019579 CERT TA08-071A VUPEN ADV-2008-0847 MS MS08-015 Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI.

cpe:/a:microsoft:excel:2000:sp3 cpe:/a:microsoft:excel:2002:sp3 cpe:/a:microsoft:excel:2003:sp2 cpe:/a:microsoft:excel_viewer:2003 cpe:/a:microsoft:office:2004::mac cpe:/a:microsoft:office:2007 cpe:/a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007

CVE-2008-0111

2008-03-11T19:44:00.000-04:00

2018-10-12T17:44:57.070-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080028 BID 28094 SECTRACK 1019582 CERT TA08-071A VUPEN ADV-2008-0846 MS MS08-014 Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation records, aka "Excel Data Validation Record Vulnerability."

cpe:/a:microsoft:excel:2000:sp3 cpe:/a:microsoft:office:2004::mac cpe:/a:microsoft:office:2008::mac

CVE-2008-0112

2008-03-11T19:44:00.000-04:00

2018-10-12T17:44:57.693-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080028 BID 28095 SECTRACK 1019583 CERT TA08-071A VUPEN ADV-2008-0846 MS MS08-014 Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability."

cpe:/a:microsoft:excel_viewer:2003

CVE-2008-0113

2008-03-11T19:44:00.000-04:00

2018-10-15T17:57:56.903-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080028 BUGTRAQ 20080311 ZDI-08-008: Microsoft Excel BIFF File Format Cell Record Parsing Memory Corruption Vulnerability SECTRACK 1019578 CERT TA08-071A VUPEN ADV-2008-0848 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-008 MS MS08-016 Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."

cpe:/a:microsoft:excel:2000:sp3 cpe:/a:microsoft:excel:2002:sp3 cpe:/a:microsoft:excel_viewer:2003 cpe:/a:microsoft:office:2004::mac

CVE-2008-0114

2008-03-11T19:44:00.000-04:00

2018-10-12T17:44:59.163-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080028 BID 28166 SECTRACK 1019584 CERT TA08-071A VUPEN ADV-2008-0846 MS MS08-014 Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption.

cpe:/a:microsoft:excel:2000:sp3 cpe:/a:microsoft:excel:2002:sp3 cpe:/a:microsoft:excel:2003:sp2 cpe:/a:microsoft:excel:2007 cpe:/a:microsoft:excel_viewer:2003 cpe:/a:microsoft:office:2004::mac cpe:/a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007

CVE-2008-0115

2008-03-11T19:44:00.000-04:00

2018-10-12T17:44:59.773-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080028 BID 28167 SECTRACK 1019585 CERT TA08-071A VUPEN ADV-2008-0846 MS MS08-014 Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."

cpe:/a:microsoft:excel:2000:sp3 cpe:/a:microsoft:excel:2002:sp3 cpe:/a:microsoft:excel:2003:sp2 cpe:/a:microsoft:excel_viewer:2003 cpe:/a:microsoft:office:2004::mac cpe:/a:microsoft:office:2008::mac cpe:/a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007

CVE-2008-0116

2008-03-11T19:44:00.000-04:00

2018-10-15T17:57:58.153-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MISC http://dvlabs.tippingpoint.com/advisory/TPTI-08-03 HP SSRT080028 BUGTRAQ 20080311 TPTI-08-03: Microsoft Excel Rich Text Memory Corruption Vulnerability BID 28168 SECTRACK 1019586 CERT TA08-071A VUPEN ADV-2008-0846 MS MS08-014 Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."

cpe:/a:microsoft:compatibility_pack_word_excel_powerpoint_2007 cpe:/a:microsoft:excel:2000:sp3 cpe:/a:microsoft:excel:2002:sp3 cpe:/a:microsoft:excel:2003:sp2 cpe:/a:microsoft:excel:2007 cpe:/a:microsoft:excel_viewer:2003 cpe:/a:microsoft:office:2000:sp3 cpe:/a:microsoft:office:2003:sp2 cpe:/a:microsoft:office:2004::mac cpe:/a:microsoft:office:2007 cpe:/a:microsoft:office:2008::mac cpe:/a:microsoft:office:xp:sp3

CVE-2008-0117

2008-03-11T19:44:00.000-04:00

2018-10-12T17:45:01.383-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080028 BID 28170 SECTRACK 1019587 CERT TA08-071A VUPEN ADV-2008-0846 MS MS08-014 Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability."

cpe:/a:microsoft:office:2000:sp3 cpe:/a:microsoft:office:2003:sp2 cpe:/a:microsoft:office:2004::mac cpe:/a:microsoft:office:xp:sp3

CVE-2008-0118

2008-03-11T19:44:00.000-04:00

2018-10-12T17:45:02.210-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080028 BID 28146 SECTRACK 1019578 CERT TA08-071A VUPEN ADV-2008-0848 MS MS08-016 Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption from an "allocation error," aka "Microsoft Office Memory Corruption Vulnerability."

cpe:/a:microsoft:office:2000:sp3 cpe:/a:microsoft:office:2003:sp2 cpe:/a:microsoft:office:2003:sp3 cpe:/a:microsoft:office:2007 cpe:/a:microsoft:office:2007_sp1 cpe:/a:microsoft:office:xp:sp3

CVE-2008-0119

2008-05-13T18:20:00.000-04:00

2018-10-15T17:57:59.297-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT080071 BUGTRAQ 20080514 Microsoft Office Publisher PUB File Parsing Remote Memory Corruption Vulnerability BID 29158 SECTRACK 1020015 CERT TA08-134A VUPEN ADV-2008-1505 MS MS08-027 Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation Vulnerability."

cpe:/a:microsoft:office_powerpoint_viewer:2003

CVE-2008-0120

2008-08-12T20:41:00.000-04:00

2018-10-12T17:45:03.960-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20080812 Microsoft PowerPoint Viewer 2003 Cstring Integer Overflow Vulnerability HP HPSBST02360 BID 30552 SECTRACK 1020676 CERT TA08-225A VUPEN ADV-2008-2355 MS MS08-051 Integer overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with a malformed picture index that triggers memory corruption, related to handling of CString objects, aka "Memory Allocation Vulnerability."

cpe:/a:microsoft:office_powerpoint_viewer:2003

CVE-2008-0121

2008-08-12T20:41:00.000-04:00

2018-10-12T17:45:05.193-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20080812 Microsoft PowerPoint Viewer 2003 Out of Bounds Array Index Vulnerability HP HPSBST02360 BID 30554 SECTRACK 1020676 CERT TA08-225A VUPEN ADV-2008-2355 MS MS08-051 A "memory calculation error" in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with an invalid picture index that triggers memory corruption, aka "Memory Calculation Vulnerability."

cpe:/a:isc:bind:9.4.2

CVE-2008-0122

2008-01-15T21:00:00.000-05:00

2019-08-01T08:12:48.417-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2019-07-24T13:22:27.167-04:00

SUSE SUSE-SR:2008:006 FREEBSD FreeBSD-SA-08:02 SUNALERT 238493 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm CONFIRM http://www.isc.org/index.pl?/sw/bind/bind-security.php CERT-VN VU#203611 REDHAT RHSA-2008:0300 BUGTRAQ 20080124 rPSA-2008-0029-1 bind bind-utils BID 27283 SECTRACK 1019189 VUPEN ADV-2008-0193 VUPEN ADV-2008-0703 VUPEN ADV-2008-1743 CONFIRM http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile123640&label=AIX%20libc%20inet_network%20buffer%20overflow CONFIRM http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=429149 XF freebsd-inetnetwork-bo(39670) CONFIRM https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 CONFIRM https://issues.rpath.com/browse/RPL-2169 FEDORA FEDORA-2008-0903 FEDORA FEDORA-2008-0904 Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.

cpe:/a:moodle:moodle:1.8.3

CVE-2008-0123

2008-01-11T20:46:00.000-05:00

2018-10-15T17:58:05.013-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080111 Cross site scripting (XSS) in Moodle 1.8.3 MISC http://int21.de/cve/CVE-2008-0123-moodle.html SUSE SUSE-SR:2008:003 BUGTRAQ 20080111 Cross site scripting (XSS) in Moodle 1.8.3 BID 27259 VUPEN ADV-2008-0164 XF moodle-install-xss(39630) Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete.

cpe:/a:s9y:serendipity:0.3 cpe:/a:s9y:serendipity:0.4 cpe:/a:s9y:serendipity:0.5 cpe:/a:s9y:serendipity:0.5_pl1 cpe:/a:s9y:serendipity:0.6 cpe:/a:s9y:serendipity:0.6_pl1 cpe:/a:s9y:serendipity:0.6_pl2 cpe:/a:s9y:serendipity:0.6_pl3 cpe:/a:s9y:serendipity:0.6_rc1 cpe:/a:s9y:serendipity:0.6_rc2 cpe:/a:s9y:serendipity:0.7 cpe:/a:s9y:serendipity:0.7.1 cpe:/a:s9y:serendipity:0.7_beta1 cpe:/a:s9y:serendipity:0.7_beta2 cpe:/a:s9y:serendipity:0.7_beta3 cpe:/a:s9y:serendipity:0.7_beta4 cpe:/a:s9y:serendipity:0.7_rc1 cpe:/a:s9y:serendipity:0.8 cpe:/a:s9y:serendipity:0.8.1 cpe:/a:s9y:serendipity:0.8.2 cpe:/a:s9y:serendipity:0.8_beta5 cpe:/a:s9y:serendipity:0.8_beta6 cpe:/a:s9y:serendipity:0.8_beta_6_snapshot cpe:/a:s9y:serendipity:0.9.1 cpe:/a:s9y:serendipity:1.0.3 cpe:/a:s9y:serendipity:1.0.4 cpe:/a:s9y:serendipity:1.0_beta2 cpe:/a:s9y:serendipity:1.0_beta3 cpe:/a:s9y:serendipity:1.1.1 cpe:/a:s9y:serendipity:1.1.3 cpe:/a:s9y:serendipity:1.1.4 cpe:/a:s9y:serendipity:1.2 cpe:/a:s9y:serendipity:1.2.1 cpe:/a:s9y:serendipity:1.2__beta5

CVE-2008-0124

2008-02-28T15:44:00.000-05:00

2017-08-07T21:29:21.930-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://blog.s9y.org/archives/191-Serendipity-1.3-beta1-released.html MISC http://int21.de/cve/CVE-2008-0124-s9y.html DEBIAN DSA-1528 BID 28003 SECTRACK 1019502 VUPEN ADV-2008-0700 XF serendipity-realname-username-xss(40851) Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3-beta1 allows remote authenticated users to inject arbitrary web script or HTML via (1) the "Real name" field in Personal Settings, which is presented to readers of articles; or (2) a file upload, as demonstrated by a .htm, .html, or .js file.

cpe:/a:phpstats:phpstats:0.1_alpha

CVE-2008-0125

2008-03-24T18:44:00.000-04:00

2018-10-15T17:58:05.747-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3765 BUGTRAQ 20080317 Cross Site Scripting (XSS) in phpstats 0.1_alpha, CVE-2008-0125 BID 28291 XF phpstats-phpstats-xss(41261) Cross-site scripting (XSS) vulnerability in phpstats.php in Michael Wagner phpstats 0.1 alpha allows remote attackers to inject arbitrary web script or HTML via the baseDir parameter.

cpe:/a:mcafee:e-business_server:8.5.2

CVE-2008-0127

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:06.263-04:00

8.8

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SREASON 3530 SECTRACK 1019170 BUGTRAQ 20080109 [INFIGO 2008-01-06]: McAfee E-Business Server Remote Preauth Code Execution / DoS BUGTRAQ 20080109 [INFIGO-2008-01-06]: McAfee E-Business Server Remote Preauth Code Execution / DoS - Corrected BID 27197 VUPEN ADV-2008-0087 XF mcafee-ebusiness-authentication-packet-dos(39561) XF mcafee-ebusiness-packet-code-execution(39563) CONFIRM https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=614472&sliceId=SAL_Public&command=show&forward=nonthreadedKC&kcId=614472 EXPLOIT-DB 4878 The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long initial authentication packet.

cpe:/a:apache:tomcat:5.5.20

CVE-2008-0128

2008-01-22T21:00:00.000-05:00

2019-03-25T07:30:01.253-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx CONFIRM http://issues.apache.org/bugzilla/show_bug.cgi?id=41217 SUSE SUSE-SR:2008:005 REDHAT RHSA-2008:0630 CONFIRM http://security-tracker.debian.net/tracker/CVE-2008-0128 CONFIRM http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 REDHAT RHSA-2008:0261 BUGTRAQ 20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities BUGTRAQ 20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1) BID 27365 VUPEN ADV-2008-0192 VUPEN ADV-2009-0233 XF apache-singlesignon-information-disclosure(39804) MLIST [tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ MLIST [tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

cpe:/a:siteatschool:siteatschool:2.3.10

CVE-2008-0129

2008-01-08T06:46:00.000-05:00

2017-09-28T21:30:08.783-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 27120 XF siteatschool-slideshowfull-sql-injection(39417) EXPLOIT-DB 4832 SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and earlier allows remote attackers to execute arbitrary SQL commands via the album_name parameter.

cpe:/a:instantsoftwares:dating_site

CVE-2008-0130

2008-01-08T06:46:00.000-05:00

2017-08-07T21:29:22.227-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov XF dating-site-loginform-sql-injection(39326) SQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to execute arbitrary SQL commands via the Username parameter, a different vulnerability than CVE-2007-6671. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:instantsoftwares:dating_site

CVE-2008-0131

2008-01-08T06:46:00.000-05:00

2009-09-15T01:10:32.453-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27121 Cross-site scripting (XSS) vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to inject arbitrary web script or HTML via the msg parameter, a different product than CVE-2006-6022. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:pragma_systems:fortressssh:5.0_build_4_r_293

CVE-2008-0132

2008-01-08T06:46:00.000-05:00

2017-08-07T21:29:22.273-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/pragmassh-adv.txt MISC http://aluigi.org/poc/pragmassh.zip BUGTRAQ 20080104 Some DoS in some telnet servers BID 27141 XF fortressssh-sshd-dos(39354) Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message window and waiting for the administrator to click in this window before terminating the sshd.exe process, which allows remote attackers to cause a denial of service (connection slot exhaustion) via a flood of SSH connections with long data objects, as demonstrated by (1) a long list of keys and (2) a long username.

cpe:/a:thomas_perez:tribisur:2.1

CVE-2008-0133

2008-01-08T14:46:00.000-05:00

2017-09-28T21:30:08.847-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27149 XF tribisur-catmain-forum-sql-injection(39443) EXPLOIT-DB 4840 Multiple SQL injection vulnerabilities in Tribisur 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to cat_main.php and the (2) cat parameter to forum.php in a liste action.

cpe:/a:snitz_communications:snitz_forums_2000:3.0 cpe:/a:snitz_communications:snitz_forums_2000:3.1 cpe:/a:snitz_communications:snitz_forums_2000:3.1:sr4 cpe:/a:snitz_communications:snitz_forums_2000:3.2.03 cpe:/a:snitz_communications:snitz_forums_2000:3.3 cpe:/a:snitz_communications:snitz_forums_2000:3.3.01 cpe:/a:snitz_communications:snitz_forums_2000:3.3.02 cpe:/a:snitz_communications:snitz_forums_2000:3.3.03 cpe:/a:snitz_communications:snitz_forums_2000:3.4.02 cpe:/a:snitz_communications:snitz_forums_2000:3.4.03 cpe:/a:snitz_communications:snitz_forums_2000:3.4.04 cpe:/a:snitz_communications:snitz_forums_2000:3.4.05 cpe:/a:snitz_communications:snitz_forums_2000:3.4.06

CVE-2008-0134

2008-01-08T14:46:00.000-05:00

2018-10-15T17:58:10.280-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://hackerscenter.com/archive/view.asp?id=28145 MISC http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt BUGTRAQ 20080107 [HSC] Snitz Forums Multiple Vulnerabilities BID 27162 Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter.

CVE-2008-0135

2008-01-08T14:46:00.000-05:00

2018-10-15T17:58:10.857-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://hackerscenter.com/archive/view.asp?id=28145 MISC http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt BUGTRAQ 20080107 [HSC] Snitz Forums Multiple Vulnerabilities BUGTRAQ 20080107 RE: [HSC] Snitz Forums Multiple Vulnerabilities Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitz_forums_2000.mdb.

cpe:/a:snitz_communications:snitz_forums_2000:3.4.05

CVE-2008-0136

2008-01-08T14:46:00.000-05:00

2018-10-15T17:58:11.483-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://hackerscenter.com/archive/view.asp?id=28145 MISC http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt BUGTRAQ 20080107 [HSC] Snitz Forums Multiple Vulnerabilities BUGTRAQ 20080107 RE: [HSC] Snitz Forums Multiple Vulnerabilities Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path.

cpe:/a:snetworks:php_classifieds:5.0

CVE-2008-0137

2008-01-08T14:46:00.000-05:00

2017-09-28T21:30:08.910-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov VUPEN ADV-2008-0053 XF snetworks-configinc-file-include(39468) EXPLOIT-DB 4838 PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_escape parameter.

cpe:/a:xoops:xoopsgallery_module:1.3.3_9

CVE-2008-0138

2008-01-08T14:46:00.000-05:00

2017-09-28T21:30:08.987-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 27155 XF xoops-modgallery-zendhashkey-file-include(39461) EXPLOIT-DB 4847 PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module for XOOPS, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter.

cpe:/a:loudblog:loudblog:0.8.0

CVE-2008-0139

2008-01-08T14:46:00.000-05:00

2017-10-18T21:30:12.020-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 27157 XF loudblog-template-code-execution(39445) EXPLOIT-DB 4849 Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to execute arbitrary PHP code via the template parameter.

cpe:/a:uebimiau:webmail:2.7.2 cpe:/a:uebimiau:webmail:2.7.10

CVE-2008-0140

2008-01-08T14:46:00.000-05:00

2017-09-28T21:30:09.050-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov VIM 20080107 Uebimiau Web-Mail 2.7.10/2.7.2 Remote File Disclosure Vulnerability BID 27154 XF uebimiau-webmail-error-directory-traversal(39460) EXPLOIT-DB 4846 Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the selected_theme parameter, a different vector than CVE-2007-3172.

cpe:/a:webportal:webportal_cms:0.6_beta

CVE-2008-0141

2008-01-08T14:46:00.000-05:00

2017-09-28T21:30:09.097-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27145 XF webportal-action-weak-security(39486) EXPLOIT-DB 4835 actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account via a lostpass action.

cpe:/a:webportal:webportal_cms:0.6_beta

CVE-2008-0142

2008-01-08T14:46:00.000-05:00

2017-09-28T21:30:09.160-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov EXPLOIT-DB 4835 Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL commands via the user_name parameter to actions.php, and unspecified other vectors.

cpe:/a:spacial_audio_solutions:sam_broadcaster cpe:/a:spacial_audio_solutions:samphpweb

CVE-2008-0143

2008-01-08T14:46:00.000-05:00

2017-09-28T21:30:09.223-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27137 CONFIRM http://www.spacialaudio.com/news/index.html XF samPHPweb-db-file-include(39397) EXPLOIT-DB 4834 PHP remote file inclusion vulnerability in common/db.php in samPHPweb, possibly 4.2.2 and others, as provided with SAM Broadcaster, allows remote attackers to execute arbitrary PHP code via a URL in the commonpath parameter.

cpe:/a:phprisk:netrisk:1.9.7

CVE-2008-0144

2008-01-08T14:46:00.000-05:00

2017-09-28T21:30:09.283-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20080105 NetRisk 1.9.7 Remote File Inclusion Vulnerability BID 27136 XF netrisk-index-file-include(39419) EXPLOIT-DB 4833 PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: this can also be leveraged for local file inclusion using directory traversal sequences.

cpe:/a:php:php:4.4.7

CVE-2008-0145

2008-01-08T14:46:00.000-05:00

2017-08-07T21:29:22.743-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.php.net/bug.php?id=41655 SLACKWARE SSA:2008-045-03 CONFIRM http://www.php.net/ChangeLog-4.php CONFIRM http://www.php.net/releases/4_4_8.php VUPEN ADV-2008-0059 XF php-glob-openbasedir-security-bypass(39401) Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vectors. NOTE: this issue reportedly exists because of a regression related to CVE-2007-4663.

cpe:/a:hughes_technologies:w3-msql

CVE-2008-0146

2008-01-08T14:46:00.000-05:00

2018-10-15T17:58:12.013-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3521 BUGTRAQ 20080103 xss in w3-msql error page BID 27116 Cross-site scripting (XSS) vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the top-level URI.

cpe:/a:smallnuke:smallnuke:2.0.4

CVE-2008-0147

2008-01-08T19:46:00.000-05:00

2017-09-28T21:30:09.347-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 27180 XF smallnuke-index-sql-injection(39525) EXPLOIT-DB 4863 SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via (1) the user_email parameter and possibly (2) username parameter in a Members action.

cpe:/a:tutos:tutos:1.3

CVE-2008-0148

2008-01-08T19:46:00.000-05:00

2017-10-18T21:30:12.083-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov XF tutos-cmd-command-execution(39531) EXPLOIT-DB 4861 TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request.

cpe:/a:tutos:tutos:1.3

CVE-2008-0149

2008-01-08T19:46:00.000-05:00

2017-10-18T21:30:12.143-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov EXPLOIT-DB 4861 TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function.

cpe:/a:aruba_networks:aruba_mobility_controllers:2.3.6.15 cpe:/a:aruba_networks:aruba_mobility_controllers:2.4.8.11-fips cpe:/a:aruba_networks:aruba_mobility_controllers:2.5.2.11 cpe:/a:aruba_networks:aruba_mobility_controllers:2.5.4.25 cpe:/a:aruba_networks:aruba_mobility_controllers:2.5.5.7 cpe:/a:aruba_networks:aruba_mobility_controllers:3.1.1.3

CVE-2008-0150

2008-01-08T19:46:00.000-05:00

2018-10-15T17:58:12.497-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SREASON 3529 CONFIRM http://www.arubanetworks.com/support/alerts/aid-122207.asc BUGTRAQ 20080104 Aruba Mobility Controller User Authentication Vulnerability - Aruba Advisory ID: AID-122207 BID 27144 Unspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, and 2.4.8.11-FIPS or earlier allows remote attackers to bypass authentication mechanisms and obtain management or VPN interface access.

cpe:/a:foxitsoftware:wac_server:2.0 cpe:/a:foxitsoftware:wac_server:2.1.0.910

CVE-2008-0151

2008-01-08T19:46:00.000-05:00

2018-10-15T17:58:13.060-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/waccaz-adv.txt MISC http://aluigi.altervista.org/adv/wachof-adv.txt SREASON 3525 BUGTRAQ 20080104 Some DoS in some telnet servers BUGTRAQ 20080219 Two heap overflow in Foxit WAC Server 2.0 Build 3503 BID 27142 XF wacserver-option-dos(39427) Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Telnet request with long options.

cpe:/o:seattle_lab_software:slnet_rf_telnet_server:4.1.1.3758

CVE-2008-0152

2008-01-08T19:46:00.000-05:00

2011-09-21T00:00:00.000-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2008-01-09T14:16:00.000-05:00

MISC http://aluigi.altervista.org/adv/slnetmsg-adv.txt BUGTRAQ 20080104 Some DoS in some telnet servers BID 27134 SLnet.exe in SeattleLab SLNet RF Telnet Server 4.1.1.3758 and earlier allows user-assisted remote attackers to cause a denial of service (crash) via unspecified telnet options, which triggers a NULL pointer dereference. NOTE: the crash is not user-assisted when the server is running in debug mode.

cpe:/a:pragma_systems:pragma_telnetserver:7.0.4.589

CVE-2008-0153

2008-01-08T19:46:00.000-05:00

2017-08-07T21:29:23.010-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/pragmatel-adv.txt BUGTRAQ 20080104 Some DoS in some telnet servers BID 27143 XF pragmatelnetserver-telnetd-dos(39353) telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service (process crash and resource exhaustion) via a crafted TELOPT PRAGMA LOGON telnet option, which triggers a NULL pointer dereference.

cpe:/a:evilboard:evilboard:0.1a

CVE-2008-0154

2008-01-08T19:46:00.000-05:00

2017-09-28T21:30:09.440-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27190 XF evilboard-index-sql-injection(39529) EXPLOIT-DB 4865 SQL injection vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to execute arbitrary SQL commands the c parameter.

cpe:/a:evilboard:evilboard:0.1a

CVE-2008-0155

2008-01-08T19:46:00.000-05:00

2017-09-28T21:30:09.550-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27190 XF evilboard-index-xss(39526) EXPLOIT-DB 4865 Cross-site scripting (XSS) vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to inject arbitrary web script or HTML via the c parameter.

cpe:/a:million_dollar_script:million_dollar_script:2.0.14

CVE-2008-0156

2008-01-08T19:46:00.000-05:00

2018-10-15T17:58:14.077-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3524 BUGTRAQ 20080107 Million Dollar Script 2.0.14 Remote File Disclosure Vulnerability. BID 27174 XF milliondollarscript-index-dir-traversal(39492) Absolute path traversal vulnerability in index.php in Million Dollar Script 2.0.14 allows remote attackers to read arbitrary files via encoded "/" (%2F) sequences in the link parameter.

cpe:/a:flexbb:flexbb:0.6.3 cpe:/a:flexbb:flexbb:1.0_10005_beta_release_1

CVE-2008-0157

2008-01-08T19:46:00.000-05:00

2017-09-28T21:30:09.597-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27164 XF flexbb-flexbbtempid-sql-injection(39475) EXPLOIT-DB 4858 SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_temp_id parameter in a cookie.

cpe:/a:shop-script:shop-script:2.0

CVE-2008-0158

2008-01-08T19:46:00.000-05:00

2017-09-28T21:30:09.643-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.org/0801-exploits/shopscript-disclose.txt BID 27165 XF shopscript-index-directory-traversal(39449) EXPLOIT-DB 4855 Directory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions allows remote attackers to read arbitrary files via a .. (dot dot) in the aux_page parameter.

cpe:/a:eggblog:eggblog:3.1.0

CVE-2008-0159

2008-01-08T19:46:00.000-05:00

2017-09-28T21:30:09.707-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 27168 XF eggblog-eggblogmail-sql-injection(39473) EXPLOIT-DB 4860 SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the eggblogpassword parameter in a cookie.

cpe:/a:sam_lantinga:splitvt:1.6.6

CVE-2008-0162

2008-02-22T16:44:00.000-05:00

2008-09-05T17:34:21.920-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2008-02-25T09:57:00.000-05:00

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200803-05 DEBIAN DSA-1500 BID 27936 misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.

cpe:/o:linux:linux_kernel:2.6.0

CVE-2008-0163

2008-02-12T16:00:00.000-05:00

2017-08-07T21:29:23.400-04:00

4.4

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-1494 BID 27704 BID 27798 XF linux-kernel-proc-unauth-access(40486) Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc.

cpe:/a:plone:plone_cms:3.0.5 cpe:/a:plone:plone_cms:3.0.6

CVE-2008-0164

2008-03-19T20:44:00.000-04:00

2018-10-15T17:58:14.513-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://plone.org/about/security/advisories/cve-2008-0164 SREASON 3754 MISC http://www.procheckup.com/Hacking_Plone_CMS.pdf BUGTRAQ 20080313 PR08-02: Plone CMS Security Research - the Art of Plowning XF plone-joinform-csrf(41263) Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to (1) add arbitrary accounts via the join_form page and (2) change the privileges of arbitrary groups via the prefs_groups_overview page.

cpe:/a:ikiwiki:ikiwiki:2.41

CVE-2008-0165

2008-04-21T09:05:00.000-04:00

2017-08-07T21:29:23.510-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475445 CONFIRM http://ikiwiki.info/security/#index31h2 DEBIAN DSA-1553 VUPEN ADV-2008-1297 XF ikiwiki-change-password-csrf(41904) Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms.

cpe:/a:openssl_project:openssl:0.9.8c-1 cpe:/a:openssl_project:openssl:0.9.8c-2 cpe:/a:openssl_project:openssl:0.9.8c-3 cpe:/a:openssl_project:openssl:0.9.8c-4 cpe:/a:openssl_project:openssl:0.9.8c-5 cpe:/a:openssl_project:openssl:0.9.8c-6 cpe:/a:openssl_project:openssl:0.9.8c-7 cpe:/a:openssl_project:openssl:0.9.8c-8 cpe:/a:openssl_project:openssl:0.9.8c-9 cpe:/a:openssl_project:openssl:0.9.8d-1 cpe:/a:openssl_project:openssl:0.9.8d-2 cpe:/a:openssl_project:openssl:0.9.8d-3 cpe:/a:openssl_project:openssl:0.9.8d-4 cpe:/a:openssl_project:openssl:0.9.8d-5 cpe:/a:openssl_project:openssl:0.9.8d-6 cpe:/a:openssl_project:openssl:0.9.8d-7 cpe:/a:openssl_project:openssl:0.9.8d-8 cpe:/a:openssl_project:openssl:0.9.8d-9 cpe:/a:openssl_project:openssl:0.9.8e-1 cpe:/a:openssl_project:openssl:0.9.8e-2 cpe:/a:openssl_project:openssl:0.9.8e-3 cpe:/a:openssl_project:openssl:0.9.8e-4 cpe:/a:openssl_project:openssl:0.9.8e-5 cpe:/a:openssl_project:openssl:0.9.8e-6 cpe:/a:openssl_project:openssl:0.9.8e-7 cpe:/a:openssl_project:openssl:0.9.8e-8 cpe:/a:openssl_project:openssl:0.9.8e-9 cpe:/a:openssl_project:openssl:0.9.8f-1 cpe:/a:openssl_project:openssl:0.9.8f-2 cpe:/a:openssl_project:openssl:0.9.8f-3 cpe:/a:openssl_project:openssl:0.9.8f-4 cpe:/a:openssl_project:openssl:0.9.8f-5 cpe:/a:openssl_project:openssl:0.9.8f-6 cpe:/a:openssl_project:openssl:0.9.8f-7 cpe:/a:openssl_project:openssl:0.9.8f-8 cpe:/a:openssl_project:openssl:0.9.8f-9 cpe:/a:openssl_project:openssl:0.9.8g-1 cpe:/a:openssl_project:openssl:0.9.8g-2 cpe:/a:openssl_project:openssl:0.9.8g-3 cpe:/a:openssl_project:openssl:0.9.8g-4 cpe:/a:openssl_project:openssl:0.9.8g-5 cpe:/a:openssl_project:openssl:0.9.8g-6 cpe:/a:openssl_project:openssl:0.9.8g-7 cpe:/a:openssl_project:openssl:0.9.8g-8 cpe:/a:openssl_project:openssl:0.9.8g-9

CVE-2008-0166

2008-05-13T13:20:00.000-04:00

2018-10-15T17:58:15.280-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov MISC http://metasploit.com/users/hdm/tools/debian-openssl/ MLIST [rsyncrypto-devel] 20080523 Advisory - Rsyncrypto maybe affected from Debian OpenSSL reduced entropy problem DEBIAN DSA-1571 DEBIAN DSA-1576 CERT-VN VU#925211 BUGTRAQ 20080515 Debian generated SSH-Keys working exploit BID 29179 SECTRACK 1020017 UBUNTU USN-612-1 UBUNTU USN-612-2 UBUNTU USN-612-3 UBUNTU USN-612-4 UBUNTU USN-612-7 CERT TA08-137A XF openssl-rng-weak-security(42375) EXPLOIT-DB 5622 EXPLOIT-DB 5632 EXPLOIT-DB 5720 OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys.

cpe:/a:gforge:gforge:4.5.14

CVE-2008-0167

2008-05-18T10:20:00.000-04:00

2017-08-07T21:29:23.650-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch8.diff.gz DEBIAN DSA-1577 BID 29215 VUPEN ADV-2008-1537 XF gforge-unspecified-symlink(42456) The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass intended access restrictions or have unspecified other impact in opportunistic circumstances.

cpe:/a:ikiwiki:ikiwiki:1.5 cpe:/a:ikiwiki:ikiwiki:1.34 cpe:/a:ikiwiki:ikiwiki:1.34.1 cpe:/a:ikiwiki:ikiwiki:1.34.2 cpe:/a:ikiwiki:ikiwiki:1.35 cpe:/a:ikiwiki:ikiwiki:1.36 cpe:/a:ikiwiki:ikiwiki:1.37 cpe:/a:ikiwiki:ikiwiki:1.38 cpe:/a:ikiwiki:ikiwiki:1.39 cpe:/a:ikiwiki:ikiwiki:1.40 cpe:/a:ikiwiki:ikiwiki:1.41 cpe:/a:ikiwiki:ikiwiki:1.42 cpe:/a:ikiwiki:ikiwiki:1.43 cpe:/a:ikiwiki:ikiwiki:1.44 cpe:/a:ikiwiki:ikiwiki:1.45 cpe:/a:ikiwiki:ikiwiki:1.46 cpe:/a:ikiwiki:ikiwiki:1.47 cpe:/a:ikiwiki:ikiwiki:1.48 cpe:/a:ikiwiki:ikiwiki:1.49 cpe:/a:ikiwiki:ikiwiki:1.51 cpe:/a:ikiwiki:ikiwiki:2.0 cpe:/a:ikiwiki:ikiwiki:2.1 cpe:/a:ikiwiki:ikiwiki:2.2 cpe:/a:ikiwiki:ikiwiki:2.3 cpe:/a:ikiwiki:ikiwiki:2.4 cpe:/a:ikiwiki:ikiwiki:2.5 cpe:/a:ikiwiki:ikiwiki:2.6 cpe:/a:ikiwiki:ikiwiki:2.7 cpe:/a:ikiwiki:ikiwiki:2.8 cpe:/a:ikiwiki:ikiwiki:2.9 cpe:/a:ikiwiki:ikiwiki:2.10 cpe:/a:ikiwiki:ikiwiki:2.11 cpe:/a:ikiwiki:ikiwiki:2.12 cpe:/a:ikiwiki:ikiwiki:2.13 cpe:/a:ikiwiki:ikiwiki:2.14 cpe:/a:ikiwiki:ikiwiki:2.15 cpe:/a:ikiwiki:ikiwiki:2.16 cpe:/a:ikiwiki:ikiwiki:2.17 cpe:/a:ikiwiki:ikiwiki:2.18 cpe:/a:ikiwiki:ikiwiki:2.19 cpe:/a:ikiwiki:ikiwiki:2.20 cpe:/a:ikiwiki:ikiwiki:2.30 cpe:/a:ikiwiki:ikiwiki:2.31 cpe:/a:ikiwiki:ikiwiki:2.31.1 cpe:/a:ikiwiki:ikiwiki:2.31.2 cpe:/a:ikiwiki:ikiwiki:2.31.3 cpe:/a:ikiwiki:ikiwiki:2.40 cpe:/a:ikiwiki:ikiwiki:2.41 cpe:/a:ikiwiki:ikiwiki:2.42 cpe:/a:ikiwiki:ikiwiki:2.43 cpe:/a:ikiwiki:ikiwiki:2.44 cpe:/a:ikiwiki:ikiwiki:2.47

CVE-2008-0169

2008-06-03T11:32:00.000-04:00

2017-08-07T21:29:23.713-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=483770 CONFIRM http://ikiwiki.info/news/version_2.48/index.html CONFIRM http://ikiwiki.info/security/#index33h2 MLIST [oss-security] 20080531 Re: CVE id request: ikiwiki BID 29479 VUPEN ADV-2008-1710 XF ikiwiki-openid-passwordauth-auth-bypass(42798) Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and login to any account for which an OpenID identity is configured and a password is not configured, by specifying an empty password during the login sequence.

cpe:/a:boost:boost:1.33 cpe:/a:boost:boost:1.34 cpe:/a:boost:boost_regex_library

CVE-2008-0171

2008-01-17T18:00:00.000-05:00

2018-10-15T17:58:19.013-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=205955 SUSE SUSE-SR:2008:006 SECUNIA 48099 CONFIRM http://svn.boost.org/trac/boost/changeset/42674 CONFIRM http://svn.boost.org/trac/boost/changeset/42745 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0063 GENTOO GLSA-200802-08 MANDRIVA MDVSA-2008:032 BUGTRAQ 20080213 rPSA-2008-0063-1 boost BID 27325 UBUNTU USN-570-1 VUPEN ADV-2008-0249 CONFIRM https://issues.rpath.com/browse/RPL-2143 FEDORA FEDORA-2008-0880 regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.

cpe:/a:boost:boost:1.33 cpe:/a:boost:boost:1.34

CVE-2008-0172

2008-01-17T18:00:00.000-05:00

2018-10-15T17:58:21.717-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=205955 SUSE SUSE-SR:2008:006 SECUNIA 48099 CONFIRM http://svn.boost.org/trac/boost/changeset/42674 CONFIRM http://svn.boost.org/trac/boost/changeset/42745 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0063 GENTOO GLSA-200802-08 MANDRIVA MDVSA-2008:032 BUGTRAQ 20080213 rPSA-2008-0063-1 boost BID 27325 UBUNTU USN-570-1 VUPEN ADV-2008-0249 CONFIRM https://issues.rpath.com/browse/RPL-2143 FEDORA FEDORA-2008-0880 The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression.

cpe:/a:gforge:gforge:4.6.99

CVE-2008-0173

2008-01-15T15:00:00.000-05:00

2017-08-07T21:29:23.773-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-1459 BID 27266 VUPEN ADV-2008-0115 XF gforge-multiple-sql-injection(39666) SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports.

cpe:/a:ge_fanuc:proficy_real-time_information_portal:2.6

CVE-2008-0174

2008-01-28T21:00:00.000-05:00

2018-10-15T17:58:24.030-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3590 SECTRACK 1019273 CONFIRM http://support.gefanuc.com/support/index?page=kbchannel&id=KB12459 CERT-VN VU#180876 BUGTRAQ 20080125 C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability BUGTRAQ 20080129 Re: C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability BID 30754 GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges.

cpe:/a:ge_fanuc:proficy_real-time_information_portal:2.6

CVE-2008-0175

2008-01-28T21:00:00.000-05:00

2018-10-15T17:58:24.843-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3591 CONFIRM http://support.gefanuc.com/support/index?page=kbchannel&id=KB12460 CERT-VN VU#339345 BUGTRAQ 20080125 C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Arbitrary File Upload and Execution BUGTRAQ 20080129 Re: C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Arbitrary File Upload and Execution BID 27446 SECTRACK 1019274 VUPEN ADV-2008-0307 Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory.

cpe:/a:ge_fanuc:cimplicity:6.1_sp6_hf_010708_162517_6106 cpe:/a:ge_fanuc:cimplicity:7.0_sim8

CVE-2008-0176

2008-01-28T21:00:00.000-05:00

2018-10-15T17:58:25.670-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SREASON 3592 CONFIRM http://support.gefanuc.com/support/index?page=kbchannel&id=KB12458 CERT-VN VU#308556 BUGTRAQ 20080125 C4 Security Advisory - GE Fanuc Cimplicity 6.1 Heap Overflow BUGTRAQ 20080129 Re: C4 Security Advisory - GE Fanuc Cimplicity 6.1 Heap Overflow BID 27447 SECTRACK 1019275 VUPEN ADV-2008-0306 Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 Hot fix - 010708_162517_6106, allow remote attackers to execute arbitrary code via unknown vectors.

cpe:/a:kame:ipcomp

CVE-2008-0177

2008-02-07T17:00:00.000-05:00

2017-09-28T21:30:10.033-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/ipcomp_input.c?f=u&only_with_tag=netbsd-3-1 APPLE APPLE-SA-2008-07-11 APPLE APPLE-SA-2008-05-28 FREEBSD FreeBSD-SA-08:04 SECTRACK 1019314 CONFIRM http://www.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ipcomp_input.c.diff?r1=1.36;r2=1.37 CERT-VN VU#110947 BID 27642 CERT TA08-150A VUPEN ADV-2008-0441 VUPEN ADV-2008-0688 VUPEN ADV-2008-1697 VUPEN ADV-2008-2094 EXPLOIT-DB 5191 The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.

cpe:/a:liferay:liferay_enterprise_portal:4.3.6

CVE-2008-0178

2008-02-04T19:00:00.000-05:00

2008-09-05T17:34:24.373-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-05T10:50:00.000-05:00

CONFIRM http://support.liferay.com/browse/LEP-4736 CERT-VN VU#326065 BID 27547 Cross-site scripting (XSS) vulnerability in the Enterprise Admin Session Monitoring component in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the User-Agent HTTP header.

cpe:/a:liferay:liferay_enterprise_portal:4.3.6

CVE-2008-0179

2008-02-04T19:00:00.000-05:00

2008-09-05T17:34:24.513-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-05T10:56:00.000-05:00

CONFIRM http://support.liferay.com/browse/LEP-4737 CERT-VN VU#888209 BID 27550 Cross-site scripting (XSS) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in HTML format.

cpe:/a:liferay:liferay_enterprise_portal cpe:/a:liferay:liferay_enterprise_portal:1.0 cpe:/a:liferay:liferay_enterprise_portal:2.0 cpe:/a:liferay:liferay_enterprise_portal:2.1.0 cpe:/a:liferay:liferay_enterprise_portal:2.1.1 cpe:/a:liferay:liferay_enterprise_portal:2.2.0 cpe:/a:liferay:liferay_enterprise_portal:3.6.1 cpe:/a:liferay:liferay_enterprise_portal:4.1 cpe:/a:liferay:liferay_enterprise_portal:4.1.1 cpe:/a:liferay:liferay_enterprise_portal:4.1.3 cpe:/a:liferay:liferay_enterprise_portal:4.3.1 cpe:/a:liferay:liferay_enterprise_portal:4.3.6

CVE-2008-0180

2008-02-04T19:00:00.000-05:00

2008-09-05T17:34:24.670-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-05T10:59:00.000-05:00

CONFIRM http://support.liferay.com/browse/LEP-4738 CERT-VN VU#732449 BID 27546 Cross-site scripting (XSS) vulnerability in themes/_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Greeting field in a User Profile.

cpe:/a:liferay:liferay_enterprise_portal:4.3.6

CVE-2008-0181

2008-02-04T19:00:00.000-05:00

2008-09-05T17:34:24.843-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-05T11:00:00.000-05:00

CONFIRM http://support.liferay.com/browse/LEP-4739 CERT-VN VU#217825 BID 27554 Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Shutdown message.

cpe:/a:liferay:liferay_enterprise_portal:4.3.6

CVE-2008-0182

2008-02-04T19:00:00.000-05:00

2008-09-05T17:34:24.983-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-05T11:10:00.000-05:00

CONFIRM http://support.liferay.com/browse/LEP-4739 CERT-VN VU#767825 Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated users via the Shutdown message.

cpe:/a:prenotazioni_on_line:syshotel_on_line_system

CVE-2008-0184

2008-01-09T17:46:00.000-05:00

2018-10-15T17:58:26.517-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3528 BUGTRAQ 20080108 sysHotel On Line Remote File Disclosure Vulnerability. BID 27184 Absolute path traversal vulnerability in index.php in Sys-Hotel on Line System allows remote attackers to read arbitrary files via an encoded "/" ("%2F") in the file parameter.

cpe:/a:netrisk:netrisk:1.9.7

CVE-2008-0185

2008-01-09T17:46:00.000-05:00

2018-10-15T17:58:26.767-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://sourceforge.net/project/shownotes.php?release_id=551208&group_id=129681 BUGTRAQ 20080106 netrisk 1.9.7 Multiple Remote Vulnerabilities (sql injection/xss) BID 27161 EXPLOIT-DB 4852 SQL injection vulnerability in index.php in NetRisk 1.9.7 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via the pid parameter in a profile page (possibly profile.php).

cpe:/a:phprisk:netrisk:1.9.7

CVE-2008-0186

2008-01-09T17:46:00.000-05:00

2018-10-15T17:58:27.233-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20080106 netrisk 1.9.7 Multiple Remote Vulnerabilities (sql injection/xss) BID 27161 EXPLOIT-DB 4852 Cross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to CVE-2008-0144.

cpe:/a:spacial_audio_solutions:samphpweb:4.2.2

CVE-2008-0187

2008-01-09T17:46:00.000-05:00

2017-09-28T21:30:10.223-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27147 XF sambroadcaster-songinfo-sql-injection(39463) EXPLOIT-DB 4836 SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote attackers to execute arbitrary SQL commands via the songid parameter.

CVE-2008-0188

2008-01-16T19:00:00.000-05:00

2008-09-10T21:04:44.540-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its requester. Further investigation showed that it was not a new security issue. Notes: none.

CVE-2008-0189

2008-01-16T19:00:00.000-05:00

2008-09-10T21:04:44.790-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its requester. Further investigation showed that it was not a new security issue. Notes: none.

cpe:/a:awesometemplateengine:awesometemplateengine:1

CVE-2008-0190

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:27.623-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument784.html MISC http://websecurity.com.ua/1694/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest BID 27125 XF awesometemplateengine-multiple-xss(39396) Multiple cross-site scripting (XSS) vulnerabilities in templates/example_template.php in AwesomeTemplateEngine allow remote attackers to inject arbitrary web script or HTML via the (1) data[title], (2) data[message], (3) data[table][1][item], (4) data[table][1][url], or (5) data[poweredby] parameter.

cpe:/a:wordpress:wordpress:2.2 cpe:/a:wordpress:wordpress:2.3

CVE-2008-0191

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:28.250-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument663.html MISC http://websecurity.com.ua/1634/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest XF wordpress-p-path-disclosure(39423) WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database structure.

cpe:/a:wordpress:wordpress:2.0.9

CVE-2008-0192

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:28.780-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument714.html MISC http://websecurity.com.ua/1658/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest BID 27123 XF wordpress-popuptitle-xss(39426) Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the popuptitle parameter to (1) wp-admin/post.php or (2) wp-admin/page-new.php.

cpe:/a:wordpress:wordpress:2.0.11 cpe:/a:wordpress:wordpress:2.1 cpe:/a:wordpress:wordpress:2.1.1 cpe:/a:wordpress:wordpress:2.1.2 cpe:/a:wordpress:wordpress:2.1.3 cpe:/a:wordpress:wordpress:2.1.3_rc1 cpe:/a:wordpress:wordpress:2.1.3_rc2 cpe:/a:wordpress:wordpress:2.2 cpe:/a:wordpress:wordpress:2.2.0 cpe:/a:wordpress:wordpress:2.2.1 cpe:/a:wordpress:wordpress:2.2.2 cpe:/a:wordpress:wordpress:2.2.3 cpe:/a:wordpress:wordpress:2.2_revision5002 cpe:/a:wordpress:wordpress:2.2_revision5003 cpe:/a:wordpress:wordpress:2.3

CVE-2008-0193

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:29.420-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument755.html MISC http://websecurity.com.ua/1676/ DEBIAN DSA-1502 BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest BID 27123 Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through 2.3.x, allows remote attackers to inject arbitrary web script or HTML via the backup parameter in a wp-db-backup.php action to wp-admin/edit.php.

cpe:/a:wordpress:wordpress:2.0.3

CVE-2008-0194

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:30.093-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument755.html MISC http://websecurity.com.ua/1676/ DEBIAN DSA-1502 BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read arbitrary files, delete arbitrary files, and cause a denial of service via a .. (dot dot) in the backup parameter in a wp-db-backup.php action to wp-admin/edit.php. NOTE: this might be the same as CVE-2006-5705.1.

cpe:/a:wordpress:wordpress:2.0.11

CVE-2008-0195

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:30.733-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument762.html MISC http://securityvulns.ru/Sdocument768.html MISC http://securityvulns.ru/Sdocument772.html MISC http://securityvulns.ru/Sdocument773.html MISC http://websecurity.com.ua/1679/ MISC http://websecurity.com.ua/1683/ MISC http://websecurity.com.ua/1686/ MISC http://websecurity.com.ua/1687/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest WordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty value of the page parameter to certain PHP scripts under wp-admin/, which reveals the path in various error messages.

cpe:/a:wordpress:wordpress:2.0.11

CVE-2008-0196

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:31.657-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument762.html MISC http://securityvulns.ru/Sdocument768.html MISC http://securityvulns.ru/Sdocument772.html MISC http://securityvulns.ru/Sdocument773.html MISC http://websecurity.com.ua/1679/ MISC http://websecurity.com.ua/1683/ MISC http://websecurity.com.ua/1686/ MISC http://websecurity.com.ua/1687/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest Multiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the page parameter to certain PHP scripts under wp-admin/ or (2) the import parameter to wp-admin/admin.php, as demonstrated by discovering the full path via a request for the \..\..\wp-config pathname; and allow remote attackers to modify arbitrary files via a .. (dot dot) in the file parameter to wp-admin/templates.php.

cpe:/a:wordpress:wp-contactform:1.5_alpha

CVE-2008-0197

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:32.563-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument546.html MISC http://securityvulns.ru/Sdocument667.html MISC http://websecurity.com.ua/1600/ MISC http://websecurity.com.ua/1641/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest Multiple cross-site scripting (XSS) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) wpcf_email, (2) wpcf_subject, (3) wpcf_question, (4) wpcf_answer, (5) wpcf_success_msg, (6) wpcf_error_msg, or (7) wpcf_msg parameter to wp-admin/admin.php, or (8) the SRC attribute of an IFRAME element.

cpe:/a:wordpress:wordpress

CVE-2008-0198

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:33.123-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument546.html MISC http://securityvulns.ru/Sdocument667.html MISC http://websecurity.com.ua/1600/ MISC http://websecurity.com.ua/1641/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest Multiple cross-site request forgery (CSRF) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the (1) wpcf_question, (2) wpcf_success_msg, or (3) wpcf_error_msg parameter to wp-admin/admin.php.

cpe:/a:pro_search:pro_search:0.16

CVE-2008-0199

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:33.687-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument731.html MISC http://sourceforge.net/project/shownotes.php?release_id=563784&group_id=149797 MISC http://websecurity.com.ua/1259/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest PRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain values of the show_page and time parameters to the default URI.

cpe:/a:medialand:rotabanner_local:3

CVE-2008-0200

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:34.157-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument625.html MISC http://websecurity.com.ua/1442/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest BID 27138 Multiple cross-site scripting (XSS) vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) drop parameter.

cpe:/a:expressionengine:expressionengine:1.2.1

CVE-2008-0201

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:34.640-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument472.html MISC http://websecurity.com.ua/1454/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest BID 27128 XF expressionengine-index-xss(39442) Cross-site scripting (XSS) vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameter.

cpe:/a:expressionengine:expressionengine:1.2.1

CVE-2008-0202

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:35.267-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument472.html MISC http://websecurity.com.ua/1454/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest BID 27128 CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter.

cpe:/a:wordpress:cryptographp:1.2

CVE-2008-0203

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:35.733-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://websecurity.com.ua/1596/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest Multiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp 1.2 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) cryptwidth, (2) cryptheight, (3) bgimg, (4) charR, (5) charG, (6) charB, (7) charclear, (8) tfont, (9) charel, (10) charelc, (11) charelv, (12) charnbmin, (13) charnbmax, (14) charspace, (15) charsizemin, (16) charsizemax, (17) charanglemax, (18) noisepxmin, (19) noisepxmax, (20) noiselinemin, (21) noiselinemax, (22) nbcirclemin, (23) nbcirclemax, or (24) brushsize parameter to wp-admin/options-general.php.

cpe:/a:wordpress:math_comment_spam_protection_plugin:2.1

CVE-2008-0204

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:36.063-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://websecurity.com.ua/1576/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest Multiple cross-site scripting (XSS) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) mcsp_opt_msg_no_answer or (2) mcsp_opt_msg_wrong_answer parameter to wp-admin/options-general.php.

cpe:/a:wordpress:math_comment_spam_protection_plugin:2.1

CVE-2008-0205

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:36.390-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://websecurity.com.ua/1576/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest Multiple cross-site request forgery (CSRF) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the (1) mcsp_opt_msg_no_answer or (2) mcsp_opt_msg_wrong_answer parameter to wp-admin/options-general.php.

cpe:/a:wordpress:captcha:2.5d

CVE-2008-0206

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:36.733-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://websecurity.com.ua/1588/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest Multiple cross-site scripting (XSS) vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) captcha_ttffolder, (2) captcha_numchars, (3) captcha_ttfrange, or (4) captcha_secret parameter.

cpe:/a:pro_search:pro_search:0.17

CVE-2008-0207

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:37.063-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080103 securityvulns.com russian vulnerabilities digest SREASON 3539 MISC http://securityvulns.ru/Sdocument731.html MISC http://sourceforge.net/project/shownotes.php?release_id=563784&group_id=149797 MISC http://websecurity.com.ua/1259/ BUGTRAQ 20080103 securityvulns.com russian vulnerabilities digest BID 27126 Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prot, (2) host, (3) path, (4) name, (5) ext, (6) size, (7) search_days, or (8) show_page parameter to the default URI.

CVE-2008-0208

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:37.687-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://hackerscenter.com/archive/view.asp?id=28145 MISC http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt BUGTRAQ 20080107 [HSC] Snitz Forums Multiple Vulnerabilities BID 27162 Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter.

CVE-2008-0209

2008-01-09T19:46:00.000-05:00

2018-10-15T17:58:38.157-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://hackerscenter.com/archive/view.asp?id=28145 MISC http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt BUGTRAQ 20080107 [HSC] Snitz Forums Multiple Vulnerabilities Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter.

cpe:/a:uebimiau:webmail:2.7.2 cpe:/a:uebimiau:webmail:2.7.10

CVE-2008-0210

2008-01-09T19:46:00.000-05:00

2017-09-28T21:30:10.283-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27154 EXPLOIT-DB 4846 Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sess[auth]=1 parameter settting. NOTE: this can be leveraged to conduct directory traversal attacks without authentication by using CVE-2008-0140.

cpe:/h:compaq:2210_series_bios:f.04 cpe:/h:compaq:2510_series_bios:f.08 cpe:/h:compaq:2710_series_bios:f.0d cpe:/h:compaq:6510_series_bios:f.0f cpe:/h:compaq:6515_series_bios:f.0a cpe:/h:compaq:6520_series_bios:f.08 cpe:/h:compaq:6710_series_bios:f.0f cpe:/h:compaq:6715_series_bios:f.0a cpe:/h:compaq:6720_series_bios:f.08 cpe:/h:compaq:6820_series_bios:f.08 cpe:/h:compaq:6910_series_bios:f.11 cpe:/h:compaq:8510_series_bios:f.0e cpe:/h:compaq:8710_series_bios:f.08

CVE-2008-0211

2008-03-31T19:44:00.000-04:00

2017-08-07T21:29:24.197-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080004 SECTRACK 1019729 BID 28494 VUPEN ADV-2008-1042 XF compaq-businessnotebook-pcbios-dos(41520) Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of service via unspecified vectors.

cpe:/a:hp:openview_network_node_manager:6.41 cpe:/a:hp:openview_network_node_manager:7.01 cpe:/a:hp:openview_network_node_manager:7.51

CVE-2008-0212

2008-02-06T16:00:00.000-05:00

2018-10-15T17:58:38.453-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20080204 Hewlett-Packard Network Node Manager Topology Manager Service DoS Vulnerability HP HPSBMA02307 BID 27629 SECTRACK 1019306 VUPEN ADV-2008-0424 ovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to cause a denial of service (crash) via a crafted TCP request that triggers an out-of-bounds memory access.

cpe:/a:hp:virtual_rooms:6

CVE-2008-0213

2008-02-07T17:00:00.000-05:00

2019-10-09T18:54:47.700-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

HP SSRT080007 SECTRACK 1019311 Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms (HPVR) 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors.

cpe:/a:hp:select_identity:4.00 cpe:/a:hp:select_identity:4.01 cpe:/a:hp:select_identity:4.10 cpe:/a:hp:select_identity:4.11 cpe:/a:hp:select_identity:4.12 cpe:/a:hp:select_identity:4.13 cpe:/a:hp:select_identity:4.20

CVE-2008-0214

2008-02-07T21:00:00.000-05:00

2011-03-07T22:04:09.063-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

HP HPSBMA02309 BID 27667 SECTRACK 1019322 VUPEN ADV-2008-0472 Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13, and 4.20 allow remote authenticated users to gain access via unknown vectors.

cpe:/a:hp:storage_essentials_srm_enterprise:5.1.3 cpe:/a:hp:storage_essentials_srm_standard:5.1.3

CVE-2008-0215

2008-02-11T21:00:00.000-05:00

2011-03-07T22:04:09.173-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT071474 BID 27643 SECTRACK 1019312 VUPEN ADV-2008-0440 Multiple unspecified vulnerabilities in HP Storage Essentials Storage Resource Management (SRM) before 6.0.0 allow remote attackers to obtain unspecified access to a managed device via unknown attack vectors.

cpe:/o:freebsd:freebsd:6.0 cpe:/o:freebsd:freebsd:6.0:release cpe:/o:freebsd:freebsd:6.0:stable cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:6.1:release cpe:/o:freebsd:freebsd:6.1:release_p10 cpe:/o:freebsd:freebsd:6.1:stable cpe:/o:freebsd:freebsd:6.2 cpe:/o:freebsd:freebsd:6.2:stable cpe:/o:freebsd:freebsd:6.3 cpe:/o:freebsd:freebsd:7.0 cpe:/o:freebsd:freebsd:7.0:current cpe:/o:freebsd:freebsd:7.0:pre-release

CVE-2008-0216

2008-01-15T21:00:00.000-05:00

2017-08-07T21:29:24.260-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FREEBSD FreeBSD-SA-08:01 BID 27284 SECTRACK 1019191 XF freebsd-ptsname-information-disclosure(39667) The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user.

cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.5 cpe:/o:freebsd:freebsd:6.0 cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:6.2 cpe:/o:freebsd:freebsd:7.0 cpe:/o:freebsd:freebsd:7.0:pre-release

CVE-2008-0217

2008-01-15T21:00:00.000-05:00

2017-08-07T21:29:24.320-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov FREEBSD FreeBSD-SA-08:01 BID 27284 SECTRACK 1019191 XF freebsd-openpty-information-disclosure(39665) The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.

cpe:/a:merak:icewarp_mail_server

CVE-2008-0218

2008-01-10T18:46:00.000-05:00

2017-08-07T21:29:24.367-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27189 MISC http://www.securityfocus.com/data/vulnerabilities/exploits/27189.html VUPEN ADV-2008-0135 XF icewarpmailserver-index-xss(39564) Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:php_webquest:php_webquest:2.6

CVE-2008-0219

2008-01-10T18:46:00.000-05:00

2017-09-28T21:30:10.347-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27192 XF webquest-soportehorizontalw-sql-injection(39560) EXPLOIT-DB 4867 SQL injection vulnerability in soporte_horizontal_w.php in PHP Webquest 2.6 allows remote attackers to execute arbitrary SQL commands via the id_actividad parameter, a different vector than CVE-2007-4920.

cpe:/a:gateway:cweblaunchctl_activex_control:1.0.0.1 cpe:/a:gateway:weblaunch

CVE-2008-0220

2008-01-10T18:46:00.000-05:00

2017-09-28T21:30:10.410-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20080109 Gateway WebLaunch ActiveX Control Insecure Method CERT-VN VU#735441 BID 27193 VUPEN ADV-2008-0077 EXPLOIT-DB 4869 EXPLOIT-DB 4982 Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the (1) second or (2) fourth argument to the DoWebLaunch method. NOTE: some of these details are obtained from third party information.

cpe:/a:gateway:weblaunch:1.0.0.1

CVE-2008-0221

2008-01-10T18:46:00.000-05:00

2017-09-28T21:30:10.473-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20080109 Gateway WebLaunch ActiveX Control Insecure Method VUPEN ADV-2008-0077 EXPLOIT-DB 4869 Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ (dot dot backslash) in the second argument to the DoWebLaunch method. NOTE: some of these details are obtained from third party information.

cpe:/a:wordpress:filemanager:1.2

CVE-2008-0222

2008-01-10T18:46:00.000-05:00

2017-09-28T21:30:10.520-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27151 XF wordpress-wpfilemanager-file-upload(39462) EXPLOIT-DB 4844 Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors.

cpe:/a:justsystem:ichitaro:11.0 cpe:/a:justsystem:ichitaro:12.0 cpe:/a:justsystem:ichitaro:13.0 cpe:/a:justsystem:ichitaro:2004 cpe:/a:justsystem:ichitaro:2005 cpe:/a:justsystem:ichitaro:2006 cpe:/a:justsystem:ichitaro:2007 cpe:/a:justsystem:ichitaro:linux cpe:/a:justsystem:ichitaro_lite2 cpe:/a:justsystem:ichitaro_viewer

CVE-2008-0223

2008-01-10T18:46:00.000-05:00

2017-08-07T21:29:24.523-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

JVN JVN#08237857 MISC http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20080107 CONFIRM http://www.justsystems.com/jp/info/pd8001.html BID 27153 SECTRACK 1019168 VUPEN ADV-2008-0045 XF justsystems-jsfc-bo(39501) Buffer overflow in JustSystems JSFC.DLL, as used in multiple JustSystems products such as Ichitaro, allows remote attackers to execute arbitrary code via a crafted .JTD file.

cpe:/a:runcms:runcms:1.5.3 cpe:/a:runcms:runcms:1.6 cpe:/a:runcms:runcms:1.6.1

CVE-2008-0224

2008-01-10T18:46:00.000-05:00

2017-10-18T21:30:12.207-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27152 XF runcms-newbb-client-sql-injection(39478) EXPLOIT-DB 4845 SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter.

cpe:/a:xine:xine-lib:1.1.9

CVE-2008-0225

2008-01-10T18:46:00.000-05:00

2011-10-17T00:00:00.000-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-01-11T10:11:00.000-05:00

MISC http://aluigi.altervista.org/adv/xinermffhof-adv.txt CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=205197 GENTOO GLSA-200801-12 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=567872 DEBIAN DSA-1472 MANDRIVA MDVSA-2008:020 MANDRIVA MDVSA-2008:045 SUSE SUSE-SR:2008:002 BID 27198 UBUNTU USN-635-1 VUPEN ADV-2008-0163 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=428620 FEDORA FEDORA-2008-0718 Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmff_dump_header function and related to disregarding the max field. NOTE: some of these details are obtained from third party information.

cpe:/a:mysql:mysql:5.0.0 cpe:/a:mysql:mysql:5.0.1 cpe:/a:mysql:mysql:5.0.2 cpe:/a:mysql:mysql:5.0.3 cpe:/a:mysql:mysql:5.0.4 cpe:/a:mysql:mysql:5.0.5 cpe:/a:mysql:mysql:5.0.6 cpe:/a:mysql:mysql:5.0.7 cpe:/a:mysql:mysql:5.0.8 cpe:/a:mysql:mysql:5.0.9 cpe:/a:mysql:mysql:5.0.10 cpe:/a:mysql:mysql:5.0.11 cpe:/a:mysql:mysql:5.0.12 cpe:/a:mysql:mysql:5.0.13 cpe:/a:mysql:mysql:5.0.14 cpe:/a:mysql:mysql:5.0.15 cpe:/a:mysql:mysql:5.0.16 cpe:/a:mysql:mysql:5.0.17 cpe:/a:mysql:mysql:5.0.18 cpe:/a:mysql:mysql:5.0.19 cpe:/a:mysql:mysql:5.0.20 cpe:/a:mysql:mysql:5.0.20a cpe:/a:mysql:mysql:5.0.21 cpe:/a:mysql:mysql:5.0.22 cpe:/a:mysql:mysql:5.0.23 cpe:/a:mysql:mysql:5.0.24 cpe:/a:mysql:mysql:5.0.24a cpe:/a:mysql:mysql:5.0.25 cpe:/a:mysql:mysql:5.0.26 cpe:/a:mysql:mysql:5.0.27 cpe:/a:mysql:mysql:5.0.28 cpe:/a:mysql:mysql:5.0.30 cpe:/a:mysql:mysql:5.0.30:sp1 cpe:/a:mysql:mysql:5.0.32 cpe:/a:mysql:mysql:5.0.33 cpe:/a:mysql:mysql:5.0.34 cpe:/a:mysql:mysql:5.0.36 cpe:/a:mysql:mysql:5.0.36:sp1 cpe:/a:mysql:mysql:5.0.37 cpe:/a:mysql:mysql:5.0.38 cpe:/a:mysql:mysql:5.0.40 cpe:/a:mysql:mysql:5.0.41 cpe:/a:mysql:mysql:5.0.42 cpe:/a:mysql:mysql:5.0.44 cpe:/a:mysql:mysql:5.0.44:sp1 cpe:/a:mysql:mysql:5.0.45 cpe:/a:mysql:mysql:5.0.46 cpe:/a:mysql:mysql:5.0.48 cpe:/a:mysql:mysql:5.0.50 cpe:/a:mysql:mysql:5.0.50:sp1 cpe:/a:mysql:mysql:5.0.51 cpe:/a:mysql:mysql:5.0.51a cpe:/a:mysql:mysql:5.0.51b cpe:/a:mysql:mysql:5.0.52 cpe:/a:mysql:mysql:5.0.54 cpe:/a:mysql:mysql:5.0.54a cpe:/a:mysql:mysql:5.0.56 cpe:/a:mysql:mysql:5.0.56:sp1 cpe:/a:mysql:mysql:5.0.58 cpe:/a:mysql:mysql:5.0.60 cpe:/a:mysql:mysql:5.0.60:sp1 cpe:/a:mysql:mysql:5.0.62 cpe:/a:mysql:mysql:5.0.64 cpe:/a:mysql:mysql:5.0.66 cpe:/a:mysql:mysql:5.0.66:sp1 cpe:/a:mysql:mysql:5.0.66a cpe:/a:mysql:mysql:5.1 cpe:/a:mysql:mysql:5.1.1 cpe:/a:mysql:mysql:5.1.2 cpe:/a:mysql:mysql:5.1.3 cpe:/a:mysql:mysql:5.1.4 cpe:/a:mysql:mysql:5.1.5 cpe:/a:mysql:mysql:5.1.6 cpe:/a:mysql:mysql:5.1.7 cpe:/a:mysql:mysql:5.1.8 cpe:/a:mysql:mysql:5.1.9 cpe:/a:mysql:mysql:5.1.10 cpe:/a:mysql:mysql:5.1.11 cpe:/a:mysql:mysql:5.1.12 cpe:/a:mysql:mysql:5.1.13 cpe:/a:mysql:mysql:5.1.14 cpe:/a:mysql:mysql:5.1.15 cpe:/a:mysql:mysql:5.1.16 cpe:/a:mysql:mysql:5.1.17 cpe:/a:mysql:mysql:5.1.18 cpe:/a:mysql:mysql:5.1.19 cpe:/a:mysql:mysql:5.1.20 cpe:/a:mysql:mysql:5.1.21 cpe:/a:mysql:mysql:5.1.22 cpe:/a:yassl:yassl:1.7.5 cpe:/o:apple:mac_os_x:10.5.4 cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~ cpe:/o:canonical:ubuntu_linux:6.10 cpe:/o:canonical:ubuntu_linux:7.04 cpe:/o:canonical:ubuntu_linux:7.10 cpe:/o:debian:debian_linux:5.0

CVE-2008-0226

2008-01-10T18:46:00.000-05:00

2018-10-19T15:02:44.630-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2018-10-18T14:19:38.873-04:00

CONFIRM http://bugs.mysql.com/33814 CONFIRM http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html APPLE APPLE-SA-2008-10-09 SREASON 3531 CONFIRM http://support.apple.com/kb/HT3216 DEBIAN DSA-1478 MANDRIVA MDVSA-2008:150 BUGTRAQ 20080104 Multiple vulnerabilities in yaSSL 1.7.5 BUGTRAQ 20080104 Pre-auth buffer-overflow in mySQL through yaSSL BID 27140 BID 31681 UBUNTU USN-588-1 VUPEN ADV-2008-0560 VUPEN ADV-2008-2780 XF yassl-processoldclienthello-bo(39429) XF yassl-inputbufferoperator-bo(39431) Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.

cpe:/a:yassl:yassl:1.7.5

CVE-2008-0227

2008-01-10T18:46:00.000-05:00

2018-10-15T17:58:42.267-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://bugs.mysql.com/33814 CONFIRM http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html APPLE APPLE-SA-2008-10-09 SREASON 3531 CONFIRM http://support.apple.com/kb/HT3216 DEBIAN DSA-1478 MANDRIVA MDVSA-2008:150 BUGTRAQ 20080104 Multiple vulnerabilities in yaSSL 1.7.5 BID 27140 BID 31681 UBUNTU USN-588-1 VUPEN ADV-2008-0560 VUPEN ADV-2008-2780 XF yassl-hashwithtransformupdate-dos(39433) yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote attackers to cause a denial of service (crash) via a Hello packet containing a large size value, which triggers a buffer over-read in the HASHwithTransform::Update function in hash.cpp.

cpe:/h:linksys:wrt54gl:4.30.9

CVE-2008-0228

2008-01-10T18:46:00.000-05:00

2018-10-15T17:58:43.953-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SREASON 3534 BUGTRAQ 20080107 Linksys WRT54 GL - Session riding (CSRF) BUGTRAQ 20080115 Re: Linksys WRT54 GL - Session riding (CSRF) XF linksys-apply-csrf(39502) Cross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with firmware 4.30.9 allows remote attackers to perform actions as administrators.

cpe:/a:level_one:wbr-3460a:1.0.11 cpe:/a:level_one:wbr-3460a:1.0.12

CVE-2008-0229

2008-01-10T18:46:00.000-05:00

2018-10-15T17:58:44.483-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SREASON 3533 BUGTRAQ 20080108 Level-One WBR-3460A Grants Root Access BID 27183 SECTRACK 1019162 The telnet service in LevelOne WBR-3460 4-Port ADSL 2/2+ Wireless Modem Router with firmware 1.00.11 and 1.00.12 does not require authentication, which allows remote attackers on the local or wireless network to obtain administrative access.

cpe:/a:osdate:osdate:2.0.8

CVE-2008-0230

2008-01-10T19:46:00.000-05:00

2017-09-28T21:30:10.580-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/0801-exploits/osdata-lfi.txt BID 27208 XF osdate-php121db-file-include(39567) EXPLOIT-DB 4870 PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via a URL in the php121dir parameter.

cpe:/a:tuned_studios:classic_theme cpe:/a:tuned_studios:endless cpe:/a:tuned_studios:freeze_theme cpe:/a:tuned_studios:lonely_maple cpe:/a:tuned_studios:music_theme cpe:/a:tuned_studios:orange_cutout cpe:/a:tuned_studios:subwoofer

CVE-2008-0231

2008-01-10T19:46:00.000-05:00

2018-10-15T17:58:44.890-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3532 BUGTRAQ 20080109 LFI in Tuned Studios Templates BID 27196 XF tunedstudiostemplates-index-file-include(39555) EXPLOIT-DB 4876 Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Maple, (5) Endless, (6) Classic Theme, and (7) Music Theme webpage templates allow remote attackers to include and execute arbitrary files via ".." sequences in the page parameter. NOTE: this can be leveraged for remote file inclusion when running in some PHP 5 environments.

cpe:/a:zero_cms:zero_cms:1.0_alpha

CVE-2008-0232

2008-01-10T19:46:00.000-05:00

2017-09-28T21:30:10.707-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/0801-exploits/zerocms-sql.txt BID 27186 XF zerocms-index-sql-injection(39530) EXPLOIT-DB 4864 Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to index.php, or the (2) f or t parameters to forums/index.php.

cpe:/a:zero_cms:zero_cms:1.0_alpha

CVE-2008-0233

2008-01-10T21:46:00.000-05:00

2017-09-28T21:30:10.770-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/0801-exploits/zerocms-sql.txt EXPLOIT-DB 4864 Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg.

cpe:/a:apple:quicktime:7.3.1.70 cpe:/a:apple:quicktime:7.4

CVE-2008-0234

2008-01-10T21:46:00.000-05:00

2018-10-15T17:58:45.563-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2008-07-10 APPLE APPLE-SA-2008-02-06 SREASON 3537 CERT-VN VU#112179 BUGTRAQ 20080110 Buffer-overflow in Quicktime Player 7.3.1.70 BUGTRAQ 20080110 Re: Buffer-overflow in Quicktime Player 7.3.1.70 BUGTRAQ 20080111 Re: Re: Buffer-overflow in Quicktime Player 7.3.1.70 BUGTRAQ 20080111 Re: Buffer-overflow in Quicktime Player 7.3.1.70 BUGTRAQ 20080114 Re: [Full-disclosure] Buffer-overflow in Quicktime Player 7.3.1.70 BUGTRAQ 20080112 Re: Re: Buffer-overflow in Quicktime Player 7.3.1.70 BUGTRAQ 20080112 Re: Buffer-overflow in Quicktime Player 7.3.1.70 BID 27225 SECTRACK 1019178 VUPEN ADV-2008-0107 VUPEN ADV-2008-2064 XF quicktime-rtsp-responses-bo(39601) EXPLOIT-DB 4885 EXPLOIT-DB 4906 Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message.

cpe:/a:microsoft:vfp_ole_server_activex_control

CVE-2008-0235

2008-01-10T21:46:00.000-05:00

2017-09-28T21:30:10.893-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://shinnai.altervista.org/exploits/txt/TXT_rNowA1916DKFNUF48NyS.html BID 27199 XF microsoft-vfpoleserver-command-execution(39559) EXPLOIT-DB 4875 The Microsoft VFP_OLE_Server ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method.

cpe:/a:microsoft:visual_foxpro:6.0

CVE-2008-0236

2008-01-10T21:46:00.000-05:00

2017-09-28T21:30:10.940-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://shinnai.altervista.org/exploits/txt/TXT_DiWu9j82RCq4zpaQAoxn.html BID 27205 XF microsoft-foxserver-command-execution(39558) EXPLOIT-DB 4873 An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary commands by invoking the DoCmd method.

cpe:/a:microsoft:rich_textbox_control:6.0

CVE-2008-0237

2008-01-10T21:46:00.000-05:00

2017-09-28T21:30:11.003-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://shinnai.altervista.org/exploits/txt/TXT_DZVN8CwCha0I2fI3NeEs.html BID 27201 XF microsoft-richtextbox-file-overwrite(39557) EXPLOIT-DB 4874 The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method.

cpe:/a:xine:xine-lib:1.1.9

CVE-2008-0238

2008-01-11T16:46:00.000-05:00

2008-09-10T21:04:51.210-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=205197 GENTOO GLSA-200801-12 MANDRIVA MDVSA-2008:020 MANDRIVA MDVSA-2008:045 UBUNTU USN-635-1 Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1) Title, (2) Author, or (3) Copyright attribute, related to the rmff_dump_header function, different vectors than CVE-2008-0225. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:sun:java_system_identity_manager:6.0:sp1 cpe:/a:sun:java_system_identity_manager:6.0:sp2 cpe:/a:sun:java_system_identity_manager:6.0:sp3 cpe:/a:sun:java_system_identity_manager:7.0 cpe:/a:sun:java_system_identity_manager:7.1

CVE-2008-0239

2008-01-11T17:46:00.000-05:00

2018-10-15T17:58:48.377-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3535 SUNALERT 103180 SUNALERT 200558 MISC http://www.procheckup.com/Vulnerability_PR07-06.php MISC http://www.procheckup.com/Vulnerability_PR07-07.php MISC http://www.procheckup.com/Vulnerability_PR07-08.php MISC http://www.procheckup.com/Vulnerability_PR07-09.php BUGTRAQ 20080110 PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager BID 27214 SECTRACK 1019175 VUPEN ADV-2008-0089 XF sun-identity-login-xss(39580) XF sun-identity-lang-xss(39581) XF sun-identity-resultsform-xss(39582) XF sun-identity-main-xss(39583) Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the (1) cntry or lang parameters to /idm/login.jsp, (2) resultsForm parameter to /idm/account/findForSelect.jsp, or (3) activeControl parameter to /idm/user/main.jsp.

CVE-2008-0240

2008-01-11T17:46:00.000-05:00

2018-10-15T17:58:50.093-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3535 SUNALERT 103180 SUNALERT 200558 MISC http://www.procheckup.com/Vulnerability_PR07-10.php BUGTRAQ 20080110 PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager BID 27214 VUPEN ADV-2008-0089 XF sun-identity-index-frame-injection(39586) /idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."

CVE-2008-0241

2008-01-11T17:46:00.000-05:00

2018-10-15T17:58:50.890-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SREASON 3535 SUNALERT 103180 SUNALERT 200558 MISC http://www.procheckup.com/Vulnerability_PR07-12.php BUGTRAQ 20080110 PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager BID 27214 VUPEN ADV-2008-0089 XF sun-identity-login-security-bypass(39590) Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the nextPage parameter.

cpe:/o:sun:solaris:10.0::sparc cpe:/o:sun:solaris:10.0::x86

CVE-2008-0242

2008-01-11T21:46:00.000-05:00

2017-09-28T21:30:11.050-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SUNALERT 103165 SUNALERT 200641 BID 27253 SECTRACK 1019187 VUPEN ADV-2008-0131 XF solaris-libdevinfo-privilege-escalation(39629) Unspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and gain privileges via unknown vectors, related to login device permissions.

cpe:/a:ibm:lotus_domino:7.0 cpe:/a:ibm:lotus_domino:7.0.1 cpe:/a:ibm:lotus_domino:7.0.2 cpe:/a:ibm:lotus_domino:7.0.2::fp1 cpe:/a:ibm:lotus_domino:7.0.2::fp2

CVE-2008-0243

2008-01-11T21:46:00.000-05:00

2017-08-07T21:29:25.523-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BID 27215 VUPEN ADV-2008-0086 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg27011539 XF lotus-domino-unspecified-dos(39588) Unspecified vulnerability in Lotus Domino 7.0.2 before Fix Pack 3 allows attackers to cause a denial of service via unknown vectors.

cpe:/a:sap:maxdb:7.6.3_build_007

CVE-2008-0244

2008-01-11T21:46:00.000-05:00

2018-10-15T17:58:51.733-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/sapone-adv.txt SREASON 3536 BUGTRAQ 20080109 Pre-auth remote commands execution in SAP MaxDB 7.6.03.07 BID 27206 SECTRACK 1019171 VUPEN ADV-2008-0104 XF maxdb-system-command-execution(39573) EXPLOIT-DB 4877 SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in exec_sdbinfo and other unspecified commands, which are executed when MaxDB invokes cons.exe.

cpe:/a:uploadscript:uploadimage:1.0 cpe:/a:uploadscript:uploadscript:1.0

CVE-2008-0245

2008-01-11T21:46:00.000-05:00

2017-09-28T21:30:11.160-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27203 XF uploadimage-admin-command-execution(39571) EXPLOIT-DB 4871 admin.php in UploadImage 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass (Set Password) action.

cpe:/a:uploadscript:uploadimage:1.0 cpe:/a:uploadscript:uploadscript:1.0

CVE-2008-0246

2008-01-11T21:46:00.000-05:00

2017-09-28T21:30:11.223-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27203 XF uploadscript-admin-command-execution(39570) EXPLOIT-DB 4871 admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass (Set Password) action.

cpe:/a:ibm:tivoli_storage_manager_express:5.3

CVE-2008-0247

2008-01-11T21:46:00.000-05:00

2018-10-15T17:58:52.610-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20080114 ZDI-08-001: IBM Tivoli Storage Manager Express Backup Server Heap Overflow Vulnerability BID 27235 SECTRACK 1019182 VUPEN ADV-2008-0106 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-001.html CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg21291536 XF ibm-tsmexpressserver-bo(39604) Heap-based buffer overflow in the Express Backup Server service (dsmsvc.exe) in IBM Tivoli Storage Manager (TSM) Express 5.3 before 5.3.7.3 allows remote attackers to execute arbitrary code via a packet with a large length value.

cpe:/a:streamaudio:chaincast_proxymanager_activex_control

CVE-2008-0248

2008-01-11T21:46:00.000-05:00

2017-09-28T21:30:11.283-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov FULLDISC 20080111 StreamAudio ChainCast ProxyManager ccpm_0237.dll Buffer Overflow BID 27247 VUPEN ADV-2008-0133 XF streamaudio-chaincastproxymanager-bo(39622) EXPLOIT-DB 4894 Buffer overflow in an ActiveX control in ccpm_0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method.

cpe:/a:phpwebquest:phpwebquest:2.6

CVE-2008-0249

2008-01-11T21:46:00.000-05:00

2017-10-10T21:32:50.473-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27202 XF phpwebquest-backup-information-disclosure(39572) EXPLOIT-DB 4872 PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backup_phpwebquest.php, which leaks the credentials in an error message if a call to /usr/bin/mysqldump fails. NOTE: this might only be an issue in limited environments.

cpe:/a:microsoft:visual_interdev:6.0:sp6

CVE-2008-0250

2008-01-11T21:46:00.000-05:00

2017-09-28T21:30:11.347-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MISC http://shinnai.altervista.org/exploits/txt/TXT_PoEOrFM8py30PXrDF7IY.html BID 27250 XF visualinterdev-sln-project-bo(41826) EXPLOIT-DB 4892 Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long Project line.

cpe:/a:photopost:photopost_vbgallery:2.4.1

CVE-2008-0251

2008-01-11T21:46:00.000-05:00

2017-08-07T21:29:25.947-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.photopost.com/forum/showthread.php?t=134909 CONFIRM http://www.photopost.com/forum/showthread.php?t=134910 XF vbgallery-unspecified-code-execution(39621) Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execute arbitrary files via unknown vectors.

cpe:/a:cherrypy:cherrypy:2.1.0 cpe:/a:cherrypy:cherrypy:3.0.2

CVE-2008-0252

2008-01-11T21:46:00.000-05:00

2018-10-15T17:58:53.360-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov GENTOO GLSA-200801-11 CONFIRM http://www.cherrypy.org/changeset/1774 CONFIRM http://www.cherrypy.org/changeset/1775 CONFIRM http://www.cherrypy.org/changeset/1776 CONFIRM http://www.cherrypy.org/ticket/744 DEBIAN DSA-1481 BUGTRAQ 20080124 rPSA-2008-0030-1 CherryPy BID 27181 VUPEN ADV-2008-0039 CONFIRM https://bugs.gentoo.org/show_bug.cgi?id=204829 CONFIRM https://issues.rpath.com/browse/RPL-2127 FEDORA FEDORA-2008-0299 FEDORA FEDORA-2008-0333 Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in CherryPy 2.x allows remote attackers to create or delete arbitrary files, and possibly read and write portions of arbitrary files, via a crafted session id in a cookie.

cpe:/a:binn:sbuilder

CVE-2008-0253

2008-01-15T15:00:00.000-05:00

2018-10-15T17:58:55.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20080114 Binn SBuilder (nid) Remote Blind Sql Injection Vulnerabily BID 27264 XF binnsbuilder-fulltext-sql-injection(39634) EXPLOIT-DB 4904 SQL injection vulnerability in full_text.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands via the nid parameter.

cpe:/a:wavelink_media:tutorialcms:1.02

CVE-2008-0254

2008-01-15T15:00:00.000-05:00

2017-09-28T21:30:11.473-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 27263 XF tutorialcms-activate-sql-injection(39642) EXPLOIT-DB 4901 SQL injection vulnerability in activate.php in TutorialCMS (aka Photoshop Tutorials) 1.02, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the userName parameter.

cpe:/a:igamingcms:igaming_cms:1.3.1 cpe:/a:igamingcms:igaming_cms:1.5

CVE-2008-0255

2008-01-15T15:00:00.000-05:00

2017-09-28T21:30:11.533-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27230 XF igamingcms-archive-sql-injection(39598) EXPLOIT-DB 4886 SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter.

cpe:/a:matteo_binda:asp_photo_gallery:1.0

CVE-2008-0256

2008-01-15T15:00:00.000-05:00

2017-09-28T21:30:11.597-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27262 XF aspphotogallery-multiple-sql-injection(39646) EXPLOIT-DB 4900 Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) Imgbig.asp, (b) thumb.asp, and (c) thumbricerca.asp and the (2) ricerca parameter to (d) thumbricerca.asp.

cpe:/a:dansie:search_engine:2.7

CVE-2008-0257

2008-01-15T15:00:00.000-05:00

2017-08-07T21:29:26.197-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27269 XF dansiesearchengine-search-xss(39636) Cross-site scripting (XSS) vulnerability in search.pl in Dansie Search Engine 2.7 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:php_running_management:phprunman:1.0.2

CVE-2008-0258

2008-01-15T15:00:00.000-05:00

2017-08-07T21:29:26.243-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://sourceforge.net/project/shownotes.php?release_id=568237&group_id=103505 CONFIRM http://sourceforge.net/tracker/index.php?func=detail&aid=1204199&group_id=103505&atid=634992 BID 27268 XF phprunningmanagement-index-xss(39639) Cross-site scripting (XSS) vulnerability in index.php in PHP Running Management (phpRunMan) before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

cpe:/a:minimal_design:minimal_gallery:0.8

CVE-2008-0259

2008-01-15T15:00:00.000-05:00

2017-09-28T21:30:11.660-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27265 XF minimalgallery-mgthumbs-file-include(39649) EXPLOIT-DB 4902 Multiple directory traversal vulnerabilities in _mg/php/mg_thumbs.php in minimal Gallery 0.8 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) thumbcat and (2) thumb parameters.

cpe:/a:minimal_design:minimal_gallery:0.8

CVE-2008-0260

2008-01-15T15:00:00.000-05:00

2017-09-28T21:30:11.723-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov EXPLOIT-DB 4902 minimal Gallery 0.8 allows remote attackers to obtain configuration information via a direct request to php_info.php, which calls the phpinfo function.

cpe:/a:mambo:mambo_open_source

CVE-2008-0261

2008-01-15T15:00:00.000-05:00

2017-08-07T21:29:26.353-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://forum.mambo-foundation.org/showthread.php?t=9651 BID 27239 XF mambo-search-dos(39613) Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause a denial of service (query flood) via unspecified vectors.

cpe:/a:agares_media:phpautovideo:2.21

CVE-2008-0262

2008-01-15T15:00:00.000-05:00

2017-09-28T21:30:11.783-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27258 XF agares-articleblock-sql-injection(39641) EXPLOIT-DB 4898 EXPLOIT-DB 4905 SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter.

cpe:/a:ingate:firewall:4.6 cpe:/a:ingate:ingate_siparator:4.6

CVE-2008-0263

2008-01-15T15:00:00.000-05:00

2011-03-07T22:04:14.187-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.ingate.com/relnote-461.php BID 27222 SECTRACK 1019176 SECTRACK 1019177 VUPEN ADV-2008-0108 The SIP module in Ingate Firewall before 4.6.1 and SIParator before 4.6.1 does not reuse SIP media ports in unspecified call hold and send-only stream scenarios, which allows remote attackers to cause a denial of service (port exhaustion) via unspecified vectors.

cpe:/a:drupal:meta_tags_module:5.x-1.6

CVE-2008-0264

2008-01-15T15:00:00.000-05:00

2017-08-07T21:29:26.447-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://drupal.org/node/209759 VUPEN ADV-2008-0129 XF drupal-metatags-code-execution(39638) Unspecified vulnerability in the Meta Tags (aka Nodewords) 5.x-1.6 module for Drupal, when images are permitted in node bodies, allows remote authenticated users to execute arbitrary code via unspecified vectors involving creation of a node.

cpe:/o:f5:tmos:9.4.3

CVE-2008-0265

2008-01-15T15:00:00.000-05:00

2018-10-30T12:25:15.200-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3545 BUGTRAQ 20080114 F5 BIG-IP Web Management List Search XSS BID 27272 SECTRACK 1019190 VUPEN ADV-2008-0181 XF f5bigip-searchstring-xss(39632) Multiple cross-site scripting (XSS) vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to (1) list_system.jsp, (2) list_pktfilter.jsp, (3) list_ltm.jsp, (4) resources_audit.jsp, and (5) list_asm.jsp in tmui/Control/jspmap/tmui/system/log/; and (6) list.jsp in certain directories.

cpe:/a:eticket:eticket:1.5.5.2

CVE-2008-0266

2008-01-15T15:00:00.000-05:00

2018-10-15T17:58:56.077-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3542 BUGTRAQ 20080106 eTicket 1.5.5.2 Multiple Vulnerabilities BID 27173 XF eticket-admin-csrf(39490) Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly perform other administrative tasks. NOTE: either the old password must be known, or the attacker must leverage a separate SQL injection vulnerability.

cpe:/a:eticket:eticket:1.5.5.2

CVE-2008-0267

2008-01-15T15:00:00.000-05:00

2018-10-15T17:58:56.547-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SREASON 3542 BUGTRAQ 20080106 eTicket 1.5.5.2 Multiple Vulnerabilities BID 27173 XF eticket-admin-sql-injection(39487) XF eticket-search-sql-injection(39489) Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) status, (2) sort, and (3) way parameters to search.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (4) msg and (5) password parameters to admin.php.

cpe:/a:eticket:eticket:1.5.5.2

CVE-2008-0268

2008-01-15T15:00:00.000-05:00

2018-10-15T17:58:57.203-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3542 BUGTRAQ 20080106 eTicket 1.5.5.2 Multiple Vulnerabilities BID 27173 XF eticket-view-xss(39488) Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter.

cpe:/o:sun:sunos:5.10

CVE-2008-0269

2008-01-15T15:00:00.000-05:00

2018-10-30T12:25:14.200-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov SUNALERT 103188 SUNALERT 201513 BID 27260 SECTRACK 1019186 VUPEN ADV-2008-0130 XF solaris-dotoprocs-dos(39631) Unspecified vulnerability in the dotoprocs function in Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors.

cpe:/a:taskfreak:taskfreak:0.6.1

CVE-2008-0270

2008-01-15T15:00:00.000-05:00

2017-09-28T21:30:11.940-04:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov BID 27257 XF taskfreak-index-sql-injection(39645) EXPLOIT-DB 4899 SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the sContext parameter.

cpe:/a:drupal:bueditor:4.7.x-1.0 cpe:/a:drupal:bueditor:5.x-1.0

CVE-2008-0271

2008-01-15T15:00:00.000-05:00

2017-08-07T21:29:26.837-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/208534 VUPEN ADV-2008-0128 XF drupal-bueditor-csrf(39614) The editor deletion form in BUEditor 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.1, a module for Drupal, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete custom editor interfaces.

cpe:/a:drupal:drupal:4.0.0 cpe:/a:drupal:drupal:4.1.0 cpe:/a:drupal:drupal:4.2.0_rc cpe:/a:drupal:drupal:4.4 cpe:/a:drupal:drupal:4.4.1 cpe:/a:drupal:drupal:4.4.2 cpe:/a:drupal:drupal:4.4.3 cpe:/a:drupal:drupal:4.5 cpe:/a:drupal:drupal:4.5.1 cpe:/a:drupal:drupal:4.5.2 cpe:/a:drupal:drupal:4.5.3 cpe:/a:drupal:drupal:4.5.4 cpe:/a:drupal:drupal:4.5.5 cpe:/a:drupal:drupal:4.5.6 cpe:/a:drupal:drupal:4.5.7 cpe:/a:drupal:drupal:4.5.8 cpe:/a:drupal:drupal:4.6 cpe:/a:drupal:drupal:4.6.1 cpe:/a:drupal:drupal:4.6.2 cpe:/a:drupal:drupal:4.6.3 cpe:/a:drupal:drupal:4.6.4 cpe:/a:drupal:drupal:4.6.5 cpe:/a:drupal:drupal:4.6.6 cpe:/a:drupal:drupal:4.6.7 cpe:/a:drupal:drupal:4.6.8 cpe:/a:drupal:drupal:4.6.9 cpe:/a:drupal:drupal:4.6.10 cpe:/a:drupal:drupal:4.6.11 cpe:/a:drupal:drupal:4.7 cpe:/a:drupal:drupal:4.7.1 cpe:/a:drupal:drupal:4.7.2 cpe:/a:drupal:drupal:4.7.3 cpe:/a:drupal:drupal:4.7.4 cpe:/a:drupal:drupal:4.7.5 cpe:/a:drupal:drupal:4.7.6 cpe:/a:drupal:drupal:4.7.7 cpe:/a:drupal:drupal:4.7.8 cpe:/a:drupal:drupal:4.7.9 cpe:/a:drupal:drupal:4.7.10 cpe:/a:drupal:drupal:4.7_rev_1.2 cpe:/a:drupal:drupal:4.7_rev_1.15 cpe:/a:drupal:drupal:5.0 cpe:/a:drupal:drupal:5.1 cpe:/a:drupal:drupal:5.1_rev1.1 cpe:/a:drupal:drupal:5.2 cpe:/a:drupal:drupal:5.3 cpe:/a:drupal:drupal:5.4 cpe:/a:drupal:drupal:5.5.

CVE-2008-0272

2008-01-15T15:00:00.000-05:00

2017-08-07T21:29:26.900-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/208562 BID 27238 CONFIRM http://www.vbdrupal.org/forum/showthread.php?p=6878 CONFIRM http://www.vbdrupal.org/forum/showthread.php?t=1349 VUPEN ADV-2008-0127 VUPEN ADV-2008-0134 XF drupal-aggregator-csrf(39617) Cross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x before 4.7.11 and 5.x before 5.6 allows remote attackers to delete items from a feed as privileged users.

CVE-2008-0273

2008-01-15T15:00:00.000-05:00

2017-08-07T21:29:26.963-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/208564 BID 27238 CONFIRM http://www.vbdrupal.org/forum/showthread.php?p=6878 CONFIRM http://www.vbdrupal.org/forum/showthread.php?t=1349 VUPEN ADV-2008-0127 VUPEN ADV-2008-0134 XF drupal-utf8-xss(39619) Interpretation conflict in Drupal 4.7.x before 4.7.11 and 5.x before 5.6, when Internet Explorer 6 is used, allows remote attackers to conduct cross-site scripting (XSS) attacks via invalid UTF-8 byte sequences, which are not processed as UTF-8 by Drupal's HTML filtering, but are processed as UTF-8 by Internet Explorer, effectively removing characters from the document and defeating the HTML protection mechanism.

cpe:/a:drupal:drupal:4.7 cpe:/a:drupal:drupal:5.0

CVE-2008-0274

2008-01-15T15:00:00.000-05:00

2017-08-07T21:29:27.010-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/208565 BID 27238 CONFIRM http://www.vbdrupal.org/forum/showthread.php?p=6878 CONFIRM http://www.vbdrupal.org/forum/showthread.php?t=1349 VUPEN ADV-2008-0127 VUPEN ADV-2008-0134 XF drupal-theme-xss(39605) Cross-site scripting (XSS) vulnerability in Drupal 4.7.x and 5.x, when certain .htaccess protections are disabled, allows remote attackers to inject arbitrary web script or HTML via crafted links involving theme .tpl.php files.

cpe:/a:drupal:atom_module:4.7 cpe:/a:drupal:atom_module:5.0

CVE-2008-0275

2008-01-15T15:00:00.000-05:00

2017-08-07T21:29:27.070-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/208527 XF drupal-atom-security-bypass(39607) The Atom 4.7 before 4.7.x-1.0 and 5.x before 5.x-1.0 module for Drupal does not properly manage permissions for node (1) titles, (2) teasers, and (3) bodies, which might allow remote attackers to gain access to syndicated content.

CVE-2008-0276

2008-01-15T15:00:00.000-05:00

2017-08-07T21:29:27.133-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/208524 XF drupal-devel-variable-xss(39606) Cross-site scripting (XSS) vulnerability in the Devel module before 5.x-0.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via a site variable, related to lack of escaping of the variable table.

cpe:/a:drupal:fileshare_module:4.7.x cpe:/a:drupal:fileshare_module:5.x

CVE-2008-0277

2008-01-15T15:00:00.000-05:00

2017-08-07T21:29:27.197-04:00

8.5

NETWORK

MEDIUM

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://drupal.org/node/208537 XF drupal-fileshare-code-execution(39609) Unspecified vulnerability in the Fileshare module for Drupal allows remote authenticated users with node-creation privileges to execute arbitrary code via unspecified vectors.

cpe:/a:x7_group:x7_chat:2.0.5

CVE-2008-0278

2008-01-15T15:00:00.000-05:00

2017-09-28T21:30:12.003-04:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27277 XF x7chatday-sql-injection(39656) EXPLOIT-DB 4907 SQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a sm_window action.

cpe:/a:xforum:xforum:1.4

CVE-2008-0279

2008-01-15T15:00:00.000-05:00

2017-09-28T21:30:12.067-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27278 XF xforum-liretopic-sql-injection(39654) EXPLOIT-DB 4908 SQL injection vulnerability in liretopic.php in Xforum 1.4 and possibly others allows remote attackers to execute arbitrary SQL commands via the topic parameter. NOTE: the categorie parameter might also be affected.

cpe:/a:mtcms:mtcms:2.0

CVE-2008-0280

2008-01-15T16:00:00.000-05:00

2018-10-15T17:58:57.673-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SREASON 3544 BUGTRAQ 20080110 MTCMS <=2.0 SQL Injection Vulnerbility BID 27224 XF mtcms-a-sql-injection(39597) EXPLOIT-DB 4882 SQL injection vulnerability in index.php in MTCMS 2.0 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via the (1) a or (2) cid parameter.

cpe:/a:id-commerce:id-commerce:2.0

CVE-2008-0281

2008-01-15T16:00:00.000-05:00

2017-08-07T21:29:27.417-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

FULLDISC 20080110 ID-Commerce Security Advisory - SLR-2007-001 FULLDISC 20080110 (( PoC)) ID-Commerce Security Advisory - SLR-2007-001 (( PoC)) FULLDISC 20080110 ID-Commerce Security Advisory - SLR-2007-001 BID 27220 XF idcommerce-liste-sql-injection(39594) SQL injection vulnerability in liste.php in ID-Commerce 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idFamille parameter.

cpe:/a:domphp:domphp:0.81

CVE-2008-0282

2008-01-15T16:00:00.000-05:00

2017-09-28T21:30:12.177-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27212 XF domphp-inscription-sql-injection(39593) EXPLOIT-DB 4880 SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary SQL commands via the mail parameter.

cpe:/a:domphp:domphp:0.81

CVE-2008-0283

2008-01-15T16:00:00.000-05:00

2017-09-28T21:30:12.237-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 27226 EXPLOIT-DB 4883 PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

cpe:/a:simple_machines:simple_machines_smf:1.1.4

CVE-2008-0284

2008-01-15T16:00:00.000-05:00

2018-10-15T17:58:58.280-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3540 BUGTRAQ 20080110 Simple Machines Forum Cross-Site Scripting Vulnerabilities BID 27218 XF simplemachinesforum-itemid-xss(39585) Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) Itemid or (2) topic arguments.

cpe:/a:ngircd:ngircd:0.10.3 cpe:/a:ngircd:ngircd:0.11.0-pre1

CVE-2008-0285

2008-01-15T19:00:00.000-05:00

2008-09-05T17:34:40.747-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2008-01-16T11:37:00.000-05:00

MISC http://arthur.barton.de/cgi-bin/viewcvs.cgi/ngircd/ngircd/src/ngircd/irc-channel.c?r1=1.40&r2=1.41&diff_format=h CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=204834 CONFIRM http://ngircd.barton.de/doc/ChangeLog GENTOO GLSA-200801-13 BID 27318 ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service (crash) via crafted IRC PART message, which triggers an invalid dereference.

cpe:/a:article_dashboard:article_dashboard

CVE-2008-0286

2008-01-15T20:00:00.000-05:00

2018-10-15T17:58:58.687-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3546 BUGTRAQ 20080115 Article DashBoard all version SQL Injection Vulnerability BUGTRAQ 20080116 Re: Article DashBoard all version SQL Injection Vulnerability BID 27286 XF articledashboard-login-sql-injection(39657) SQL injection vulnerability in admin/login.php in Article Dashboard allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) password fields.

cpe:/a:visionburst:vcart:3.3.2

CVE-2008-0287

2008-01-15T21:00:00.000-05:00

2017-09-28T21:30:12.300-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27231 XF vcart-checkout-index-file-include(39616) EXPLOIT-DB 4889 PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) index.php and (2) checkout.php.

cpe:/a:imagealbum:imagealbum:2.0.0b2

CVE-2008-0288

2008-01-15T21:00:00.000-05:00

2018-10-15T17:58:59.297-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3548 BUGTRAQ 20080111 ImageAlbum Remote SQL Injection Vulnerabilities BID 27240 EXPLOIT-DB 4895 Multiple SQL injection vulnerabilities in ImageAlbum 2.0.0b2 allow remote attackers to execute arbitrary SQL commands via the id, which is not properly handled in (1) classes/IADomain.php, (2) classes/IACollection.php, and (3) classes/IAUser.php, as demonstrated via the id parameter in a collection.imageview action.

cpe:/a:mansion_productions:member_area_system:1.7

CVE-2008-0289

2008-01-15T21:00:00.000-05:00

2018-10-15T17:58:59.687-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3547 BUGTRAQ 20080111 Member Area System (MAS) Remote File Include Vulnerability (view_func.php) BUGTRAQ 20080118 Re: Member Area System (MAS) Remote File Include Vulnerability (view_func.php) BID 27244 XF mas-viewfunc-file-include(39611) PHP remote file inclusion vulnerability in view_func.php in Member Area System (MAS) 1.7 and possibly others allows remote attackers to execute arbitrary PHP code via a URL in the i parameter. NOTE: a second vector might exist via the l parameter. NOTE: as of 20080118, the vendor has disputed the set of affected versions, stating that the issue "is already fixed, for almost a year."

cpe:/a:digitalhive:digitalhive:2.0_rc2

CVE-2008-0290

2008-01-15T21:00:00.000-05:00

2017-09-28T21:30:12.410-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27232 XF digitalhive-base-sql-injection(39602) EXPLOIT-DB 4887 Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the selectskin parameter to an unspecified program, or (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in the gestion_membre.php page to base.php.

cpe:/a:hangzhou_rui-qiang:richstrong_cms

CVE-2008-0291

2008-01-16T17:00:00.000-05:00

2018-10-15T17:59:00.280-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20080116 RichStrong CMS (showproduct.asp?cat=) Remote SQL Injection Exploit BID 27281 BID 27310 XF richstrongcms-showproduct-sql-injection(39668) EXPLOIT-DB 4910 SQL injection vulnerability in showproduct.asp in RichStrong CMS allows remote attackers to execute arbitrary SQL commands via the cat parameter.

cpe:/a:dansie:photo_album:1.0

CVE-2008-0292

2008-01-16T17:00:00.000-05:00

2017-08-07T21:29:27.853-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov XF dansiephotoalbum-photoalbum-xss(39664) Cross-site scripting (XSS) vulnerability in photo_album.pl in Dansie Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:freeseat:freeseat:1.1.5c

CVE-2008-0293

2008-01-16T17:00:00.000-05:00

2017-08-07T21:29:27.900-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://sourceforge.net/project/shownotes.php?group_id=160239&release_id=568374 XF freeseat-cron-security-bypass(39648) Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the show_foot function.

cpe:/a:freeseat:freeseat:1.1.5c

CVE-2008-0294

2008-01-16T17:00:00.000-05:00

2017-08-07T21:29:27.963-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://sourceforge.net/project/shownotes.php?release_id=568374&group_id=160239 BID 27270 XF freeseat-seatlocking-security-bypass(39647) Unspecified vulnerability in the seat-locking implementation in FreeSeat before 1.1.5d allows attackers to book a seat more than once via unspecified vectors.

cpe:/a:videolan:vlc_media_player:0.8.6d

CVE-2008-0295

2008-01-16T17:00:00.000-05:00

2017-09-28T21:30:12.520-04:00

8.5

NETWORK

MEDIUM

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/vlcxhof-adv.txt DEBIAN DSA-1543 GENTOO GLSA-200803-13 BID 27221 VUPEN ADV-2008-0105 Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service (crash) or execute arbitrary code via long Session Description Protocol (SDP) data.

cpe:/a:videolan:vlc_media_player:0.8.6d

CVE-2008-0296

2008-01-16T17:00:00.000-05:00

2017-09-28T21:30:12.580-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/vlcxhof-adv.txt DEBIAN DSA-1543 GENTOO GLSA-200803-13 VUPEN ADV-2008-0105 Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service (application crash) or execute arbitrary code via a long string.

cpe:/a:keil_software:photokorn

CVE-2008-0297

2008-01-16T18:00:00.000-05:00

2017-09-28T21:30:12.627-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov XF photokorn-update3-information-disclosure(39652) EXPLOIT-DB 4897 PhotoKorn allows remote attackers to obtain database credentials via a direct request to update/update3.php, which includes the credentials in its output.

cpe:/a:apple:safari:2.0 cpe:/a:apple:safari:2.0.1 cpe:/a:apple:safari:2.0.2 cpe:/a:apple:safari:2.0.3 cpe:/a:apple:safari:2.0.4

CVE-2008-0298

2008-01-16T18:00:00.000-05:00

2018-10-15T17:59:00.970-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SREASON 3549 MISC http://www.s21sec.com/avisos/s21sec-039-en.txt BUGTRAQ 20080112 Safari 2 Denial of Service BID 27261 XF safari-khtml-webkit-dos(39635) KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service (browser crash) via a crafted web page, possibly involving a STYLE attribute of a DIV element.

cpe:/a:python_software_foundation:paramiko:1.7.1

CVE-2008-0299

2008-01-16T18:00:00.000-05:00

2017-08-07T21:29:28.117-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=460706 MISC http://people.debian.org/~nion/nmu-diff/paramiko-1.6.4-1_1.6.4-1.1.patch GENTOO GLSA-200803-07 BID 27307 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=428727 XF paramiko-randompool-info-disclosure(39749) FEDORA FEDORA-2008-0644 FEDORA FEDORA-2008-0722 common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool.

cpe:/a:mapbender:mapbender:2.4 cpe:/a:mapbender:mapbender:2.4.1 cpe:/a:mapbender:mapbender:2.4.2 cpe:/a:mapbender:mapbender:2.4.3 cpe:/a:mapbender:mapbender:2.4.4

CVE-2008-0300

2008-03-11T19:44:00.000-04:00

2017-09-28T21:30:12.690-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.redteam-pentesting.de/advisories/rt-sa-2008-001.php BID 28195 XF mapbender-mapfiler-code-execution(41131) EXPLOIT-DB 5232 mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences.

cpe:/a:mapbender:mapbender:2.4 cpe:/a:mapbender:mapbender:2.4.1 cpe:/a:mapbender:mapbender:2.4.2 cpe:/a:mapbender:mapbender:2.4.3 cpe:/a:mapbender:mapbender:2.4.4

CVE-2008-0301

2008-03-11T19:44:00.000-04:00

2018-10-15T17:59:01.767-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20080311 Advisory: SQL-Injections in Mapbender SREASON 3728 MISC http://www.redteam-pentesting.de/advisories/rt-sa-2008-002.php BUGTRAQ 20080311 Advisory: SQL-Injections in Mapbender BID 28193 XF mapbender-gaz-sql-injection(41139) EXPLOIT-DB 5233 Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers to execute arbitrary SQL commands via the gaz parameter to mod_gazetteer_edit.php and other unspecified vectors.

cpe:/a:debian:apt-listchanges:2.81

CVE-2008-0302

2008-01-16T21:00:00.000-05:00

2008-09-05T17:34:43.327-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2008-01-17T11:06:00.000-05:00

CONFIRM http://git.madism.org/?p=apt-listchanges.git;a=commitdiff;h=1bcfbf3dc55413bb83a1782dc9a54515a963fb32 CONFIRM http://packages.debian.org/changelogs/pool/main/a/apt-listchanges/apt-listchanges_2.82/changelog DEBIAN DSA-1465 BID 27331 UBUNTU USN-572-1 Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory.

cpe:/a:canon:i-sensys:lbp3360 cpe:/a:canon:i-sensys:lbp3460 cpe:/a:canon:i-sensys:lbp5360 cpe:/a:canon:imagepress:c1 cpe:/a:canon:imagerunner:85plus cpe:/a:canon:imagerunner:105plus cpe:/a:canon:imagerunner:2230 cpe:/a:canon:imagerunner:2270 cpe:/a:canon:imagerunner:2570c cpe:/a:canon:imagerunner:2570ci cpe:/a:canon:imagerunner:2870 cpe:/a:canon:imagerunner:3025 cpe:/a:canon:imagerunner:3025n cpe:/a:canon:imagerunner:3035 cpe:/a:canon:imagerunner:3035n cpe:/a:canon:imagerunner:3045 cpe:/a:canon:imagerunner:3045n cpe:/a:canon:imagerunner:3170c cpe:/a:canon:imagerunner:3170ci cpe:/a:canon:imagerunner:3180c cpe:/a:canon:imagerunner:3180ci cpe:/a:canon:imagerunner:3530 cpe:/a:canon:imagerunner:3570 cpe:/a:canon:imagerunner:4570 cpe:/a:canon:imagerunner:5055 cpe:/a:canon:imagerunner:5055n cpe:/a:canon:imagerunner:5065 cpe:/a:canon:imagerunner:5065n cpe:/a:canon:imagerunner:5075 cpe:/a:canon:imagerunner:5075n cpe:/a:canon:imagerunner:5570 cpe:/a:canon:imagerunner:5800c cpe:/a:canon:imagerunner:5800cn cpe:/a:canon:imagerunner:6570 cpe:/a:canon:imagerunner:6800c cpe:/a:canon:imagerunner:6800cn cpe:/a:canon:imagerunner:7086 cpe:/a:canon:imagerunner:7095 cpe:/a:canon:imagerunner:7095p cpe:/a:canon:imagerunner:7105 cpe:/a:canon:imagerunner:8070 cpe:/a:canon:imagerunner:c2380i cpe:/a:canon:imagerunner:c2620 cpe:/a:canon:imagerunner:c2620n cpe:/a:canon:imagerunner:c2880 cpe:/a:canon:imagerunner:c2880i cpe:/a:canon:imagerunner:c3220n cpe:/a:canon:imagerunner:c3380 cpe:/a:canon:imagerunner:c3380i cpe:/a:canon:imagerunner:c4080i cpe:/a:canon:imagerunner:c4580i cpe:/a:canon:imagerunner:c5185i cpe:/a:canon:imagerunner:c5870 cpe:/a:canon:imagerunner:c5870i cpe:/a:canon:imagerunner:c5880 cpe:/a:canon:imagerunner:c5880i cpe:/a:canon:imagerunner:c6870i cpe:/a:canon:imagerunner:c6880 cpe:/a:canon:imagerunner:c6880i cpe:/a:canon:imagerunner:clc4040 cpe:/a:canon:imagerunner:clc5151 cpe:/a:canon:imagerunner_2620 cpe:/a:canon:imagerunner_5000i cpe:/a:canon:imagerunner_5020 cpe:/a:canon:imagerunner_6870 cpe:/a:canon:imagerunner_8500 cpe:/a:canon:imagerunner_9070 cpe:/a:canon:imagerunner_c3200 cpe:/a:canon:imagerunner_c3220 cpe:/a:canon:imagerunner_c6800

CVE-2008-0303

2008-02-28T21:44:00.000-05:00

2009-03-13T01:31:26.593-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack JVN JVN#10056705 JVNDB JVNDB-2008-000013 SECTRACK 1019528 CERT-VN VU#568073 BID 28042 CONFIRM http://www.usa.canon.com/html/security/pdf/CVA-001.pdf The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.

cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:thunderbird:2.0.0.9

CVE-2008-0304

2008-02-29T14:44:00.000-05:00

2017-09-28T21:30:12.847-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

IDEFENSE 20080226 Mozilla Thunderbird MIME External-Body Heap Overflow Vulnerability SECTRACK 1019504 SLACKWARE SSA:2008-061-01 SUNALERT 239546 DEBIAN DSA-1621 DEBIAN DSA-1697 GENTOO GLSA-200805-18 CERT-VN VU#661651 MANDRIVA MDVSA-2008:062 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-12.html BID 28012 UBUNTU USN-582-1 UBUNTU USN-582-2 VUPEN ADV-2008-2091 FEDORA FEDORA-2008-2060 FEDORA FEDORA-2008-2118 Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.

cpe:/a:sap:maxdb:7.6.0.37

CVE-2008-0306

2008-03-11T19:44:00.000-04:00

2017-08-07T21:29:28.367-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20080310 SAP MaxDB sdbstarter Privilege Escalation Vulnerability BID 28185 SECTRACK 1019570 VUPEN ADV-2008-0844 XF maxdb-sdbstarter-privilege-escalation(41104) sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.

cpe:/a:sap:maxdb:7.6.0.37

CVE-2008-0307

2008-03-11T19:44:00.000-04:00

2017-08-07T21:29:28.430-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20080310 SAP MaxDB Signedness Error Heap Corruption Vulnerability BID 28183 SECTRACK 1019571 VUPEN ADV-2008-0844 XF maxdb-vserver-code-execution(41107) Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption.

cpe:/a:symantec:scan_engine:5.1.4.24 cpe:/a:symantec:symantec_antivirus_clearswift:4.3.16.39 cpe:/a:symantec:symantec_antivirus_filtering_domino_mpe:3.0.12::aix cpe:/a:symantec:symantec_antivirus_filtering_domino_mpe:3.0.12::linux cpe:/a:symantec:symantec_antivirus_filtering_domino_mpe:3.0.12::solaris cpe:/a:symantec:symantec_antivirus_messaging:4.3.16.39 cpe:/a:symantec:symantec_antivirus_microsoft_sharepoint:4.3.16.39 cpe:/a:symantec:symantec_antivirus_ms_isa:4.3.16.39 cpe:/a:symantec:symantec_antivirus_network_attached_storage:4.3.16.39 cpe:/a:symantec:symantec_antivirus_scan_engine:4.3.16.39 cpe:/a:symantec:symantec_antivirus_scan_engine_caching:4.3.16.39 cpe:/a:symantec:symantec_mail_security_exchange:4.6.5.12 cpe:/a:symantec:symantec_mail_security_exchange:5.0.4.363

CVE-2008-0308

2008-02-28T15:44:00.000-05:00

2011-03-07T22:04:18.360-05:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20080226 Symantec Scan Engine 5.1.2 RAR File Denial of Service Vulnerability BID 27911 SECTRACK 1019503 CONFIRM http://www.symantec.com/avcenter/security/Content/2008.02.27.html VUPEN ADV-2008-0680 Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service (memory consumption) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).

cpe:/a:symantec:scan_engine:5.1.4.24 cpe:/a:symantec:symantec_antivirus_filtering_domino_mpe:3.0.12::aix cpe:/a:symantec:symantec_antivirus_filtering_domino_mpe:3.0.12::linux cpe:/a:symantec:symantec_antivirus_filtering_domino_mpe:3.0.12::solaris cpe:/a:symantec:symantec_antivirus_network_attached_storage:4.3.16.39 cpe:/a:symantec:symantec_antivirus_scan_engine:4.3.16.39 cpe:/a:symantec:symantec_antivirus_scan_engine_caching:4.3.16.39 cpe:/a:symantec:symantec_antivirus_scan_engine_clearswift:4.3.16.39 cpe:/a:symantec:symantec_antivirus_scan_engine_for_microsoft_sharepoint:4.3.16.39 cpe:/a:symantec:symantec_antivirus_scan_engine_for_ms_isa:4.3.16.39 cpe:/a:symantec:symantec_antivirus_scan_engine_messaging:4.3.16.39 cpe:/a:symantec:symantec_mail_security_for_microsoft_exchange:4.6.5.12 cpe:/a:symantec:symantec_mail_security_for_microsoft_exchange:5.0.4.363

CVE-2008-0309

2008-02-28T15:44:00.000-05:00

2011-03-07T22:04:18.453-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

IDEFENSE 20080226 Symantec Scan Engine 5.1.2 RAR File Buffer Overflow Vulnerability BID 27913 SECTRACK 1019503 CONFIRM http://www.symantec.com/avcenter/security/Content/2008.02.27.html VUPEN ADV-2008-0680 Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).

cpe:/o:sco:unixware:7.1.4

CVE-2008-0310

2008-04-07T13:44:00.000-04:00

2017-09-28T21:30:12.927-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SCO SCOSA-2008.1 IDEFENSE 20080403 SCO UnixWare pkgadd Directory Traversal Vulnerability CONFIRM http://www.sco.com/support/update/download/release.php?rid=324 SECTRACK 1019787 XF sco-unixware-pkgadd-directory-traversal(41759) EXPLOIT-DB 5355 Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, probably PKGINST.

cpe:/a:borland:caliberrm:2006

CVE-2008-0311

2008-04-06T19:44:00.000-04:00

2017-08-07T21:29:28.540-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20080402 Borland CaliberRM StarTeam Multicast Service Buffer Overflow Vulnerability SECTRACK 1019786 BID 28602 VUPEN ADV-2008-1100 XF starteam-pgmwebhandlerparserequest-bo(41647) Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (STMulticastService) 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request.

cpe:/a:symantec:norton_360:1.0 cpe:/a:symantec:norton_antivirus:2006 cpe:/a:symantec:norton_antivirus:2007 cpe:/a:symantec:norton_antivirus:2008 cpe:/a:symantec:norton_internet_security:2006 cpe:/a:symantec:norton_internet_security:2007 cpe:/a:symantec:norton_internet_security:2008 cpe:/a:symantec:norton_system_works:2006 cpe:/a:symantec:norton_system_works:2007 cpe:/a:symantec:norton_system_works:2008

CVE-2008-0312

2008-04-08T13:05:00.000-04:00

2017-08-07T21:29:28.603-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20080402 Symantec Norton Internet Security 2008 ActiveX Control Buffer Overflow Vulnerability CONFIRM http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html BID 28507 SECTRACK 1019751 SECTRACK 1019752 SECTRACK 1019753 VUPEN ADV-2008-1077 XF symantec-autofixtool-bo(41629) Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute arbitrary code via a long argument to the GetEventLogInfo method. NOTE: some of these details are obtained from third party information.

cpe:/a:symantec:norton_360:1.0 cpe:/a:symantec:norton_antivirus:2006 cpe:/a:symantec:norton_antivirus:2007 cpe:/a:symantec:norton_antivirus:2008 cpe:/a:symantec:norton_internet_security:2006 cpe:/a:symantec:norton_internet_security:2007 cpe:/a:symantec:norton_internet_security:2008 cpe:/a:symantec:system_works:2006 cpe:/a:symantec:system_works:2007 cpe:/a:symantec:system_works:2008

CVE-2008-0313

2008-04-08T13:05:00.000-04:00

2017-08-07T21:29:28.667-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

IDEFENSE 20080402 Symantec Internet Security 2008 ActiveDataInfo.LaunchProcess Design Error Vulnerability CONFIRM http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html BID 28509 SECTRACK 1019751 SECTRACK 1019752 SECTRACK 1019753 VUPEN ADV-2008-1077 XF symantec-autofixtool-code-execution(41631) The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly determine the location of the AutoFix Tool, which allows remote attackers to execute arbitrary code via a remote (1) WebDAV or (2) SMB share.

cpe:/a:clam_anti-virus:clamav:0.92.1

CVE-2008-0314

2008-04-16T11:05:00.000-04:00

2017-08-07T21:29:28.727-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://kolab.org/security/kolab-vendor-notice-20.txt IDEFENSE 20080414 ClamAV libclamav PeSpin Heap Overflow Vulnerability APPLE APPLE-SA-2008-09-15 SUSE SUSE-SA:2008:024 GENTOO GLSA-200805-19 CONFIRM http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog CONFIRM http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html DEBIAN DSA-1549 CERT-VN VU#858595 MANDRIVA MDVSA-2008:088 BID 28784 SECTRACK 1019851 CERT TA08-260A VUPEN ADV-2008-1227 VUPEN ADV-2008-2584 XF clamav-spin-bo(41823) FEDORA FEDORA-2008-3358 FEDORA FEDORA-2008-3420 FEDORA FEDORA-2008-3900 CONFIRM https://wwws.clamav.net/bugzilla/show_bug.cgi?id=876 Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value.

cpe:/a:clam_anti-virus:clamav:0.92

CVE-2008-0318

2008-02-12T15:00:00.000-05:00

2011-03-07T00:00:00.000-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2008-02-12T15:44:00.000-05:00

ALLOWS_ADMIN_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=209915 CONFIRM http://docs.info.apple.com/article.html?artnum=307562 CONFIRM http://kolab.org/security/kolab-vendor-notice-19.txt IDEFENSE 20080212 ClamAV libclamav PE File Integer Overflow Vulnerability APPLE APPLE-SA-2008-03-18 SUSE SUSE-SR:2008:004 GENTOO GLSA-200802-09 SECTRACK 1019394 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=575703 CONFIRM http://support.novell.com/techcenter/psdb/512985d2cd3090bfb93dcb7b551179cf.html DEBIAN DSA-1497 MANDRIVA MDVSA-2008:088 BID 27751 VUPEN ADV-2008-0503 VUPEN ADV-2008-0606 VUPEN ADV-2008-0924 FEDORA FEDORA-2008-1608 FEDORA FEDORA-2008-1625 Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow.

cpe:/a:openoffice:openoffice.org:2.0.3 cpe:/a:openoffice:openoffice.org:2.1 cpe:/a:openoffice:openoffice.org:2.2 cpe:/a:openoffice:openoffice.org:2.2.1 cpe:/a:openoffice:openoffice.org:2.3 cpe:/a:openoffice:openoffice.org:2.3.1

CVE-2008-0320

2008-04-17T15:05:00.000-04:00

2017-09-28T21:30:13.003-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20080417 Multiple Vendor OpenOffice OLE DocumentSummaryInformation Heap Overflow Vulnerability GENTOO GLSA-200805-16 SUNALERT 231642 DEBIAN DSA-1547 MANDRIVA MDVSA-2008:090 MANDRIVA MDVSA-2008:095 SUSE SUSE-SA:2008:023 CONFIRM http://www.openoffice.org/security/bulletin.html CONFIRM http://www.openoffice.org/security/cves/CVE-2007-4770.html CONFIRM http://www.openoffice.org/security/cves/CVE-2007-5745.html CONFIRM http://www.openoffice.org/security/cves/CVE-2008-0320.html REDHAT RHSA-2008:0175 REDHAT RHSA-2008:0176 BID 28819 SECTRACK 1019890 UBUNTU USN-609-1 VUPEN ADV-2008-1253 VUPEN ADV-2008-1375 XF openoffice-ole-bo(41860) FEDORA FEDORA-2008-3251 Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream.

cpe:/o:microsoft:windows_xp

CVE-2008-0322

2008-05-13T16:20:00.000-04:00

2017-08-07T21:29:28.917-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20080512 Microsoft Windows I2O Filter Utility Driver (i2omgmt.sys) Local Privilege Escalation Vulnerability BID 29171 SECTRACK 1020006 VUPEN ADV-2008-1476 XF win-i2omgmt-code-execution(42358) The I2O Utility Filter driver (i2omgmt.sys) 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\\.\I2OExc" device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call with a crafted DeviceObject pointer.

cpe:/a:cisco:vpn_client:5.0.2.0090::windows

CVE-2008-0324

2008-01-16T22:00:00.000-05:00

2017-09-28T21:30:13.050-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov BID 27289 SECTRACK 1019240 VUPEN ADV-2008-0170 XF cisco-vpnclient-cvpndrva-dos(39694) EXPLOIT-DB 4911 Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption.

cpe:/a:fascript:fapersian_petition

CVE-2008-0325

2008-01-17T17:00:00.000-05:00

2017-09-28T21:30:13.113-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27302 XF fascriptfapersian-show-sql-injection(39716) EXPLOIT-DB 4916 SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:fascript:fapersianhack:1.0

CVE-2008-0326

2008-01-17T17:00:00.000-05:00

2017-09-28T21:30:13.177-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27302 XF fascriptfapersianhack-show-sql-injection(39717) EXPLOIT-DB 4917 SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to show.php.

cpe:/a:fascript:famp3:1.0

CVE-2008-0327

2008-01-17T17:00:00.000-05:00

2017-09-28T21:30:13.223-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27302 XF fascriptfamp3-show-sql-injection(39714) EXPLOIT-DB 4914 SQL injection vulnerability in show.php in FaScript FaMp3 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:fascript:faname:1.0

CVE-2008-0328

2008-01-17T17:00:00.000-05:00

2017-09-28T21:30:13.300-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27303 XF fascriptfaname-page-sql-injection(39715) EXPLOIT-DB 4915 SQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:julien_plesniak:lulieblog:1.0.1 cpe:/a:julien_plesniak:lulieblog:1.0.2

CVE-2008-0329

2008-01-17T17:00:00.000-05:00

2017-09-28T21:30:13.393-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27290 XF lulieblog-admin-security-bypass(39669) EXPLOIT-DB 4912 LulieBlog 1.0.1 and 1.0.2 does not restrict access to (1) article_suppr.php, (2) comment_accepter.php, and (3) comment_refuser.php in Admin/, which allows remote attackers to accept comments, delete comments, and delete articles via the id parameter.

cpe:/o:radiator:radius_server:3.17.1

CVE-2008-0330

2008-01-17T17:00:00.000-05:00

2017-08-07T21:29:29.290-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.open.com.au/radiator/history.html BID 27306 VUPEN ADV-2008-0598 XF radiator-radius-dos(39730) XF osc-radiator-unspecified-dos(40664) Open System Consultants (OSC) Radiator before 4.0 allows remote attackers to cause a denial of service (daemon crash) via malformed RADIUS requests, as demonstrated by packets sent by nmap.

cpe:/a:funkwerk:system_software:7.4.1_patch_8

CVE-2008-0331

2008-01-17T17:00:00.000-05:00

2017-08-07T21:29:29.353-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.funkwerk-ec.com/portal/downloadcenter/dateien/x2300/r7401p09/readme_741p9_en.pdf BID 27314 XF x2300-dns-dos(39731) Unspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk Router / VPN devices allows remote attackers to cause a denial of service (panic and reboot) via unspecified DNS requests.

cpe:/a:aria:aria:0.99-6

CVE-2008-0332

2008-01-17T17:00:00.000-05:00

2018-10-15T17:59:02.610-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20080116 [DSECRG-08-002] Local File Include in arias 0.99-6 BID 27311 XF aria-effect-file-include(39712) EXPLOIT-DB 4920 Directory traversal vulnerability in arias/help/effect.php in aria 0.99-6 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter.

cpe:/a:afterlogic:mailbee_webmail_pro:4.1 cpe:/a:microsoft:asp.net

CVE-2008-0333

2008-01-17T17:00:00.000-05:00

2017-09-28T21:30:13.567-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27312 XF mailbeewebmail-download-directory-traversal(39724) EXPLOIT-DB 4921 Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the temp_filename parameter.

cpe:/a:pmachine:pmachine_pro:2.4.1

CVE-2008-0334

2008-01-17T17:00:00.000-05:00

2008-09-05T17:34:47.467-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-01-18T08:41:00.000-05:00

MISC http://packetstormsecurity.org/0801-exploits/pMachinePro-241-xss.txt BID 27282 Cross-site scripting (XSS) vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the L_PREF_NAME[855] parameter.

cpe:/a:bugtracker.net:bugtracker.net:2.7.1

CVE-2008-0335

2008-01-17T17:00:00.000-05:00

2017-08-07T21:29:29.557-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://sourceforge.net/project/shownotes.php?release_id=568160 CONFIRM http://sourceforge.net/tracker/index.php?func=detail&aid=1867089&group_id=66812&atid=515837 BID 27275 XF bugtrackernet-bug-xss(39650) Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field.

cpe:/a:bugtracker.net:bugtracker.net:2.7.1

CVE-2008-0336

2008-01-17T17:00:00.000-05:00

2017-08-07T21:29:29.617-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://sourceforge.net/project/shownotes.php?group_id=66812&release_id=568160 CONFIRM http://sourceforge.net/tracker/index.php?func=detail&aid=1867089&group_id=66812&atid=515837 XF bugtrackernet-http-csrf(39651) Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete_*.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and relationships.aspx.

cpe:/a:miniweb_http_server:miniweb_http_server:0.8.19

CVE-2008-0337

2008-01-17T17:00:00.000-05:00

2017-09-28T21:30:13.627-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://www.bugtraq.ir/adv/miniweb_english.pdf BID 27319 VUPEN ADV-2008-0176 XF miniweb-mwprocessreadsocket-bo(39718) EXPLOIT-DB 4923 Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to execute arbitrary code via a long URI.

cpe:/a:miniweb_http_server:miniweb_http_server:0.8.19

CVE-2008-0338

2008-01-17T17:00:00.000-05:00

2017-09-28T21:30:13.690-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.bugtraq.ir/adv/miniweb_english.pdf BID 27319 VUPEN ADV-2008-0176 XF miniweb-mwgetlocal-directory-traversal(39713) EXPLOIT-DB 4923 Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a (1) .%2e (partially encoded dot dot) or (2) %2e%2e (encoded dot dot) in the URI.

cpe:/a:oracle:database_server:9.2.0.8dv cpe:/a:oracle:database_server:10.1.0.5 cpe:/a:oracle:database_server:10.2.0.3

CVE-2008-0339

2008-01-17T18:00:00.000-05:00

2012-10-22T22:42:08.350-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov HP SSRT061201 SECTRACK 1019218 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html BID 27229 CERT TA08-017A VUPEN ADV-2008-0150 VUPEN ADV-2008-0180 Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB01.

cpe:/a:oracle:application_server:1.0.2.2 cpe:/a:oracle:application_server:9.0.4.3 cpe:/a:oracle:application_server:10.1.2.0.2 cpe:/a:oracle:application_server:10.1.2.1.0 cpe:/a:oracle:application_server:10.1.2.2.0 cpe:/a:oracle:application_server:10.1.3.0.0 cpe:/a:oracle:application_server:10.1.3.1.0 cpe:/a:oracle:application_server:10.1.3.3.0 cpe:/a:oracle:collaboration_suite:10.1.2 cpe:/a:oracle:database_server:9.0.1.5::fips cpe:/a:oracle:database_server:9.2.0.8 cpe:/a:oracle:database_server:9.2.0.8dv cpe:/a:oracle:database_server:10.1.0.5 cpe:/a:oracle:database_server:10.2.0.2 cpe:/a:oracle:database_server:10.2.0.3 cpe:/a:oracle:database_server:11.1.0.6 cpe:/a:oracle:e-business_suite:11.5.9 cpe:/a:oracle:e-business_suite:11.5.10 cpe:/a:oracle:e-business_suite:11.5.10.2 cpe:/a:oracle:e-business_suite:12.0.0 cpe:/a:oracle:e-business_suite:12.0.1 cpe:/a:oracle:e-business_suite:12.0.2 cpe:/a:oracle:e-business_suite:12.0.3 cpe:/a:oracle:peoplesoft_enterprise_peopletools:8.47 cpe:/a:oracle:peoplesoft_enterprise_peopletools:8.48 cpe:/a:oracle:peoplesoft_enterprise_peopletools:8.49

CVE-2008-0340

2008-01-17T18:00:00.000-05:00

2012-10-22T22:42:08.523-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT061201 SECTRACK 1019218 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html BID 27229 CERT TA08-017A VUPEN ADV-2008-0150 VUPEN ADV-2008-0180 Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to the (1) Advanced Queuing component (DB02) and (2) Oracle Spatial component (DB04).

cpe:/a:oracle:database_server:9.0.1.5::fips cpe:/a:oracle:database_server:10.1.0.5

CVE-2008-0341

2008-01-17T18:00:00.000-05:00

2012-10-22T22:42:08.710-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov HP SSRT061201 SECTRACK 1019218 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html BID 27229 CERT TA08-017A VUPEN ADV-2008-0150 VUPEN ADV-2008-0180 Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 has unknown impact and remote attack vectors, aka DB03.

cpe:/a:oracle:database_server:9.2.0.8 cpe:/a:oracle:database_server:10.1.0.5 cpe:/a:oracle:database_server:10.2.0.3

CVE-2008-0342

2008-01-17T18:00:00.000-05:00

2012-10-22T22:42:08.930-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov HP SSRT061201 SECTRACK 1019218 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html BID 27229 CERT TA08-017A VUPEN ADV-2008-0150 VUPEN ADV-2008-0180 Unspecified vulnerability in the Upgrade/Downgrade component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB05.

CVE-2008-0343

2008-01-17T18:00:00.000-05:00

2012-10-22T22:42:09.117-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT061201 SECTRACK 1019218 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html BID 27229 CERT TA08-017A VUPEN ADV-2008-0150 VUPEN ADV-2008-0180 Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has unknown impact and remote attack vectors, aka DB06.

CVE-2008-0344

2008-01-17T18:00:00.000-05:00

2012-10-22T22:42:09.320-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT061201 SECTRACK 1019218 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html BID 27229 CERT TA08-017A VUPEN ADV-2008-0150 VUPEN ADV-2008-0180 Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote attack vectors, aka DB07.

CVE-2008-0345

2008-01-17T18:00:00.000-05:00

2012-10-22T22:42:09.570-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT061201 SECTRACK 1019218 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html BID 27229 CERT TA08-017A VUPEN ADV-2008-0150 VUPEN ADV-2008-0180 Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08.

CVE-2008-0346

2008-01-17T18:00:00.000-05:00

2012-10-22T22:42:09.820-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT061201 SECTRACK 1019218 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html BID 27229 CERT TA08-017A VUPEN ADV-2008-0150 VUPEN ADV-2008-0180 Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka AS01.

cpe:/a:oracle:application_server:1.0.2.2 cpe:/a:oracle:application_server:9.0.4.3 cpe:/a:oracle:application_server:10.1.2.0.2 cpe:/a:oracle:application_server:10.1.2.1.0 cpe:/a:oracle:application_server:10.1.2.2.0 cpe:/a:oracle:application_server:10.1.3.0.0 cpe:/a:oracle:application_server:10.1.3.1.0 cpe:/a:oracle:application_server:10.1.3.3.0 cpe:/a:oracle:application_server_9i:9.0.4.3 cpe:/a:oracle:application_server_9i:10.1.2.0.2 cpe:/a:oracle:collaboration_suite:10.1.2 cpe:/a:oracle:database_server:9.0.1.5::fips cpe:/a:oracle:database_server:9.2.0.8 cpe:/a:oracle:database_server:9.2.0.8dv cpe:/a:oracle:database_server:10.1.0.5 cpe:/a:oracle:database_server:10.2.0.2 cpe:/a:oracle:database_server:10.2.0.3 cpe:/a:oracle:database_server:11.1.0.6 cpe:/a:oracle:e-business_suite:11.5.9 cpe:/a:oracle:e-business_suite:11.5.10 cpe:/a:oracle:e-business_suite:11.5.10.2 cpe:/a:oracle:e-business_suite:12.0.0 cpe:/a:oracle:e-business_suite:12.0.1 cpe:/a:oracle:e-business_suite:12.0.2 cpe:/a:oracle:e-business_suite:12.0.3 cpe:/a:oracle:peoplesoft_enterprise_peopletools:8.47 cpe:/a:oracle:peoplesoft_enterprise_peopletools:8.48 cpe:/a:oracle:peoplesoft_enterprise_peopletools:8.49

CVE-2008-0347

2008-01-17T18:00:00.000-05:00

2018-10-15T17:59:03.077-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT061201 SECTRACK 1019218 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html MISC http://www.petefinnigan.com/Advisory_CPU_Jan_2008.htm BUGTRAQ 20080130 PeteFinnigan.com Limited advisory for Oracle January 2008 CPU BID 27229 CERT TA08-017A VUPEN ADV-2008-0150 VUPEN ADV-2008-0180 Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and 10.1.2.0.2; has unknown impact and local attack vectors, aka OCS01. NOTE: Oracle has not disputed a reliable claim that this issue is related to WKSYS schema privileges.

CVE-2008-0348

2008-01-17T18:00:00.000-05:00

2012-10-22T22:42:10.210-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT061201 SECTRACK 1019218 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html BID 27229 CERT TA08-017A VUPEN ADV-2008-0150 VUPEN ADV-2008-0180 Multiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.18, 8.48.15, and 8.49.07 have unknown impact and remote attack vectors, aka (1) PSE01, (2) PSE03, and (3) PSE04.

CVE-2008-0349

2008-01-17T18:00:00.000-05:00

2012-10-22T22:42:10.397-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT061201 SECTRACK 1019218 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html BID 27229 CERT TA08-017A VUPEN ADV-2008-0150 VUPEN ADV-2008-0180 Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.15 and 8.49.07 has unknown impact and remote attack vectors, aka PSE02.

cpe:/a:evilsentinel:evilsentinel:1.0.9

CVE-2008-0350

2008-01-17T19:00:00.000-05:00

2017-09-28T21:30:13.753-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://evilsentinel.altervista.org/forum/index.php?topic=49.0 BID 27227 EXPLOIT-DB 4884 admin/index.php in Evilsentinel 1.0.9 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to gain administrative privileges and make arbitrary configuration changes.

cpe:/a:evilsentinel:evilsentinel:1.0.9

CVE-2008-0351

2008-01-17T19:00:00.000-05:00

2017-09-28T21:30:13.800-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27227 EXPLOIT-DB 4884 admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the es_security_captcha parameter and not invoking captcha.php.

CVE-2008-0352

2008-01-17T19:00:00.000-05:00

2017-09-28T21:30:13.863-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://bugzilla.kernel.org/show_bug.cgi?id=8450 MISC http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.2 XF linux-kernel-ipv6-jumbogram-dos(39643) EXPLOIT-DB 4893 The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv6 packet, possibly involving the Jumbo Payload hop-by-hop option (jumbogram).

cpe:/a:php-residence:php-residence:0.7.2 cpe:/a:php-residence:php-residence:1.0

CVE-2008-0353

2008-01-18T17:00:00.000-05:00

2017-09-28T21:30:13.927-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27320 XF phpresidence-visualizza-sql-injection(39739) EXPLOIT-DB 4925 SQL injection vulnerability in visualizza_tabelle.php in php-residence 0.7.2 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cognome_cerca parameter. NOTE: some of these details are obtained from third party information.

cpe:/a:ibm:lotus_sametime:7.5 cpe:/a:ibm:lotus_sametime:7.5.1

CVE-2008-0354

2008-01-18T17:00:00.000-05:00

2017-08-07T21:29:29.917-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27316 SECTRACK 1019224 VUPEN ADV-2008-0168 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg21292938 XF sametime-client-mouseover-xss(39726) Cross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim.

cpe:/a:phpecho_cms:phpecho_cms:2.0-rc3

CVE-2008-0355

2008-01-18T17:00:00.000-05:00

2017-09-28T21:30:13.973-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27326 XF phpechocms-index-sql-injection(39741) EXPLOIT-DB 4929 SQL injection vulnerability in index.php in the forum module in PHPEcho CMS, probably 2.0-rc3 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in a section action, a different vector than CVE-2007-2866.

cpe:/a:citrix:access_essentials:2.0 cpe:/a:citrix:desktop_server:1.0 cpe:/a:citrix:metaframe_presentation_server:4.5 cpe:/a:citrix:presentation_server

CVE-2008-0356

2008-01-18T17:00:00.000-05:00

2018-10-15T17:59:04.093-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://support.citrix.com/article/CTX114487 CERT-VN VU#412228 BUGTRAQ 20080117 ZDI-08-002: Citrix Presentation Server IMA Service Heap Overflow Vulnerability BID 27329 SECTRACK 1019231 VUPEN ADV-2008-0172 MISC http://zerodayinitiative.com/advisories/ZDI-08-002.html Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513.

cpe:/a:galaxyscripts:mini_file_host:1.2.1

CVE-2008-0357

2008-01-18T17:00:00.000-05:00

2017-09-28T21:30:14.020-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27327 XF minifilehost-uploadphp-file-include(39799) EXPLOIT-DB 4930 Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.

cpe:/a:pixelpost:pixelpost:1.7

CVE-2008-0358

2008-01-18T17:00:00.000-05:00

2017-09-28T21:30:14.067-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.pixelpost.org/forum/showthread.php?t=7716 BID 27242 SECTRACK 1019238 XF pixelpost-indexphp-sql-injection(39721) EXPLOIT-DB 4924 SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter.

cpe:/a:blog_cms:blog_cms:4.2.1_c

CVE-2008-0359

2008-01-18T17:00:00.000-05:00

2017-10-18T21:30:12.287-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://blogcms.com/wiki/changelog BUGTRAQ 20080116 [DSECRG-08-003] blogcms 4.2.1b Multiple Security Vulnerabilities BID 27317 XF blogcms-index-xss(39710) EXPLOIT-DB 4919 Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin.php or (2) index.php in photo/.

cpe:/a:blog_cms:blog_cms:4.2.1_c

CVE-2008-0360

2008-01-18T17:00:00.000-05:00

2017-10-18T21:30:12.347-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://blogcms.com/wiki/changelog BUGTRAQ 20080116 [DSECRG-08-003] blogcms 4.2.1b Multiple Security Vulnerabilities BID 27317 EXPLOIT-DB 4919 Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via (1) the blogid parameter to index.php, (2) the user parameter to action.php, or (3) the field parameter to admin/plugins/table/index.php.

cpe:/a:instituto_politicnico_nacional:gradman:0.1.3

CVE-2008-0361

2008-01-18T17:00:00.000-05:00

2018-10-15T17:59:04.783-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3552 BUGTRAQ 20080116 Gradman <= 0.1.3 (agregar_info.php?tabla=) Local File Inclusion Exploit BID 27324 XF gradman-agregarinfo-file-include(39732) EXPLOIT-DB 4926 Directory traversal vulnerability in agregar_info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tabla parameter.

cpe:/a:clever_copy:clever_copy:3.0

CVE-2008-0362

2008-01-18T17:00:00.000-05:00

2018-10-15T17:59:05.470-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3553 BUGTRAQ 20080117 Clever Copy <=3.0 Multiple Remote Vulnerabilities BID 27335 XF clevercopy-gallery-xss(39747) Cross-site scripting (XSS) vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the album parameter.

cpe:/a:clever_copy:clever_copy:3.0

CVE-2008-0363

2008-01-18T17:00:00.000-05:00

2018-10-15T17:59:06.157-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SREASON 3553 BUGTRAQ 20080117 Clever Copy <=3.0 Multiple Remote Vulnerabilities BID 27335 XF clevercopy-postcomment-sql-injection(39746) Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to postcomment.php and the (2) album parameter to gallery.php.

cpe:/a:bittorrent:bittorrent:6.0 cpe:/a:utorrent:utorrent:1.7.5 cpe:/a:utorrent:utorrent:1.8-alpha-7834

CVE-2008-0364

2008-01-18T18:00:00.000-05:00

2018-10-15T17:59:06.627-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/ruttorrent-adv.txt MISC http://aluigi.org/poc/ruttorrent.zip CONFIRM http://download.utorrent.com/1.7.6/utorrent-1.7.6.txt CONFIRM http://forum.utorrent.com/viewtopic.php?id=29330 SREASON 3554 BUGTRAQ 20080116 Peers static overflow in BitTorrent 6.0 and uTorrent 1.7.5 BID 27321 XF bittorrent-peers-bo(39719) XF utorrent-peers-bo(39720) Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier, and 1.8-alpha-7834 and earlier in the 1.8.x series; on Windows allows remote attackers to cause a denial of service (application crash) via a long Unicode string representing a client version identifier.

cpe:/a:core_security_technologies:core_force:0.95.167

CVE-2008-0365

2008-01-18T18:00:00.000-05:00

2018-10-15T17:59:07.687-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://force.coresecurity.com/index.php?module=articles&func=display&aid=32 SREASON 3555 CONFIRM http://www.coresecurity.com/?action=item&id=2025 BUGTRAQ 20080117 CORE-2007-1119: CORE FORCE Kernel Buffer Overflow BID 27341 SECTRACK 1019245 VUPEN ADV-2008-0242 XF coreforce-firewall-registry-bo(39758) Multiple buffer overflows in CORE FORCE before 0.95.172 allow local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments to (1) IOCTL functions in the Firewall module or (2) SSDT hook handler functions in the Registry module.

cpe:/a:core_security_technologies:core_force:0.95.167

CVE-2008-0366

2008-01-18T18:00:00.000-05:00

2018-10-15T17:59:08.390-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://force.coresecurity.com/index.php?module=articles&func=display&aid=32 SREASON 3555 CONFIRM http://www.coresecurity.com/?action=item&id=2025 BUGTRAQ 20080117 CORE-2007-1119: CORE FORCE Kernel Buffer Overflow BID 27341 SECTRACK 1019245 VUPEN ADV-2008-0242 CORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, which allows local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments.

cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:3.0:beta2

CVE-2008-0367

2008-01-18T19:00:00.000-05:00

2018-10-26T10:19:22.637-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2018-10-26T09:34:02.713-04:00

MISC http://aviv.raffon.net/2008/01/02/YetAnotherDialogSpoofingFirefoxBasicAuthentication.aspx MISC http://aviv.raffon.net/2008/01/05/FirefoxDialogSpoofingFAQ.aspx CONFIRM http://blog.mozilla.com/security/2008/01/04/basicauth-dialog-realm-value-spoofing/ BUGTRAQ 20080103 Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication BUGTRAQ 20080103 Re: [Full-disclosure] Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication BID 27111 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=244273 Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authentication after the Realm text, which might make it easier for remote HTTP servers to conduct phishing and spoofing attacks.

cpe:/a:ibm:informix_dynamic_server:10.0

CVE-2008-0368

2008-01-18T19:00:00.000-05:00

2017-08-07T21:29:30.570-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20080131 IBM Informix Dynamic Server onedcu File Creation Vulnerability BID 27328 SECTRACK 1019237 VUPEN ADV-2008-0169 AIXAPAR IC54307 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg27011556 XF ibm-ids-onedcu-sqlidebug-unspecified(39751) onedcu in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument.

cpe:/a:ibm:informix_dynamic_server:10.00

CVE-2008-0369

2008-01-18T19:00:00.000-05:00

2017-08-07T21:29:30.633-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20080131 IBM Informix Dynamic Server SQLIDEBUG File Creation Vulnerability BID 27328 SECTRACK 1019237 VUPEN ADV-2008-0169 AIXAPAR IC54309 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg27011556 XF ibm-ids-onedcu-sqlidebug-unspecified(39751) XF ibm-ids-sqlidebug-unspecified(40009) Multiple unspecified programs in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allow local users to create arbitrary files by specifying the target file in the SQLIDEBUG environment variable, whose ownership is changed to the user invoking the programs.

cpe:/a:cpanel:cpanel:11.16

CVE-2008-0370

2008-01-22T15:00:00.000-05:00

2018-10-15T17:59:09.580-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aria-security.net/forum/showthread.php?p=1238 SREASON 3561 BUGTRAQ 20080116 cPanel Hosting Manager (dohtaccess.html) BID 27308 Cross-site scripting (XSS) vulnerability in dohtaccess.html in cPanel before 11.17 build 19417 allows remote attackers to inject arbitrary web script or HTML via the rurl parameter. NOTE: some of these details are obtained from third party information.

cpe:/a:alilg:alitalk:1.9.1.1

CVE-2008-0371

2008-01-22T15:00:00.000-05:00

2017-09-28T21:30:14.177-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27315 XF alitalk-receivertwo-sql-injection(39733) XF alitalk-adminindex-sql-injection(39735) XF alitalk-usercp-sql-injection(39736) XF alitalk-index-sql-injection(39745) EXPLOIT-DB 4922 Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via (1) the mohit parameter to (a) inc/receivertwo.php; and allow remote attackers to execute arbitrary SQL commands via (2) the id parameter to (b) inc/usercp.php, related to functionz/usercp.php; or (3) the username parameter to (c) admin/index.php, related to functionz/first_process.php, or (d) index.php. NOTE: some of these details are obtained from third party information.

cpe:/a:8e6:r3000_internet_filter:2.0.05.33 cpe:/a:8e6:r3000_internet_filter:2.0.10

CVE-2008-0372

2008-01-22T15:00:00.000-05:00

2018-10-15T17:59:10.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3557 BUGTRAQ 20080116 8e6 Technologies R3000 Internet Filter Bypass by Request Split BUGTRAQ 20080121 Re: 8e6 Technologies R3000 Internet Filter Bypass by Request Split BID 27309 XF r3000-urlfilter-security-bypass(39723) 8e6 R3000 Internet Filter 2.0.05.33, and other versions before 2.0.11, allows remote attackers to bypass intended restrictions via a fragmented HTTP request.

cpe:/a:php:f1_maxs_file_uploader

CVE-2008-0373

2008-01-22T15:00:00.000-05:00

2018-10-15T17:59:10.627-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SREASON 3572 BUGTRAQ 20080115 Max's File Uploader File Upload Vulnerability BID 27285 XF max-index-file-upload(39740) Unrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to upload and execute arbitrary PHP files.

cpe:/h:oki_printing_solutions:c5510_mfp_printer:cu_h2.15 cpe:/h:oki_printing_solutions:c5510_mfp_printer:pu_01.03.01 cpe:/h:oki_printing_solutions:c5510_mfp_printer:system_fw_1.01 cpe:/h:oki_printing_solutions:c5510_mfp_printer:web_page_1.00

CVE-2008-0374

2008-01-22T15:00:00.000-05:00

2018-10-15T17:59:11.017-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SREASON 3569 MISC http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html BUGTRAQ 20080117 [CSNC] OKI C5510MFP Printer Password Disclosure BID 27339 XF c5510mfp-configuration-info-disclosure(39775) OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777.

cpe:/h:oki_printing_solutions:c5510_mfp_printer

CVE-2008-0375

2008-01-22T15:00:00.000-05:00

2018-10-15T17:59:11.563-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SREASON 3569 MISC http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html BUGTRAQ 20080117 [CSNC] OKI C5510MFP Printer Password Disclosure BID 27339 XF c5510mfp-password-security-bypass(39776) Unspecified vulnerability in OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 allows remote attackers to set the password and obtain administrative access via unspecified vectors.

cpe:/a:softpedia:small_axe_weblog:0.3.1

CVE-2008-0376

2008-01-22T15:00:00.000-05:00

2017-09-28T21:30:14.223-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27345 XF smallaxeweblog-linkbar-file-include(39765) EXPLOIT-DB 4937 PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfile parameter.

cpe:/a:news:micronews

CVE-2008-0377

2008-01-22T15:00:00.000-05:00

2018-10-15T17:59:12.093-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SREASON 3556 BUGTRAQ 20080115 MicroNews Admin Direct Access vulnerability BID 27288 XF micronews-admin-authentication-bypass(39702) MicroNews allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin.php.

cpe:/a:nec:sockscap:2.40_051231

CVE-2008-0378

2008-01-22T15:00:00.000-05:00

2018-10-15T17:59:12.487-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3560 BUGTRAQ 20080118 SocksCap Stack Overflow (<= 2.40-051231) BID 27357 XF sockscap-hostname-bo(39781) Stack-based buffer overflow in SocksCap 2.40-051231 and earlier, when "Resolve all names remotely" is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long hostname.

cpe:/a:businessobjects:crystal_reports_xi:r2 cpe:/a:microsoft:activex:enterprise_tree_control

CVE-2008-0379

2008-01-22T15:00:00.000-05:00

2017-09-28T21:30:14.270-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27333 SECTRACK 1019239 XF crystalreports-enterprisetree-bo(39743) EXPLOIT-DB 4931 Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow.

cpe:/a:digital_data_communications:rtspvapgdecoder.dll:1.1.0.29

CVE-2008-0380

2008-01-22T15:00:00.000-05:00

2017-09-28T21:30:14.330-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27337 VUPEN ADV-2008-0182 EXPLOIT-DB 4932 Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29) allows remote attackers to execute arbitrary code via a long MP4Prefix property.

cpe:/a:mahara:mahara:0.9.0

CVE-2008-0381

2008-01-22T15:00:00.000-05:00

2008-09-05T17:34:55.200-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-01-23T10:00:00.000-05:00

BID 27348 CONFIRM https://eduforge.org/frs/shownotes.php?release_id=342 Unspecified vulnerability in Mahara before 0.9.1 has unknown impact and remote attack vectors, probably related to cross-site scripting (XSS) in uploaded files.

cpe:/a:mybulletinboard:mybulletinboard:1.0 cpe:/a:mybulletinboard:mybulletinboard:1.0.1 cpe:/a:mybulletinboard:mybulletinboard:1.0.2 cpe:/a:mybulletinboard:mybulletinboard:1.0.3 cpe:/a:mybulletinboard:mybulletinboard:1.0.4 cpe:/a:mybulletinboard:mybulletinboard:1.0_pr2 cpe:/a:mybulletinboard:mybulletinboard:1.1 cpe:/a:mybulletinboard:mybulletinboard:1.1.1 cpe:/a:mybulletinboard:mybulletinboard:1.1.2 cpe:/a:mybulletinboard:mybulletinboard:1.1.3 cpe:/a:mybulletinboard:mybulletinboard:1.1.4 cpe:/a:mybulletinboard:mybulletinboard:1.1.5 cpe:/a:mybulletinboard:mybulletinboard:1.1.7 cpe:/a:mybulletinboard:mybulletinboard:1.1.8 cpe:/a:mybulletinboard:mybulletinboard:1.2 cpe:/a:mybulletinboard:mybulletinboard:1.2.3 cpe:/a:mybulletinboard:mybulletinboard:1.2.5 cpe:/a:mybulletinboard:mybulletinboard:1.2.10 cpe:/a:mybulletinboard:mybulletinboard:1.10

CVE-2008-0382

2008-01-22T15:00:00.000-05:00

2018-10-15T17:59:12.877-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3559 BUGTRAQ 20080116 [waraxe-2008-SA#061] - Remote Code Execution in MyBB 1.2.10 BID 27322 EXPLOIT-DB 4927 EXPLOIT-DB 4928 Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameter to (1) forumdisplay.php or (2) a results action in search.php.

cpe:/a:mybb:mybb:1.2.10

CVE-2008-0383

2008-01-22T15:00:00.000-05:00

2018-10-15T17:59:13.517-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://community.mybboard.net/showthread.php?tid=27227 SREASON 3558 BUGTRAQ 20080116 [waraxe-2008-SA#062] - Multiple Sql Injections in MyBB 1.2.10 BID 27323 MISC http://www.waraxe.us/advisory-62.html XF mybb-moderationphp-sql-injection(39728) XF mybb-usergroups-sql-injection(39729) Multiple SQL injection vulnerabilities in MyBB 1.2.10 and earlier allow remote moderators and administrators to execute arbitrary SQL commands via (1) the mergepost parameter in a do_mergeposts action, (2) rid parameter in an allreports action, or (3) threads parameter in a do_multimovethreads action to (a) moderation.php; or (4) gid parameter to (b) admin/usergroups.php.

cpe:/o:openbsd:openbsd:4.2

CVE-2008-0384

2008-01-22T15:00:00.000-05:00

2018-10-30T12:25:27.670-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov MLIST [openbsd-security-announce] 20080111 errata 005 for OpenBSD 4.2: local users can provoke a kernel panic OPENBSD [4.2] 20080111 005: RELIABILITY FIX: January 11, 2008 BID 27252 SECTRACK 1019188 EXPLOIT-DB 4935 OpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the SIOCGIFRTLABEL IOCTL on an interface that does not have a route label, which triggers a NULL pointer dereference when the return value from the rtlabel_id2name function is not checked.

cpe:/a:urulu:urulu:2.1

CVE-2008-0385

2008-02-29T14:44:00.000-05:00

2018-10-15T17:59:14.313-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3707 MISC http://www.csnc.ch/misc/files/advisories/CVE-2008-0385.txt BUGTRAQ 20080228 Urulu 2.1 Blind SQL Injection Vulnerability (CVE-2008-0385) BID 28032 SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL commands via the connectionId parameter to index.php with (1) statprt/js/request or (2) dyn/js/request in the PATH_INFO.

cpe:/a:gentoo:xdg-utils:1.0.2

CVE-2008-0386

2008-02-04T18:00:00.000-05:00

2011-03-07T22:04:37.360-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=207331 SUSE SUSE-SR:2008:004 GENTOO GLSA-200801-21 CONFIRM http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-email.in?r1=1.24&r2=1.25 CONFIRM http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-email.in?view=log CONFIRM http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-email?r1=1.36&r2=1.37 CONFIRM http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-open.in?r1=1.17&r2=1.18 CONFIRM http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-open?r1=1.32&r2=1.33 CONFIRM http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-open?view=log MANDRIVA MDVSA-2008:031 BID 27528 SECTRACK 1019284 VUPEN ADV-2008-0342 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=429513 Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) xdg-open or (2) xdg-email.

cpe:/a:firebirdsql:firebird:1.0.3 cpe:/a:firebirdsql:firebird:1.5 cpe:/a:firebirdsql:firebird:1.5.0.4306 cpe:/a:firebirdsql:firebird:1.5.1 cpe:/a:firebirdsql:firebird:1.5.2 cpe:/a:firebirdsql:firebird:1.5.2.4731 cpe:/a:firebirdsql:firebird:1.5.3.4870 cpe:/a:firebirdsql:firebird:1.5.4.4910 cpe:/a:firebirdsql:firebird:1.5.5 cpe:/a:firebirdsql:firebird:2.0.0 cpe:/a:firebirdsql:firebird:2.0.0.12748 cpe:/a:firebirdsql:firebird:2.0.1 cpe:/a:firebirdsql:firebird:2.0.1.12855 cpe:/a:firebirdsql:firebird:2.0.2 cpe:/a:firebirdsql:firebird:2.0.3 cpe:/a:firebirdsql:firebird:2.1.0

CVE-2008-0387

2008-01-28T21:00:00.000-05:00

2018-10-26T10:19:34.027-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2018-10-26T09:41:23.107-04:00

GENTOO GLSA-200803-02 SREASON 3580 CONFIRM http://sourceforge.net/project/shownotes.php?group_id=9028&release_id=570800 CONFIRM http://tracker.firebirdsql.org/browse/CORE-1681 MISC http://www.coresecurity.com/?action=item&id=2095 DEBIAN DSA-1529 BUGTRAQ 20080128 CORE-2007-1219: Firebird Remote Memory Corruption BID 27403 XF firebird-xdrprotocol-integer-overflow(39996) Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_send, (5) op_start_and_send, and (6) op_start_send_and_receive XDR requests, which triggers memory corruption.

cpe:/a:wordpress:wp_forum:1.7.4

CVE-2008-0388

2008-01-22T21:00:00.000-05:00

2017-09-28T21:30:14.643-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20080216 WordPress forumaction (PAGE_id)(user)SQL Injectio CONFIRM http://weblogtoolscollection.com/archives/2008/01/21/wp-forum-plugin-security-bulletin/ BID 27362 VUPEN ADV-2008-0235 XF wpforum-index-sql-injection(39800) EXPLOIT-DB 4939 SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the user parameter in a showprofile action to the default URI.

cpe:/a:ibm:websphere_application_server:5.1.1 cpe:/a:ibm:websphere_application_server:5.1.1.1 cpe:/a:ibm:websphere_application_server:5.1.1.2 cpe:/a:ibm:websphere_application_server:5.1.1.3 cpe:/a:ibm:websphere_application_server:5.1.1.4 cpe:/a:ibm:websphere_application_server:5.1.1.5 cpe:/a:ibm:websphere_application_server:5.1.1.6 cpe:/a:ibm:websphere_application_server:5.1.1.7 cpe:/a:ibm:websphere_application_server:5.1.1.8 cpe:/a:ibm:websphere_application_server:5.1.1.9 cpe:/a:ibm:websphere_application_server:5.1.1.10 cpe:/a:ibm:websphere_application_server:5.1.1.12 cpe:/a:ibm:websphere_application_server:5.1.1.14 cpe:/a:ibm:websphere_application_server:5.1.1.15 cpe:/a:ibm:websphere_application_server:5.1.1.16 cpe:/a:ibm:websphere_application_server:5.1.1.17 cpe:/a:ibm:websphere_application_server:6.0 cpe:/a:ibm:websphere_application_server:6.0.1 cpe:/a:ibm:websphere_application_server:6.0.2 cpe:/a:ibm:websphere_application_server:6.0.2::fp17 cpe:/a:ibm:websphere_application_server:6.0.2.1 cpe:/a:ibm:websphere_application_server:6.0.2.3 cpe:/a:ibm:websphere_application_server:6.0.2.5 cpe:/a:ibm:websphere_application_server:6.0.2.7 cpe:/a:ibm:websphere_application_server:6.0.2.9 cpe:/a:ibm:websphere_application_server:6.0.2.11 cpe:/a:ibm:websphere_application_server:6.0.2.13 cpe:/a:ibm:websphere_application_server:6.0.2.19 cpe:/a:ibm:websphere_application_server:6.0.2.22 cpe:/a:ibm:websphere_application_server:6.0.2.23 cpe:/a:ibm:websphere_application_server:6.0.2.24 cpe:/a:ibm:websphere_application_server:6.0.2.25 cpe:/a:ibm:websphere_application_server:6.1 cpe:/a:ibm:websphere_application_server:6.1.1 cpe:/a:ibm:websphere_application_server:6.1.3 cpe:/a:ibm:websphere_application_server:6.1.5 cpe:/a:ibm:websphere_application_server:6.1.6 cpe:/a:ibm:websphere_application_server:6.1.7 cpe:/a:ibm:websphere_application_server:6.1.13 cpe:/a:ibm:websphere_application_server:6.1.14

CVE-2008-0389

2008-01-22T21:00:00.000-05:00

2017-08-07T21:29:31.463-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27371 SECTRACK 1019251 SECTRACK 1019894 VUPEN ADV-2008-0219 VUPEN ADV-2008-1133 AIXAPAR PK52059 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg27006879#51118 XF websphere-serveservlets-unspecified(39808) Unspecified vulnerability in the serveServletsByClassnameEnabled feature in IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.25, 6.1 through 6.1.0.14, and 5.1.1.x before 5.1.1.18 has unknown impact and attack vectors.

cpe:/a:auracms:auracms:1.62 cpe:/a:auracms:mod_block_statistik

CVE-2008-0390

2008-01-22T21:00:00.000-05:00

2017-09-28T21:30:14.830-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27342 XF auracms-stat-code-execution(39777) EXPLOIT-DB 4933 stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via the X-Forwarded-For HTTP header in a stat action to index.php, and execute online.db.txt via a certain request to index.php.

cpe:/a:alilg:alitalk:1.9.1.1

CVE-2008-0391

2008-01-22T21:00:00.000-05:00

2017-09-28T21:30:14.987-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27315 EXPLOIT-DB 4922 inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arbitrary user account via a modified lilil parameter, in conjunction with the ubild and pa parameters.

cpe:/a:microsoft:visual_basic:6.0:sp6:enterprise

CVE-2008-0392

2008-01-22T22:00:00.000-05:00

2017-09-28T21:30:15.050-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 27349 SECTRACK 1019258 VUPEN ADV-2008-0195 XF visualbasic-enterprise-dsr-bo(39773) EXPLOIT-DB 4938 Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary code via a .dsr file with a long (1) ConnectionName or (2) CommandName line.

cpe:/a:gradman:gradman:0.1.3

CVE-2008-0393

2008-01-22T22:00:00.000-05:00

2017-09-28T21:30:15.097-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27343 XF gradman-info-file-include(39768) EXPLOIT-DB 4936 Directory traversal vulnerability in info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tabla parameter, a different vector than CVE-2008-0361.

cpe:/a:citadel:smtp:7.10

CVE-2008-0394

2008-01-23T07:00:00.000-05:00

2017-09-28T21:30:15.143-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.milw0rm.com/sploits/2008-vs-GNU-citadel.tar.gz BID 27376 SECTRACK 1019255 VUPEN ADV-2008-0252 XF citadel-makeuserkey-bo(39807) EXPLOIT-DB 4949 Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information.

cpe:/a:kayako:supportsuite:3.11.01

CVE-2008-0395

2008-01-23T07:00:00.000-05:00

2018-10-15T17:59:15.703-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3573 BUGTRAQ 20080121 [waraxe-2008-SA#063] - Information Leakage in Kayako SupportSuite 3.11.01 MISC http://www.waraxe.us/advisory-63.html Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, which prints the contents of the $_SERVER superglobal.

cpe:/a:bitdefender:update_server

CVE-2008-0396

2008-01-23T07:00:00.000-05:00

2018-10-15T17:59:16.033-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov MISC http://oliver.greyhat.de/2008/01/19/bitdefender-unauthorized-remote-file-access-vulnerability/ SREASON 3568 MISC http://www.oliverkarow.de/research/bitdefender.txt BUGTRAQ 20080119 BitDefender Update Server - Unauthorized Remote File Access Vulnerability BID 27358 VUPEN ADV-2008-0213 XF bitdefender-http-server-directory-traversal(39802) Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.

cpe:/a:aflog.org:aflog:1.01

CVE-2008-0397

2008-01-23T07:00:00.000-05:00

2017-09-28T21:30:15.207-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27398 VUPEN ADV-2008-0255 XF aflog-comments-sql-injection(39825) EXPLOIT-DB 4958 Multiple SQL injection vulnerabilities in aflog 1.01, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to comments.php and (2) an unspecified parameter to view.php.

cpe:/a:aflog:aflog:1.01

CVE-2008-0398

2008-01-23T07:00:00.000-05:00

2017-09-28T21:30:15.270-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27398 VUPEN ADV-2008-0255 EXPLOIT-DB 4958 Cross-site scripting (XSS) vulnerability in aflog 1.01, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment form.

cpe:/a:toshiba:surveillix:1.0.0.4

CVE-2008-0399

2008-01-23T07:00:00.000-05:00

2017-09-28T21:30:15.330-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://retrogod.altervista.org/rgod_toshiba_control.html BID 27360 VUPEN ADV-2008-0214 XF toshiba-recordsend-bo(39792) EXPLOIT-DB 4946 Multiple buffer overflows in Toshiba Surveillance (Surveillix) RecordSend ActiveX control (MeIpCamX.DLL 1.0.0.4) allow remote attackers to execute arbitrary code via long arguments to the (1) SetPort and (2) SetIpAddress methods.

cpe:/a:modern:modern:1.3.2 cpe:/a:singapore:singapore:0.10.1

CVE-2008-0400

2008-01-23T07:00:00.000-05:00

2011-03-07T22:04:39.143-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://trew.icenetx.net/toolz/advisory-singapore-modern-template.txt BID 27382 VUPEN ADV-2008-0234 Cross-site scripting (XSS) vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter to default.php.

cpe:/a:ibm:tivoli_provisioning_manager_os_deployment:5.1.0.2

CVE-2008-0401

2008-01-23T07:00:00.000-05:00

2017-08-07T21:29:31.900-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20080122 IBM Tivoli PMfOSD HTTP Request Method Buffer Overflow Vulnerability CERT-VN VU#158609 BID 27387 SECTRACK 1019249 VUPEN ADV-2008-0239 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg24018010 XF tivoli-provisioning-http-unspecified(39819) Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) before 5.1.0.3 Interim Fix 3 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an HTTP request with a long method string to port 443/tcp.

cpe:/a:ibm:websphere_business_modeler:6.0.2_1::advanced cpe:/a:ibm:websphere_business_modeler:6.0.2_1::basic

CVE-2008-0402

2008-01-23T07:00:00.000-05:00

2017-08-07T21:29:31.947-04:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27389 SECTRACK 1019252 VUPEN ADV-2008-0254 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg24018060 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg24018061 AIXAPAR JR28175 XF websphere-repository-weak-security(39830) Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows remote authenticated users to bypass intended access restrictions and delete unspecified repository resources via unknown vectors, even when they are not administrators or members of the repository's owning group.

cpe:/h:belkin:f5d9230-4

CVE-2008-0403

2008-01-23T07:00:00.000-05:00

2018-10-15T17:59:16.797-04:00

5.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3566 BUGTRAQ 20080119 Belkin Wireless G Plus MIMO Router F5D9230-4 Authentication Bypass Vulnerability BID 27359 VUPEN ADV-2008-0215 XF belkin-savecfgfile-authentication-bypass(39793) EXPLOIT-DB 4941 The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and modify configuration via a direct request to SaveCfgFile.cgi.

cpe:/a:mantis:mantis:0.9 cpe:/a:mantis:mantis:0.9.1 cpe:/a:mantis:mantis:0.10 cpe:/a:mantis:mantis:0.10.1 cpe:/a:mantis:mantis:0.10.2 cpe:/a:mantis:mantis:0.11 cpe:/a:mantis:mantis:0.11.1 cpe:/a:mantis:mantis:0.12 cpe:/a:mantis:mantis:0.13 cpe:/a:mantis:mantis:0.13.1 cpe:/a:mantis:mantis:0.14 cpe:/a:mantis:mantis:0.14.1 cpe:/a:mantis:mantis:0.14.2 cpe:/a:mantis:mantis:0.14.3 cpe:/a:mantis:mantis:0.14.4 cpe:/a:mantis:mantis:0.14.5 cpe:/a:mantis:mantis:0.14.6 cpe:/a:mantis:mantis:0.14.7 cpe:/a:mantis:mantis:0.14.8 cpe:/a:mantis:mantis:0.15 cpe:/a:mantis:mantis:0.15.1 cpe:/a:mantis:mantis:0.15.2 cpe:/a:mantis:mantis:0.15.3 cpe:/a:mantis:mantis:0.15.4 cpe:/a:mantis:mantis:0.15.5 cpe:/a:mantis:mantis:0.15.6 cpe:/a:mantis:mantis:0.15.7 cpe:/a:mantis:mantis:0.15.8 cpe:/a:mantis:mantis:0.15.9 cpe:/a:mantis:mantis:0.15.10 cpe:/a:mantis:mantis:0.15.11 cpe:/a:mantis:mantis:0.15.12 cpe:/a:mantis:mantis:0.16 cpe:/a:mantis:mantis:0.16.0 cpe:/a:mantis:mantis:0.16.1 cpe:/a:mantis:mantis:0.17 cpe:/a:mantis:mantis:0.17.0 cpe:/a:mantis:mantis:0.17.1 cpe:/a:mantis:mantis:0.17.2 cpe:/a:mantis:mantis:0.17.3 cpe:/a:mantis:mantis:0.17.4 cpe:/a:mantis:mantis:0.17.4a cpe:/a:mantis:mantis:0.17.5 cpe:/a:mantis:mantis:0.18 cpe:/a:mantis:mantis:0.18.0 cpe:/a:mantis:mantis:0.18.0_rc1 cpe:/a:mantis:mantis:0.18.0a2 cpe:/a:mantis:mantis:0.18.0a3 cpe:/a:mantis:mantis:0.18.0a4 cpe:/a:mantis:mantis:0.18.2 cpe:/a:mantis:mantis:0.18.3 cpe:/a:mantis:mantis:0.18a1 cpe:/a:mantis:mantis:0.19.0 cpe:/a:mantis:mantis:0.19.0_rc1 cpe:/a:mantis:mantis:0.19.0a cpe:/a:mantis:mantis:0.19.0a1 cpe:/a:mantis:mantis:0.19.0a2 cpe:/a:mantis:mantis:0.19.1 cpe:/a:mantis:mantis:0.19.2 cpe:/a:mantis:mantis:0.19.3 cpe:/a:mantis:mantis:0.19.4 cpe:/a:mantis:mantis:1.0 cpe:/a:mantis:mantis:1.0.0_rc1 cpe:/a:mantis:mantis:1.0.0_rc2 cpe:/a:mantis:mantis:1.0.0_rc3 cpe:/a:mantis:mantis:1.0.0_rc4 cpe:/a:mantis:mantis:1.0.0a1 cpe:/a:mantis:mantis:1.0.0a2 cpe:/a:mantis:mantis:1.0.0a3 cpe:/a:mantis:mantis:1.0.1 cpe:/a:mantis:mantis:1.1 cpe:/a:mantis:mantis:1.1.0 cpe:/a:mantis:mantis:1.1.0a1

CVE-2008-0404

2008-01-23T07:00:00.000-05:00

2017-08-07T21:29:32.070-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://sourceforge.net/project/shownotes.php?release_id=569765 BID 27367 VUPEN ADV-2008-0232 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=429552 XF mantis-mostactive-xss(39801) FEDORA FEDORA-2008-0796 FEDORA FEDORA-2008-0856 Cross-site scripting (XSS) vulnerability in Mantis before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Most active bugs" summary.

cpe:/a:hfs:http_file_server:2.2b

CVE-2008-0405

2008-01-28T19:00:00.000-05:00

2018-10-15T17:59:17.487-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SREASON 3581 MISC http://www.rejetto.com/hfs/?f=wn BUGTRAQ 20080123 Syhunt: HFS (HTTP File Server) Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities BID 27423 MISC http://www.syhunt.com/advisories/hfshack.txt XF hfs-unspecified-command-execution(39873) Multiple directory traversal vulnerabilities in HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allow remote attackers to create arbitrary (1) files and (2) directories via a .. (dot dot) in an account name, when requesting the / URI; and (3) append arbitrary data to a file via a .. (dot dot) in an account name, when requesting a URI composed of a "/?%0a" sequence followed by the data.

cpe:/a:hfs:http_file_server:2.2b

CVE-2008-0406

2008-01-28T19:00:00.000-05:00

2018-10-15T17:59:18.187-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

cpe:/a:hfs:http_file_server:2.2b

CVE-2008-0407

2008-01-28T19:00:00.000-05:00

2018-10-15T17:59:18.893-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3582 MISC http://www.rejetto.com/hfs/?f=wn BUGTRAQ 20080123 Syhunt: HFS (HTTP File Server) Username Spoofing and Log Forging/Injection Vulnerability BID 27423 MISC http://www.syhunt.com/advisories/hfshack.txt XF hfs-username-spoofing(39877) HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authentication, regardless of whether authentication succeeded, which might make it more difficult for an administrator to determine who made a remote request.

cpe:/a:hfs:http_file_server:2.2b

CVE-2008-0408

2008-01-28T19:00:00.000-05:00

2018-10-15T17:59:19.610-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3582 MISC http://www.rejetto.com/hfs/?f=wn BUGTRAQ 20080123 Syhunt: HFS (HTTP File Server) Username Spoofing and Log Forging/Injection Vulnerability BID 27423 MISC http://www.syhunt.com/advisories/hfshack.txt XF hfs-unspecified-log-injection(39876) HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of this text during HTTP Basic Authentication.

cpe:/a:hfs:http_file_server:2.2b

CVE-2008-0409

2008-01-28T19:00:00.000-05:00

2018-10-15T17:59:20.313-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3583 MISC http://www.rejetto.com/hfs/?f=wn BUGTRAQ 20080123 Syhunt: HFS (HTTP File Server) Template Cross-Site Scripting and Information Disclosure Vulnerabilities BID 27423 MISC http://www.syhunt.com/advisories/hfshack.txt XF hfs-host-xss(39870) Cross-site scripting (XSS) vulnerability in HTTP File Server (HFS) before 2.2c allows remote attackers to inject arbitrary web script or HTML via the userinfo subcomponent of a URL.

cpe:/a:hfs:http_file_server:2.2b

CVE-2008-0410

2008-01-28T19:00:00.000-05:00

2018-10-15T17:59:21.017-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3583 MISC http://www.rejetto.com/hfs/?f=wn BUGTRAQ 20080123 Syhunt: HFS (HTTP File Server) Template Cross-Site Scripting and Information Disclosure Vulnerabilities BID 27423 MISC http://www.syhunt.com/advisories/hfshack.txt XF hfs-sendhfsidentifier-info-disclosure(39871) HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id element such as <id>%version%</id> in HTTP Basic Authentication instead of a username and password, as demonstrated by placing this id element in the userinfo subcomponent of a URL.

cpe:/a:ghostscript:ghostscript:0 cpe:/a:ghostscript:ghostscript:8.0.1 cpe:/a:ghostscript:ghostscript:8.15 cpe:/a:ghostscript:ghostscript:8.61

CVE-2008-0411

2008-02-28T16:44:00.000-05:00

2018-10-15T17:59:21.797-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SUSE SUSE-SA:2008:010 MISC http://scary.beasts.org/security/CESA-2008-001.html SLACKWARE SSA:2008-062-01 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0082 DEBIAN DSA-1510 GENTOO GLSA-200803-14 MANDRIVA MDVSA-2008:055 REDHAT RHSA-2008:0155 BUGTRAQ 20080228 rPSA-2008-0082-1 espgs BUGTRAQ 20080228 Ghostscript buffer overflow BID 28017 SECTRACK 1019511 UBUNTU USN-599-1 VUPEN ADV-2008-0693 CONFIRM https://issues.rpath.com/browse/RPL-2217 FEDORA FEDORA-2008-1998 Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:thunderbird:2.0.0.11

CVE-2008-0412

2008-02-08T17:00:00.000-05:00

2018-10-15T17:59:25.830-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://browser.netscape.com/releasenotes/ SUSE SUSE-SA:2008:008 SLACKWARE SSA:2008-061-01 SUNALERT 238492 SUNALERT 239546 CONFIRM http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0051 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0093 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 DEBIAN DSA-1484 DEBIAN DSA-1485 DEBIAN DSA-1489 DEBIAN DSA-1506 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:048 MANDRIVA MDVSA-2008:062 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-01.html REDHAT RHSA-2008:0103 REDHAT RHSA-2008:0104 REDHAT RHSA-2008:0105 BUGTRAQ 20080209 rPSA-2008-0051-1 firefox BUGTRAQ 20080212 FLEA-2008-0001-1 firefox BUGTRAQ 20080229 rPSA-2008-0093-1 thunderbird BID 27683 SECTRACK 1019320 UBUNTU USN-576-1 UBUNTU USN-582-1 UBUNTU USN-582-2 VUPEN ADV-2008-0453 VUPEN ADV-2008-0454 VUPEN ADV-2008-0627 VUPEN ADV-2008-1793 VUPEN ADV-2008-2091 CONFIRM https://bugzilla.mozilla.org/buglist.cgi?bug_id=398088,393141,364801,346405,396613,394337,406290 CONFIRM https://issues.rpath.com/browse/RPL-1995 FEDORA FEDORA-2008-1435 FEDORA FEDORA-2008-1459 FEDORA FEDORA-2008-1535 FEDORA FEDORA-2008-2060 FEDORA FEDORA-2008-2118 The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors.

cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:thunderbird:2.0.0.11

CVE-2008-0413

2008-02-08T17:00:00.000-05:00

2018-10-15T17:59:37.190-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://browser.netscape.com/releasenotes/ SUSE SUSE-SA:2008:008 SLACKWARE SSA:2008-061-01 SUNALERT 238492 SUNALERT 239546 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0051 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0093 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 DEBIAN DSA-1484 DEBIAN DSA-1485 DEBIAN DSA-1489 DEBIAN DSA-1506 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:048 MANDRIVA MDVSA-2008:062 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-01.html REDHAT RHSA-2008:0103 REDHAT RHSA-2008:0104 REDHAT RHSA-2008:0105 BUGTRAQ 20080209 rPSA-2008-0051-1 firefox BUGTRAQ 20080212 FLEA-2008-0001-1 firefox BUGTRAQ 20080229 rPSA-2008-0093-1 thunderbird BID 27683 SECTRACK 1019321 UBUNTU USN-576-1 UBUNTU USN-582-1 UBUNTU USN-582-2 VUPEN ADV-2008-0453 VUPEN ADV-2008-0454 VUPEN ADV-2008-0627 VUPEN ADV-2008-1793 VUPEN ADV-2008-2091 CONFIRM https://bugzilla.mozilla.org/buglist.cgi?bug_id=407720,390597,373344,398085,406572,391028,406036,402087 CONFIRM https://issues.rpath.com/browse/RPL-1995 FEDORA FEDORA-2008-1435 FEDORA FEDORA-2008-1459 FEDORA FEDORA-2008-1535 FEDORA FEDORA-2008-2060 FEDORA FEDORA-2008-2118 The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of watch and eval, (3) certain uses of the mousedown event listener, and other vectors.

cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:seamonkey:1.1.7

CVE-2008-0414

2008-02-08T17:00:00.000-05:00

2018-10-15T17:59:48.017-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://browser.netscape.com/releasenotes/ SUSE SUSE-SA:2008:008 SUNALERT 238492 CONFIRM http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0051 DEBIAN DSA-1484 DEBIAN DSA-1485 DEBIAN DSA-1489 DEBIAN DSA-1506 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:048 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-02.html BUGTRAQ 20080209 rPSA-2008-0051-1 firefox BUGTRAQ 20080212 FLEA-2008-0001-1 firefox BID 27683 SECTRACK 1019330 UBUNTU USN-576-1 VUPEN ADV-2008-0453 VUPEN ADV-2008-0627 VUPEN ADV-2008-1793 CONFIRM https://bugzilla.mozilla.org/buglist.cgi?bug_id=404451,408034,404391,405299 FEDORA FEDORA-2008-1435 FEDORA FEDORA-2008-1459 FEDORA FEDORA-2008-1535 Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing."

cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:thunderbird:2.0.0.11

CVE-2008-0415

2008-02-08T17:00:00.000-05:00

2018-10-15T17:59:53.003-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://browser.netscape.com/releasenotes/ SUSE SUSE-SA:2008:008 SLACKWARE SSA:2008-061-01 SUNALERT 238492 SUNALERT 239546 CONFIRM http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0051 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0093 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 DEBIAN DSA-1484 DEBIAN DSA-1485 DEBIAN DSA-1489 DEBIAN DSA-1506 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:048 MANDRIVA MDVSA-2008:062 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-03.html REDHAT RHSA-2008:0103 REDHAT RHSA-2008:0104 REDHAT RHSA-2008:0105 BUGTRAQ 20080209 rPSA-2008-0051-1 firefox BUGTRAQ 20080212 FLEA-2008-0001-1 firefox BUGTRAQ 20080229 rPSA-2008-0093-1 thunderbird BID 27683 SECTRACK 1019327 UBUNTU USN-576-1 UBUNTU USN-582-1 UBUNTU USN-582-2 VUPEN ADV-2008-0453 VUPEN ADV-2008-0454 VUPEN ADV-2008-0627 VUPEN ADV-2008-1793 VUPEN ADV-2008-2091 CONFIRM https://bugzilla.mozilla.org/buglist.cgi?bug_id=386695,393761,393762,399298,407289,372075,363597 CONFIRM https://issues.rpath.com/browse/RPL-1995 FEDORA FEDORA-2008-1435 FEDORA FEDORA-2008-1459 FEDORA FEDORA-2008-1535 FEDORA FEDORA-2008-2060 FEDORA FEDORA-2008-2118 Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."

cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:thunderbird:2.0.0.11

CVE-2008-0416

2008-02-11T22:00:00.000-05:00

2018-10-03T17:53:01.650-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov JVN JVN#21563357 JVNDB JVNDB-2008-000021 SUNALERT 238492 SUNALERT 239546 DEBIAN DSA-1484 DEBIAN DSA-1485 DEBIAN DSA-1489 GENTOO GLSA-200805-18 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-13.html BID 29303 TURBO TLSA-2008-9 UBUNTU USN-592-1 CERT TA08-087A VUPEN ADV-2008-1793 VUPEN ADV-2008-2091 MISC https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252,381412,407161 XF firefox-character-encoding-xss(40488) UBUNTU USN-576-1 Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow remote attackers to inject arbitrary web script or HTML via certain character encodings, including (1) a backspace character that is treated as whitespace, (2) 0x80 with Shift_JIS encoding, and (3) "zero-length non-ASCII sequences" in certain Asian character sets.

cpe:/a:mozilla:firefox:2.0.0.11

CVE-2008-0417

2008-02-08T17:00:00.000-05:00

2018-10-15T18:00:05.223-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://browser.netscape.com/releasenotes/ SUSE SUSE-SA:2008:008 SUNALERT 238492 CONFIRM http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0051 DEBIAN DSA-1484 DEBIAN DSA-1485 DEBIAN DSA-1489 DEBIAN DSA-1506 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:048 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-04.html REDHAT RHSA-2008:0103 REDHAT RHSA-2008:0104 BUGTRAQ 20080209 rPSA-2008-0051-1 firefox BUGTRAQ 20080212 FLEA-2008-0001-1 firefox BID 27683 SECTRACK 1019334 UBUNTU USN-576-1 VUPEN ADV-2008-0453 VUPEN ADV-2008-0627 VUPEN ADV-2008-1793 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=394610 FEDORA FEDORA-2008-1435 FEDORA FEDORA-2008-1459 FEDORA FEDORA-2008-1535 CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password.

cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:thunderbird:2.0.0.11

CVE-2008-0418

2008-02-08T17:00:00.000-05:00

2018-10-15T18:00:11.330-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://browser.netscape.com/releasenotes/ SUSE SUSE-SA:2008:008 SLACKWARE SSA:2008-061-01 SUNALERT 238492 SUNALERT 239546 CONFIRM http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0051 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0093 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 DEBIAN DSA-1484 DEBIAN DSA-1485 DEBIAN DSA-1489 DEBIAN DSA-1506 GENTOO GLSA-200805-18 MISC http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/ CERT-VN VU#309608 MANDRIVA MDVSA-2008:048 MANDRIVA MDVSA-2008:062 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-05.html REDHAT RHSA-2008:0103 REDHAT RHSA-2008:0104 REDHAT RHSA-2008:0105 BUGTRAQ 20080209 rPSA-2008-0051-1 firefox BUGTRAQ 20080212 FLEA-2008-0001-1 firefox BUGTRAQ 20080229 rPSA-2008-0093-1 thunderbird BID 27406 SECTRACK 1019329 UBUNTU USN-576-1 UBUNTU USN-582-1 UBUNTU USN-582-2 VUPEN ADV-2008-0263 VUPEN ADV-2008-0453 VUPEN ADV-2008-0454 VUPEN ADV-2008-0627 VUPEN ADV-2008-1793 VUPEN ADV-2008-2091 CONFIRM https://issues.rpath.com/browse/RPL-1995 FEDORA FEDORA-2008-1435 FEDORA FEDORA-2008-1459 FEDORA FEDORA-2008-1535 FEDORA FEDORA-2008-2060 FEDORA FEDORA-2008-2118 Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using "flat" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js.

cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:seamonkey:1.1.7

CVE-2008-0419

2008-02-08T17:00:00.000-05:00

2018-10-15T18:00:21.660-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://browser.netscape.com/releasenotes/ SUSE SUSE-SA:2008:008 SUNALERT 238492 CONFIRM http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0051 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0093 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 DEBIAN DSA-1484 DEBIAN DSA-1485 DEBIAN DSA-1489 DEBIAN DSA-1506 GENTOO GLSA-200805-18 CERT-VN VU#879056 MANDRIVA MDVSA-2008:048 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-06.html REDHAT RHSA-2008:0103 REDHAT RHSA-2008:0104 REDHAT RHSA-2008:0105 BUGTRAQ 20080209 rPSA-2008-0051-1 firefox BUGTRAQ 20080212 FLEA-2008-0001-1 firefox BUGTRAQ 20080229 rPSA-2008-0093-1 thunderbird BID 27683 SECTRACK 1019328 UBUNTU USN-576-1 VUPEN ADV-2008-0453 VUPEN ADV-2008-0627 VUPEN ADV-2008-1793 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=400556 CONFIRM https://issues.rpath.com/browse/RPL-1995 FEDORA FEDORA-2008-1435 FEDORA FEDORA-2008-1459 FEDORA FEDORA-2008-1535 FEDORA FEDORA-2008-2060 FEDORA FEDORA-2008-2118 Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles.

cpe:/a:mozilla:firefox:0.1 cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.3 cpe:/a:mozilla:firefox:0.4 cpe:/a:mozilla:firefox:0.5 cpe:/a:mozilla:firefox:0.6 cpe:/a:mozilla:firefox:0.6.1 cpe:/a:mozilla:firefox:0.7 cpe:/a:mozilla:firefox:0.7.1 cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:thunderbird:0.1 cpe:/a:mozilla:thunderbird:0.5 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.8 cpe:/a:mozilla:thunderbird:0.9 cpe:/a:mozilla:thunderbird:1.0 cpe:/a:mozilla:thunderbird:1.0.2 cpe:/a:mozilla:thunderbird:1.0.5 cpe:/a:mozilla:thunderbird:1.0.6 cpe:/a:mozilla:thunderbird:1.0.8 cpe:/a:mozilla:thunderbird:1.5 cpe:/a:mozilla:thunderbird:1.5.0.2 cpe:/a:mozilla:thunderbird:1.5.0.4 cpe:/a:mozilla:thunderbird:1.5.0.5 cpe:/a:mozilla:thunderbird:1.5.0.7 cpe:/a:mozilla:thunderbird:1.5.0.9 cpe:/a:mozilla:thunderbird:1.5.0.12 cpe:/a:mozilla:thunderbird:1.5.0.13 cpe:/a:mozilla:thunderbird:1.5.0.14 cpe:/a:mozilla:thunderbird:2.0.0.0 cpe:/a:mozilla:thunderbird:2.0.0.4 cpe:/a:mozilla:thunderbird:2.0.0.5 cpe:/a:mozilla:thunderbird:2.0.0.6 cpe:/a:mozilla:thunderbird:2.0.0.9 cpe:/a:mozilla:thunderbird:2.0.0.11

CVE-2008-0420

2008-02-11T22:00:00.000-05:00

2018-10-15T18:00:30.223-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://browser.netscape.com/releasenotes/ SECTRACK 1019434 SUNALERT 238492 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:048 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-07.html BUGTRAQ 20080216 [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service BID 27826 UBUNTU USN-582-1 UBUNTU USN-582-2 VUPEN ADV-2008-0627 VUPEN ADV-2008-1793 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=408076 XF firefox-bmp-information-disclosure(40491) XF firefox-bmp-dos(40606) UBUNTU USN-576-1 FEDORA FEDORA-2008-2060 FEDORA FEDORA-2008-2118 modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.

cpe:/a:invision_power_services:invision_gallery:2.0.7

CVE-2008-0421

2008-01-23T16:00:00.000-05:00

2017-09-28T21:30:16.283-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

EXPLOIT-DB 4966 SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in a rate command.

cpe:/a:boastmachine:boastmachine:3.1

CVE-2008-0422

2008-01-23T17:00:00.000-05:00

2018-10-15T18:00:33.677-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3563 BUGTRAQ 20080121 boastMachine <=3.1 SQL Injection Vulnerbility BUGTRAQ 20081120 boastMachine v3.1 Remote Sql Injection BID 27369 BID 32379 VUPEN ADV-2008-0227 XF boastmachine-mail-sql-injection(39813) EXPLOIT-DB 4952 SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:lama:lama_software

CVE-2008-0423

2008-01-23T17:00:00.000-05:00

2017-09-28T21:30:16.410-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 27380 VUPEN ADV-2008-0230 XF lamasoftware-myconf-file-include(39821) EXPLOIT-DB 4955 Multiple PHP remote file inclusion vulnerabilities in Lama Software allow remote attackers to execute arbitrary PHP code via a URL in the MY_CONF[classRoot] parameter to (1) inc.steps.access_error.php, (2) inc.steps.check_login.php, or (3) inc.steps.init_system.php in admin/functions/.

cpe:/a:mooseguy_blog_system:mgbs:1.0

CVE-2008-0424

2008-01-23T17:00:00.000-05:00

2017-09-28T21:30:16.473-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27377 VUPEN ADV-2008-0226 XF mooseguy-blog-sql-injection(39816) EXPLOIT-DB 4951 SQL injection vulnerability in blog.php in Mooseguy Blog System (MGBS) 1.0 allows remote attackers to execute arbitrary SQL commands via the month parameter.

cpe:/a:frimousse:frimousse:0.0.2

CVE-2008-0425

2008-01-23T17:00:00.000-05:00

2017-09-28T21:30:16.580-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27385 VUPEN ADV-2008-0216 XF frimousse-explorerdir-directory-traversal(39797) EXPLOIT-DB 4943 Absolute path traversal vulnerability in explorerdir.php in Frimousse 0.0.2 allows remote attackers to read arbitrary files and list arbitrary directories via a full pathname in the name parameter.

cpe:/a:pacercms:pacercms:0.6.1

CVE-2008-0426

2008-01-23T17:00:00.000-05:00

2018-10-15T18:00:34.427-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://pacercms.sourceforge.net/index.php/2008/01/21/pacercms-061-streamlines-code-base-addresses-security-issue/ BUGTRAQ 20080122 PacerCMS Multiple Vulnerabilities (XSS/SQL) BID 27386 XF pacercms-submit-xss(39832) Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PacerCMS before 0.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) headline, or (3) text field in a message.

cpe:/a:bloo:bloofoxcms:0.3

CVE-2008-0427

2008-01-23T17:00:00.000-05:00

2018-10-15T18:00:34.847-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov MISC http://bugreport.ir/?/27 BUGTRAQ 20080120 Bloofox CMS SQL Injection (Authentication bypass) , Source code BUGTRAQ 20080120 Bloofox CMS SQL Injection (Authentication bypass) , Source codedisclosure BID 27361 VUPEN ADV-2008-0218 XF bloofoxcms-file-directory-traversal(39795) EXPLOIT-DB 4945 Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

cpe:/a:bloofoxcms:bloofoxcms:0.3

CVE-2008-0428

2008-01-23T17:00:00.000-05:00

2018-10-15T18:00:35.537-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://bugreport.ir/?/27 BUGTRAQ 20080120 Bloofox CMS SQL Injection (Authentication bypass) , Source code BUGTRAQ 20080120 Bloofox CMS SQL Injection (Authentication bypass) , Source codedisclosure BID 27361 VUPEN ADV-2008-0218 XF bloofoxcms-index-sql-injection(39794) EXPLOIT-DB 4945 Multiple SQL injection vulnerabilities in the login function in system/class_permissions.php in bloofoxCMS 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to admin/index.php.

cpe:/a:alstrasoft:forum_pay_per_post_exchange:2.0

CVE-2008-0429

2008-01-23T17:00:00.000-05:00

2017-09-28T21:30:16.770-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27381 VUPEN ADV-2008-0231 XF alstrasoft-indexphp-sql-injection(39820) EXPLOIT-DB 4956 EXPLOIT-DB 6401 SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forum_catview action.

cpe:/a:360_web_manager:360_web_manager:3.0

CVE-2008-0430

2008-01-23T17:00:00.000-05:00

2017-09-28T21:30:16.830-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27364 VUPEN ADV-2008-0217 XF 360web-form-sql-injection(39796) EXPLOIT-DB 4944 SQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the IDFM parameter.

cpe:/a:idmos:idmos_cms:1.0

CVE-2008-0431

2008-01-23T17:00:00.000-05:00

2017-09-28T21:30:16.893-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27379 VUPEN ADV-2008-0229 XF idmos-download-directory-traversal(39823) EXPLOIT-DB 4954 Directory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileName parameter.

cpe:/a:agares_media:phpautovideo:2.21

CVE-2008-0432

2008-01-23T17:00:00.000-05:00

2018-10-15T18:00:36.223-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3567 BUGTRAQ 20080118 Agares PhpAutoVideo 2.21(XSS/RFI) Multiple Remote Vulnerabilities BID 27346 VUPEN ADV-2008-0225 XF phpautovideo-index-xss(39771) Cross-site scripting (XSS) vulnerability in index.php in phpAutoVideo 2.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

cpe:/a:agares_media:phpautovideo:2.21

CVE-2008-0433

2008-01-23T17:00:00.000-05:00

2018-10-15T18:00:36.693-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SREASON 3567 BUGTRAQ 20080118 Agares PhpAutoVideo 2.21(XSS/RFI) Multiple Remote Vulnerabilities BID 27346 VUPEN ADV-2008-0225 XF phpautovideo-sidebar-file-include(39770) PHP remote file inclusion vulnerability in theme/phpAutoVideo/LightTwoOh/sidebar.php in Agares phpAutoVideo 2.21 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter, a different vector than CVE-2007-6614.

cpe:/a:gecad_technologies:axigen_mail_server:5.0.2

CVE-2008-0434

2008-01-23T17:00:00.000-05:00

2018-10-15T18:00:37.193-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov FULLDISC 20080120 AXIGEN 5.0.x AXIMilter Format String Exploit SREASON 3570 BUGTRAQ 20080120 AXIGEN 5.0.x AXIMilter Format String Exploit BID 27363 VUPEN ADV-2008-0237 XF axigen-aximilter-format-string(39803) EXPLOIT-DB 4947 Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command.

cpe:/a:ozjournals:ozjournals:2.1.1

CVE-2008-0435

2008-01-23T17:00:00.000-05:00

2017-09-28T21:30:17.020-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27375 VUPEN ADV-2008-0228 XF ozjournals-id-directory-traversal(39815) EXPLOIT-DB 4953 Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the id parameter in a printpreview action.

cpe:/a:pd9_software:megabbs:1.5.14b

CVE-2008-0436

2008-01-23T17:00:00.000-05:00

2018-10-15T18:00:37.897-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3565 BUGTRAQ 20080120 MegaBBS ASP Forum Cross-Site Scripting BID 27368 XF megabbs-upload-xss(39812) Cross-site scripting (XSS) vulnerability in profile-upload/upload.asp in PD9 Software MegaBBS 1.5.14b allows remote attackers to inject arbitrary web script or HTML via the target parameter.

cpe:/a:hp:virtual_rooms:1.0.0.100 cpe:/a:microsoft:activex

CVE-2008-0437

2008-01-23T17:00:00.000-05:00

2017-09-28T21:30:17.080-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov FULLDISC 20080122 HP Virtual Rooms WebHPVCInstall Control Multiple Buffer Overflows BID 27384 VUPEN ADV-2008-0236 XF hpvirtualrooms-hpvirtualrooms14-activex-bo(39836) EXPLOIT-DB 4959 Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value. NOTE: some of these details are obtained from third party information.

cpe:/a:novemberborn:sifr:2.0.2

CVE-2008-0438

2008-01-23T17:00:00.000-05:00

2018-10-15T18:00:38.270-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://novemberborn.net/sifr/2.0.3 SREASON 3571 MISC http://www.procheckup.com/Vulnerability_PR07-38.php BUGTRAQ 20080122 PR07-38: XSS on sIFR BUGTRAQ 20080122 Re: PR07-38: XSS on sIFR BUGTRAQ 20080205 Re: PR07-38: XSS on sIFR BID 27394 XF sifr-fontname-xss(39835) Cross-site scripting (XSS) vulnerability in the font rendering functionality in Novemberborn sIFR 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the txt parameter to a Flash (SWF) file, as demonstrated by fonts/FuturaLt.swf.

cpe:/a:deluxebb:deluxebb:1.1

CVE-2008-0439

2008-01-23T17:00:00.000-05:00

2018-10-15T18:00:39.147-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3564 BUGTRAQ 20080122 DeluxeBB 1.1 XSS Vulnerabilitie BID 27401 XF deluxbb-attachmentsheader-xss(39829) Cross-site scripting (XSS) vulnerability in templates/default/admincp/attachments_header.php in DeluxeBB 1.1 allows remote attackers to inject arbitrary web script or HTML via the lang_listofmatches parameter.

cpe:/a:alstrasoft:forum_pay_per_post_exchange:2.0

CVE-2008-0440

2008-01-23T18:00:00.000-05:00

2017-09-28T21:30:17.143-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov EXPLOIT-DB 4956 AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts.

cpe:/a:ibm:tivoli_business_service_manager:4.1.1

CVE-2008-0441

2008-01-24T19:00:00.000-05:00

2017-08-07T21:29:33.713-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27388 SECTRACK 1019250 VUPEN ADV-2008-0240 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg24017939 XF tbsm-reconfig-information-disclosure(39822) IBM Tivoli Business Service Manager (TBSM) 4.1.1 stores passwords in cleartext (1) after external authentication, which triggers writing the password to SM_server.log; and (2) after a reconfig action; which allows local users to obtain sensitive information.

cpe:/a:small_axe_solutions:weblog:0.3.1

CVE-2008-0442

2008-01-24T19:00:00.000-05:00

2008-09-05T17:35:05.167-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2008-01-25T08:46:00.000-05:00

ALLOWS_USER_ACCESS

BID 27383 PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the ffile parameter, a different vector than CVE-2008-0376. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:lycos:fileuploader.dll:2.0.2

CVE-2008-0443

2008-01-24T19:00:00.000-05:00

2017-09-28T21:30:17.207-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27411 VUPEN ADV-2008-0253 XF lycosfileuploader-fileuploader-activex-bo(39849) EXPLOIT-DB 4967 Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows remote attackers to execute arbitrary code via a long HandwriterFilename property value. NOTE: some of these details are obtained from third party information.

cpe:/a:elog:elog:1.0.0 cpe:/a:elog:elog:1.0.1 cpe:/a:elog:elog:1.0.2 cpe:/a:elog:elog:1.0.3 cpe:/a:elog:elog:1.0.4 cpe:/a:elog:elog:1.0.5 cpe:/a:elog:elog:1.1.0 cpe:/a:elog:elog:1.1.1 cpe:/a:elog:elog:1.1.2 cpe:/a:elog:elog:1.1.3 cpe:/a:elog:elog:1.2.0 cpe:/a:elog:elog:1.2.1 cpe:/a:elog:elog:1.2.2 cpe:/a:elog:elog:1.2.3 cpe:/a:elog:elog:1.2.4 cpe:/a:elog:elog:1.2.5 cpe:/a:elog:elog:1.2.6 cpe:/a:elog:elog:1.3.0 cpe:/a:elog:elog:1.3.1 cpe:/a:elog:elog:1.3.2 cpe:/a:elog:elog:1.3.3 cpe:/a:elog:elog:1.3.4 cpe:/a:elog:elog:1.3.5 cpe:/a:elog:elog:1.3.6 cpe:/a:elog:elog:2.0.0 cpe:/a:elog:elog:2.0.1 cpe:/a:elog:elog:2.0.2 cpe:/a:elog:elog:2.0.3 cpe:/a:elog:elog:2.0.4 cpe:/a:elog:elog:2.0.5 cpe:/a:elog:elog:2.1.0 cpe:/a:elog:elog:2.1.1 cpe:/a:elog:elog:2.1.2 cpe:/a:elog:elog:2.1.3 cpe:/a:elog:elog:2.2.0 cpe:/a:elog:elog:2.2.1 cpe:/a:elog:elog:2.2.2 cpe:/a:elog:elog:2.2.3 cpe:/a:elog:elog:2.2.4 cpe:/a:elog:elog:2.2.5 cpe:/a:elog:elog:2.3.0 cpe:/a:elog:elog:2.3.1 cpe:/a:elog:elog:2.3.2 cpe:/a:elog:elog:2.3.3 cpe:/a:elog:elog:2.3.4 cpe:/a:elog:elog:2.3.5 cpe:/a:elog:elog:2.3.6 cpe:/a:elog:elog:2.3.7 cpe:/a:elog:elog:2.3.8 cpe:/a:elog:elog:2.3.9 cpe:/a:elog:elog:2.4.0 cpe:/a:elog:elog:2.4.1 cpe:/a:elog:elog:2.5.0 cpe:/a:elog:elog:2.5.1 cpe:/a:elog:elog:2.5.2 cpe:/a:elog:elog:2.5.3 cpe:/a:elog:elog:2.5.4 cpe:/a:elog:elog:2.5.5 cpe:/a:elog:elog:2.5.6 cpe:/a:elog:elog:2.5.7 cpe:/a:elog:elog:2.5.8 cpe:/a:elog:elog:2.5.9 cpe:/a:elog:elog:2.6.0 cpe:/a:elog:elog:2.6.1 cpe:/a:elog:elog:2.6.2 cpe:/a:elog:elog:2.6.3 cpe:/a:elog:elog:2.6.4 cpe:/a:elog:elog:2.6.5

CVE-2008-0444

2008-01-24T19:00:00.000-05:00

2017-08-07T21:29:33.820-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://midas.psi.ch/elog/download/ChangeLog BID 27399 VUPEN ADV-2008-0265 XF elog-subtext-xss(39828) Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components.

CVE-2008-0445

2008-01-24T19:00:00.000-05:00

2017-08-07T21:29:33.883-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27399 VUPEN ADV-2008-0265 XF elog-elogd-logbook-dos(39824) The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (infinite loop) via crafted logbook entries. NOTE: some of these details are obtained from third party information.

cpe:/a:julian_pawlowski:lulieblog:1.02

CVE-2008-0446

2008-01-24T19:00:00.000-05:00

2017-09-28T21:30:17.253-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27416 XF lulieblog-voircom-sql-injection(39854) EXPLOIT-DB 4969 SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:foojan:php_weblog:1.0

CVE-2008-0447

2008-01-24T19:00:00.000-05:00

2017-09-28T21:30:17.317-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27415 XF foojanwms-index-sql-injection(39855) EXPLOIT-DB 4968 SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL commands via the story parameter.

cpe:/a:cybergl_dev_team:phpsearch

CVE-2008-0448

2008-01-24T19:00:00.000-05:00

2017-08-07T21:29:34.243-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20080120 Php Search Remote Inclusion XF phpsearch-classhttpretriever-file-include(39805) PHP remote file inclusion vulnerability in utils/class_HTTPRetriever.php in phpSearch allows remote attackers to execute arbitrary PHP code via a URL in the libcurlemuinc parameter.

cpe:/a:rocksalt_international:vp_asp:4.00 cpe:/a:rocksalt_international:vp_asp:4.50 cpe:/a:rocksalt_international:vp_asp:5.00 cpe:/a:rocksalt_international:vp_asp:5.50 cpe:/a:rocksalt_international:vp_asp:6.00 cpe:/a:rocksalt_international:vp_asp:6.50

CVE-2008-0449

2008-01-24T19:00:00.000-05:00

2017-08-07T21:29:34.320-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27347 XF vpasp-paypalresult-sql-injection(39811) SQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:blog_cms:blog_cms:4.2.1_c

CVE-2008-0450

2008-01-24T19:00:00.000-05:00

2018-10-15T18:00:39.520-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SREASON 3576 BUGTRAQ 20080121 BLOG:CMS 4.2.1.c (DIR_PLUGINS) Multiple Remote File Include Multiple PHP remote file inclusion vulnerabilities in BLOG:CMS 4.2.1.c allow remote attackers to execute arbitrary PHP code via a URL in the (1) DIR_PLUGINS parameter to (a) index.php, and the (2) DIR_LIBS parameter to (b) media.php and (c) xmlrpc/server.php in admin/.

cpe:/a:pacercms:pacercms:0.6

CVE-2008-0451

2008-01-24T19:00:00.000-05:00

2018-10-15T18:00:39.707-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://pacercms.sourceforge.net/index.php/2008/01/21/pacercms-061-streamlines-code-base-addresses-security-issue/ SREASON 3574 BUGTRAQ 20080122 PacerCMS Multiple Vulnerabilities (XSS/SQL) BID 27397 XF pacercms-articleedit-sql-injection(39833) Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) siteadmin/article-edit.php; and unspecified parameters to (2) submitted-edit.php, (3) page-edit.php, (4) section-edit.php, (5) staff-edit.php, and (6) staff-access.php in siteadmin/.

cpe:/a:siteman:siteman:1.1.9

CVE-2008-0452

2008-01-24T19:00:00.000-05:00

2017-09-28T21:30:17.363-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27422 EXPLOIT-DB 4973 Directory traversal vulnerability in articles.php in Siteman 1.1.9 allows remote attackers to read arbitrary files via directory traversal sequences in the cat parameter in a viewart action.

cpe:/a:easysitenetwork:recipe_website_script

CVE-2008-0453

2008-01-24T19:00:00.000-05:00

2017-09-28T21:30:17.410-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27405 XF easysitenetworkrecipe-list-sql-injection(39853) EXPLOIT-DB 4960 SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL commands via the categoryid parameter.

cpe:/a:microsoft:ie cpe:/a:skype_technologies:skype:3.5 cpe:/a:skype_technologies:skype:3.6 cpe:/a:skype_technologies:skype:3.6.0.244

CVE-2008-0454

2008-01-24T20:00:00.000-05:00

2018-10-15T18:00:40.160-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov FULLDISC 20080117 Skype videomood XSS FULLDISC 20080117 Re: Skype videomood XSS MISC http://aviv.raffon.net/2008/01/17/SkypeCrosszoneScriptingVulnerability.aspx CONFIRM http://share.skype.com/sites/security/2008/01/skype_cross_zone_scripting_vul.html CONFIRM http://skype.com/security/skype-sb-2008-001.html CONFIRM http://skype.com/security/skype-sb-2008-001-update1.html MISC http://www.critical.lt/?opinions/show/1470 MISC http://www.gnucitizen.org/blog/vulnerabilities-in-skype CERT-VN VU#248184 BUGTRAQ 20080117 RE: Skype videomood XSS BID 27338 VUPEN ADV-2008-0194 XF skype-addvideotochat-code-execution(39754) Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Title field of a (1) Dailymotion and possibly (2) Metacafe movie in the Skype video gallery, accessible through a search within the "Add video to chat" dialog, aka "videomood XSS."

cpe:/a:apache:http_server:- cpe:/a:apache:http_server:1.3 cpe:/a:apache:http_server:1.3.1 cpe:/a:apache:http_server:1.3.3 cpe:/a:apache:http_server:1.3.11 cpe:/a:apache:http_server:1.3.12 cpe:/a:apache:http_server:1.3.14 cpe:/a:apache:http_server:1.3.17 cpe:/a:apache:http_server:1.3.18 cpe:/a:apache:http_server:1.3.19 cpe:/a:apache:http_server:1.3.20 cpe:/a:apache:http_server:1.3.22 cpe:/a:apache:http_server:1.3.23 cpe:/a:apache:http_server:1.3.24 cpe:/a:apache:http_server:1.3.25 cpe:/a:apache:http_server:1.3.26 cpe:/a:apache:http_server:1.3.27 cpe:/a:apache:http_server:1.3.28 cpe:/a:apache:http_server:1.3.29 cpe:/a:apache:http_server:1.3.31 cpe:/a:apache:http_server:1.3.32 cpe:/a:apache:http_server:1.3.33 cpe:/a:apache:http_server:1.3.34 cpe:/a:apache:http_server:1.3.35 cpe:/a:apache:http_server:1.3.36 cpe:/a:apache:http_server:1.3.37 cpe:/a:apache:http_server:1.3.39 cpe:/a:apache:http_server:2.0 cpe:/a:apache:http_server:2.0.9 cpe:/a:apache:http_server:2.0.28 cpe:/a:apache:http_server:2.0.28:beta cpe:/a:apache:http_server:2.0.32 cpe:/a:apache:http_server:2.0.35 cpe:/a:apache:http_server:2.0.36 cpe:/a:apache:http_server:2.0.37 cpe:/a:apache:http_server:2.0.38 cpe:/a:apache:http_server:2.0.39 cpe:/a:apache:http_server:2.0.40 cpe:/a:apache:http_server:2.0.41 cpe:/a:apache:http_server:2.0.42 cpe:/a:apache:http_server:2.0.43 cpe:/a:apache:http_server:2.0.44 cpe:/a:apache:http_server:2.0.45 cpe:/a:apache:http_server:2.0.46 cpe:/a:apache:http_server:2.0.47 cpe:/a:apache:http_server:2.0.48 cpe:/a:apache:http_server:2.0.49 cpe:/a:apache:http_server:2.0.50 cpe:/a:apache:http_server:2.0.51 cpe:/a:apache:http_server:2.0.52 cpe:/a:apache:http_server:2.0.53 cpe:/a:apache:http_server:2.0.54 cpe:/a:apache:http_server:2.0.55 cpe:/a:apache:http_server:2.0.56 cpe:/a:apache:http_server:2.0.58 cpe:/a:apache:http_server:2.0.59 cpe:/a:apache:http_server:2.0.60 cpe:/a:apache:http_server:2.0.61 cpe:/a:apache:http_server:2.2.0 cpe:/a:apache:http_server:2.2.2 cpe:/a:apache:http_server:2.2.3 cpe:/a:apache:http_server:2.2.4 cpe:/a:apache:http_server:2.2.6

CVE-2008-0455

2008-01-24T20:00:00.000-05:00

2018-10-30T12:25:27.497-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov REDHAT RHSA-2012:1591 REDHAT RHSA-2012:1592 REDHAT RHSA-2012:1594 REDHAT RHSA-2013:0130 GENTOO GLSA-200803-19 SREASON 3575 SECTRACK 1019256 MISC http://www.mindedsecurity.com/MSA01150108.html BUGTRAQ 20080122 Apache mod_negotiation Xss and Http Response Splitting BID 27409 XF apache-modnegotiation-xss(39867) MLIST [httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by uploading a file with a name containing XSS sequences and a file extension, which leads to injection within a (1) "406 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the extension is omitted in a request for the file.

cpe:/a:apache:http_server:1.3.0 cpe:/a:apache:http_server:1.3.1 cpe:/a:apache:http_server:1.3.1.1 cpe:/a:apache:http_server:1.3.2 cpe:/a:apache:http_server:1.3.3 cpe:/a:apache:http_server:1.3.4 cpe:/a:apache:http_server:1.3.5 cpe:/a:apache:http_server:1.3.6 cpe:/a:apache:http_server:1.3.7 cpe:/a:apache:http_server:1.3.8 cpe:/a:apache:http_server:1.3.9 cpe:/a:apache:http_server:1.3.10 cpe:/a:apache:http_server:1.3.11 cpe:/a:apache:http_server:1.3.12 cpe:/a:apache:http_server:1.3.13 cpe:/a:apache:http_server:1.3.14 cpe:/a:apache:http_server:1.3.15 cpe:/a:apache:http_server:1.3.16 cpe:/a:apache:http_server:1.3.17 cpe:/a:apache:http_server:1.3.18 cpe:/a:apache:http_server:1.3.19 cpe:/a:apache:http_server:1.3.20 cpe:/a:apache:http_server:1.3.22 cpe:/a:apache:http_server:1.3.23 cpe:/a:apache:http_server:1.3.24 cpe:/a:apache:http_server:1.3.25 cpe:/a:apache:http_server:1.3.26 cpe:/a:apache:http_server:1.3.27 cpe:/a:apache:http_server:1.3.28 cpe:/a:apache:http_server:1.3.29 cpe:/a:apache:http_server:1.3.30 cpe:/a:apache:http_server:1.3.31 cpe:/a:apache:http_server:1.3.32 cpe:/a:apache:http_server:1.3.33 cpe:/a:apache:http_server:1.3.34 cpe:/a:apache:http_server:1.3.35 cpe:/a:apache:http_server:1.3.36 cpe:/a:apache:http_server:1.3.37 cpe:/a:apache:http_server:1.3.38 cpe:/a:apache:http_server:1.3.39 cpe:/a:apache:http_server:2.0.0 cpe:/a:apache:http_server:2.0.9 cpe:/a:apache:http_server:2.0.28 cpe:/a:apache:http_server:2.0.28:beta cpe:/a:apache:http_server:2.0.32 cpe:/a:apache:http_server:2.0.32:beta cpe:/a:apache:http_server:2.0.34:beta cpe:/a:apache:http_server:2.0.35 cpe:/a:apache:http_server:2.0.36 cpe:/a:apache:http_server:2.0.37 cpe:/a:apache:http_server:2.0.38 cpe:/a:apache:http_server:2.0.39 cpe:/a:apache:http_server:2.0.40 cpe:/a:apache:http_server:2.0.41 cpe:/a:apache:http_server:2.0.42 cpe:/a:apache:http_server:2.0.43 cpe:/a:apache:http_server:2.0.44 cpe:/a:apache:http_server:2.0.45 cpe:/a:apache:http_server:2.0.46 cpe:/a:apache:http_server:2.0.47 cpe:/a:apache:http_server:2.0.48 cpe:/a:apache:http_server:2.0.49 cpe:/a:apache:http_server:2.0.50 cpe:/a:apache:http_server:2.0.51 cpe:/a:apache:http_server:2.0.52 cpe:/a:apache:http_server:2.0.53 cpe:/a:apache:http_server:2.0.54 cpe:/a:apache:http_server:2.0.55 cpe:/a:apache:http_server:2.0.56 cpe:/a:apache:http_server:2.0.57 cpe:/a:apache:http_server:2.0.58 cpe:/a:apache:http_server:2.0.59 cpe:/a:apache:http_server:2.0.60 cpe:/a:apache:http_server:2.0.61 cpe:/a:apache:http_server:2.2.0 cpe:/a:apache:http_server:2.2.1 cpe:/a:apache:http_server:2.2.2 cpe:/a:apache:http_server:2.2.3 cpe:/a:apache:http_server:2.2.4 cpe:/a:apache:http_server:2.2.5 cpe:/a:apache:http_server:2.2.6

CVE-2008-0456

2008-01-24T20:00:00.000-05:00

2019-08-15T05:15:20.513-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2009-05-12 REDHAT RHSA-2013:0130 GENTOO GLSA-200803-19 SREASON 3575 SECTRACK 1019256 CONFIRM http://support.apple.com/kb/HT3549 MISC http://www.mindedsecurity.com/MSA01150108.html BUGTRAQ 20080122 Apache mod_negotiation Xss and Http Response Splitting BID 27409 CERT TA09-133A VUPEN ADV-2009-1297 XF apache-modnegotiation-response-splitting(39893) MLIST [httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by uploading a file with a multi-line name containing HTTP header sequences and a file extension, which leads to injection within a (1) "406 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the extension is omitted in a request for the file.

cpe:/a:symantec:backupexec_system_recovery:7.0 cpe:/a:symantec:backupexec_system_recovery:7.01

CVE-2008-0457

2008-02-07T16:00:00.000-05:00

2018-10-15T18:00:43.613-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://seer.entsupport.symantec.com/docs/297171.htm BUGTRAQ 20080206 ZDI-08-003: Symantec Backup Exec Remote File Upload Vulnerability BID 27487 SECTRACK 1019303 CONFIRM http://www.symantec.com/avcenter/security/Content/2008.02.04.html VUPEN ADV-2008-0413 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-003.html EXPLOIT-DB 5078 Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.

cpe:/a:slaed:slaed_cms:2.5_lite

CVE-2008-0458

2008-01-25T11:00:00.000-05:00

2017-09-28T21:30:17.533-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27426 VUPEN ADV-2008-0308 XF slaedcms-index-file-include(39897) EXPLOIT-DB 4975 Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the newlang parameter to index.php.

cpe:/a:liquidsilvercms:liquidsilvercms:0.3 cpe:/a:liquidsilvercms:liquidsilvercms:0.35

CVE-2008-0459

2008-01-25T11:00:00.000-05:00

2017-09-28T21:30:17.597-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 27425 VUPEN ADV-2008-0309 XF liquidsilvercms-index-file-include(39895) EXPLOIT-DB 4976 Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the update parameter.

cpe:/a:mediawiki:mediawiki:1.7.0 cpe:/a:mediawiki:mediawiki:1.8.0 cpe:/a:mediawiki:mediawiki:1.8.1 cpe:/a:mediawiki:mediawiki:1.8.2 cpe:/a:mediawiki:mediawiki:1.8.3 cpe:/a:mediawiki:mediawiki:1.8.4 cpe:/a:mediawiki:mediawiki:1.9.0 cpe:/a:mediawiki:mediawiki:1.9.1 cpe:/a:mediawiki:mediawiki:1.9.2 cpe:/a:mediawiki:mediawiki:1.9.3 cpe:/a:mediawiki:mediawiki:1.9.4 cpe:/a:mediawiki:mediawiki:1.10.0 cpe:/a:mediawiki:mediawiki:1.10.1 cpe:/a:mediawiki:mediawiki:1.10.2 cpe:/a:mediawiki:mediawiki:1.11 cpe:/a:mediawiki:mediawiki:1.11.0rc1 cpe:/a:mediawiki:mediawiki_botquery_ext cpe:/a:microsoft:ie

CVE-2008-0460

2008-01-25T11:00:00.000-05:00

2017-08-07T21:29:34.790-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MLIST [MediaWiki-announce] 20080124 MediaWiki 1.11.1, 1.10.3, 1.9.5 released BID 28137 VUPEN ADV-2008-0280 XF mediawiki-api-xss(39901) FEDORA FEDORA-2008-2245 FEDORA FEDORA-2008-2288 Cross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10 through 1.10.2, 1.9 through 1.9.4, and 1.8; and (2) the BotQuery extension for MediaWiki 1.7 and earlier; when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:francisco_burzi:php-nuke:8.0_final

CVE-2008-0461

2008-01-25T11:00:00.000-05:00

2017-09-28T21:30:17.660-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27408 VUPEN ADV-2008-0264 XF phpnuke-index-search-sql-injection(39850) EXPLOIT-DB 4965 SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a comments action to modules.php. NOTE: some of these details are obtained from third party information.

cpe:/a:drupal:archive_module:5_1.7 cpe:/a:drupal:drupal

CVE-2008-0462

2008-01-25T11:00:00.000-05:00

2017-08-07T21:29:34.900-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/213478 BID 27436 VUPEN ADV-2008-0278 XF drupal-archive-unspecified-xss(39898) Cross-site scripting (XSS) vulnerability in the Archive 5.x before 5.x-1.8 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:drupal:workflow:4.7.x-1.1 cpe:/a:drupal:workflow:5.x-1.1

CVE-2008-0463

2008-01-25T11:00:00.000-05:00

2017-08-07T21:29:34.993-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/213473 BID 27444 VUPEN ADV-2008-0279 XF workflow-messages-xss(39896) Cross-site scripting (XSS) vulnerability in the Workflow 4.7.x before 4.7.x-1.2 and 5.x before 5.x-1.2 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving node properties.

cpe:/a:absofort:aconon_mail_enterprise_sql:11.5.1:2004 cpe:/a:absofort:aconon_mail_enterprise_sql:11.7.0:2007

CVE-2008-0464

2008-01-25T11:00:00.000-05:00

2017-09-28T21:30:17.707-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://burnachurch.com/67/directory-traversal-luecke-in-aconon-mail/ FULLDISC 20080124 Directory Traversal Vulnerability in Aconon Mail BID 27427 VUPEN ADV-2008-0310 EXPLOIT-DB 4977 Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterprise SQL 11.5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter.

cpe:/a:seagullproject.org:seagull:0.6.3

CVE-2008-0465

2008-01-25T11:00:00.000-05:00

2017-09-28T21:30:17.770-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://seagullproject.org/publisher/articleview/action/view/frmArticleID/98/ VIM 20080129 Seagull 0.6.3 Remote File Disclosure Vulnerability fixed BID 27437 VUPEN ADV-2008-0311 XF seagullstable-optimizer-directory-traversal(39902) EXPLOIT-DB 4980 Directory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the files parameter.

cpe:/a:webwiz:web_wiz_forums:9.07 cpe:/a:webwiz:web_wiz_newspad:1.02 cpe:/a:webwiz:web_wiz_rich_text_editor:4.0

CVE-2008-0466

2008-01-28T19:00:00.000-05:00

2018-10-15T18:00:44.333-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3584 SECTRACK 1019267 MISC http://www.bugreport.ir/?/29 MISC http://www.bugreport.ir/?/31 BUGTRAQ 20080123 Web Wiz Forums Directory traversal BUGTRAQ 20080123 Web Wiz Rich Text Editor Directory traversal + HTM/HTML filecreation on the server BID 27419 MISC http://www.webwizguide.com/webwizrichtexteditor/kb/release_notes.asp EXPLOIT-DB 4970 EXPLOIT-DB 4971 Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files. NOTE: this can be leveraged for listings outside the configured directory tree by exploiting a separate directory traversal vulnerability.

cpe:/a:firebirdsql:firebird:2.0.3 cpe:/a:firebirdsql:firebird:2.1:rc1

CVE-2008-0467

2008-01-28T21:00:00.000-05:00

2017-08-07T21:29:35.117-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov GENTOO GLSA-200803-02 CONFIRM http://sourceforge.net/project/shownotes.php?group_id=9028&release_id=570800 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=570816&group_id=9028 CONFIRM http://tracker.firebirdsql.org/browse/CORE-1603 DEBIAN DSA-1529 BID 27467 SECTRACK 1019277 VUPEN ADV-2008-0300 XF firebird-username-bo(39981) Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username.

cpe:/a:flinx:flinx:1.3

CVE-2008-0468

2008-01-29T15:00:00.000-05:00

2017-09-28T21:30:17.893-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27448 VUPEN ADV-2008-0313 XF flinx-category-sql-injection(39930) EXPLOIT-DB 4985 SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:tiger_php_news_system:tiger_php_news_system:1.0b

CVE-2008-0469

2008-01-29T15:00:00.000-05:00

2018-10-15T18:00:45.333-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3587 BUGTRAQ 20080124 Tiger PHP News System SQL Injection BID 27445 VUPEN ADV-2008-0312 XF tigerphpnewssystem-catid-sql-injection(39908) EXPLOIT-DB 4984 SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newscat action.

cpe:/a:comodo:comodo_antivirus:2.0 cpe:/a:microsoft:activex

CVE-2008-0470

2008-01-29T15:00:00.000-05:00

2017-09-28T21:30:18.020-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27424 XF comodo-antivirus-command-execution(39904) EXPLOIT-DB 4974 A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method.

cpe:/a:phpbb:phpbb:2.0.22

CVE-2008-0471

2008-01-29T15:00:00.000-05:00

2018-10-15T18:00:45.943-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463589 SREASON 3585 DEBIAN DSA-1488 BUGTRAQ 20080123 phpBB 2.0.22 Remote PM Delete XSRF Vulnerability Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages (PM) as arbitrary users via a deleteall action.

cpe:/a:woltlab:burning_board:2.3.6_pl2

CVE-2008-0472

2008-01-29T15:00:00.000-05:00

2018-10-15T18:00:46.363-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3586 BUGTRAQ 20080123 Woltlab Burning Board 2.3.6 PL2 Remote Delete Thread XSRF Vulnerability XF wbb-modcp-csrf(39878) Cross-site request forgery (CSRF) vulnerability in modcp.php in Woltlab Burning Board (wBB) 2.3.6 PL2 allows remote attackers to delete threads as moderators or administrators via a thread_del action.

cpe:/a:web_wiz:rich_text_editor:4.0

CVE-2008-0473

2008-01-29T15:00:00.000-05:00

2018-10-15T18:00:46.723-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3584 MISC http://www.bugreport.ir/?/31 BUGTRAQ 20080123 Web Wiz Rich Text Editor Directory traversal + HTM/HTML filecreation on the server BID 27419 BID 27420 SECTRACK 1019267 EXPLOIT-DB 4971 RTE_popup_save_file.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload (1) .html and (2) .htm files via unspecified vectors.

cpe:/a:manageengine:applications_manager:8.1_build_8100

CVE-2008-0474

2008-01-29T15:00:00.000-05:00

2017-08-07T21:29:35.417-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27443 XF manageengine-multiple-xss(39914) Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 8.1 build 8100 allow remote attackers to inject arbitrary web script or HTML via the (1) showlink parameter to jsp/DiscoveryProfiles.jsp; the (2) attributeIDs, (3) attributeToSelect, (4) redirectto, and (5) resourceid parameters to (a) jsp/ThresholdActionConfiguration.jsp; the (6) page and (7) redirect parameters to (b) jsp/UpdateGlobalSettings.jsp; and the (8) haid and (9) returnpath parameters to (c) showTile.do. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:manageengine:applications_manager:8.1_build_8100

CVE-2008-0475

2008-01-29T15:00:00.000-05:00

2017-08-07T21:29:35.463-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27443 XF manageengine-home-information-disclosure(39917) ManageEngine Applications Manager 8.1 build 8100 allows remote attackers to obtain sensitive information ( Home->Summary) via an invalid URI, as demonstrated by the "/-" URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:manageengine:applications_manager:8.1_build_8100

CVE-2008-0476

2008-01-29T15:00:00.000-05:00

2017-08-07T21:29:35.510-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27443 XF manageengine-checks-security-bypass(39915) ManageEngine Applications Manager 8.1 build 8100 does not check authentication for monitorType.do and unspecified other pages, which allows remote attackers to obtain sensitive information and change settings via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:move_networks_inc:move_media_player:1.0.0.1

CVE-2008-0477

2008-01-29T15:00:00.000-05:00

2017-09-28T21:30:18.143-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27438 SECTRACK 1019270 VUPEN ADV-2008-0274 XF movenetworks-qmpupgrade-bo(39913) EXPLOIT-DB 4979 Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgrade Manager allows remote attackers to execute arbitrary code via a long first argument to the Upgrade method. NOTE: some of these details are obtained from third party information.

cpe:/a:setcms:setcms:3.6.5

CVE-2008-0478

2008-01-29T15:00:00.000-05:00

2017-09-28T21:30:18.207-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 27407 XF setcms-index-file-include(39864) EXPLOIT-DB 4962 Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the set parameter, as demonstrated by sending a certain CLIENT_IP HTTP header in an enter action to index.php, and injecting PHP sequences into files/enter.set, which is then included by index.php.

cpe:/a:web_wiz:newspad:1.02

CVE-2008-0479

2008-01-29T15:00:00.000-05:00

2018-10-15T18:00:47.270-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3588 MISC http://www.bugreport.ir/?/30 BUGTRAQ 20080123 Web Wiz NewsPad Directory traversal BID 27419 SECTRACK 1019268 CONFIRM http://www.webwizguide.com/webwiznewspad/kb/release_notes.asp XF newspad-rte-directory-traversal(39863) EXPLOIT-DB 4972 Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter.

cpe:/a:web_wiz:web_wiz_forums:9.07

CVE-2008-0480

2008-01-29T15:00:00.000-05:00

2018-10-15T18:00:48.067-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3589 MISC http://www.bugreport.ir/?/29 BUGTRAQ 20080123 Web Wiz Forums Directory traversal BID 27419 SECTRACK 1019266 CONFIRM http://www.webwizguide.com/webwizforums/kb/release_notes.asp XF webwiz-rte-filebrowser-directory-traversal(39856) EXPLOIT-DB 4970 Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter to (1) RTE_file_browser.asp or (2) file_browser.asp.

cpe:/a:web_wiz:rich_text_editor:4.0

CVE-2008-0481

2008-01-29T15:00:00.000-05:00

2018-10-15T18:00:48.957-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3584 SECTRACK 1019267 MISC http://www.bugreport.ir/?/31 BUGTRAQ 20080123 Web Wiz Rich Text Editor Directory traversal + HTM/HTML filecreation on the server BID 27419 CONFIRM http://www.webwizguide.com/webwizrichtexteditor/kb/release_notes.asp XF editor-rte-directory-traversal(39868) EXPLOIT-DB 4971 Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter in a save action.

cpe:/a:mplayer:mplayer:1.02rc2

CVE-2008-0485

2008-02-05T07:00:00.000-05:00

2018-10-15T18:00:49.740-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20080204 CORE-2008-0122: MPlayer arbitrary pointer dereference GENTOO GLSA-200803-16 SREASON 3607 MISC http://www.coresecurity.com/?action=item&id=2102 DEBIAN DSA-1496 MANDRIVA MDVSA-2008:045 CONFIRM http://www.mplayerhq.hu/design7/news.html BUGTRAQ 20080204 CORE-2008-0122: MPlayer arbitrary pointer dereference BID 27499 SECTRACK 1019299 VUPEN ADV-2008-0406 Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag.

cpe:/a:mplayer:mplayer:1.02rc2 cpe:/a:xine:xine-lib:1.1.10

CVE-2008-0486

2008-02-05T07:00:00.000-05:00

2018-10-15T18:00:50.897-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=209106 CONFIRM http://bugs.xine-project.org/show_bug.cgi?id=38 FULLDISC 20080204 CORE-2007-1218: MPlayer 1.0rc2 buffer overflow vulnerability SUSE SUSE-SR:2008:006 GENTOO GLSA-200802-12 GENTOO GLSA-200803-16 SREASON 3608 CONFIRM http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=574735 MISC http://www.coresecurity.com/?action=item&id=2103 DEBIAN DSA-1496 DEBIAN DSA-1536 MANDRIVA MDVSA-2008:045 MANDRIVA MDVSA-2008:046 CONFIRM http://www.mplayerhq.hu/design7/news.html BUGTRAQ 20080204 CORE-2007-1218: MPlayer 1.0rc2 buffer overflow vulnerability BID 27441 UBUNTU USN-635-1 VUPEN ADV-2008-0406 VUPEN ADV-2008-0421 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=431541 FEDORA FEDORA-2008-1543 FEDORA FEDORA-2008-1581 Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow.

cpe:/a:the_net_guys:aspired2protect

CVE-2008-0487

2008-01-30T17:00:00.000-05:00

2018-10-15T18:00:54.363-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3598 BUGTRAQ 20080126 ASPired2Protect bypass BID 27474 XF aspired2protect-login-sql-injection(39989) Multiple SQL injection vulnerabilities in login.asp in ASPired2Protect allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. NOTE: some of these details are obtained from third party information.

cpe:/a:vb_marketing:vb_marketing

CVE-2008-0488

2008-01-30T17:00:00.000-05:00

2018-10-15T18:00:54.787-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SREASON 3596 BUGTRAQ 20080128 VB Marketing "tseekdir.cgi" Local File Inclusion BID 27475 XF vbmarketing-tseekdir-file-include(39970) Directory traversal vulnerability in tseekdir.cgi in VB Marketing allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the location parameter.

cpe:/a:clansphere:clansphere:2007.4.4

CVE-2008-0489

2008-01-30T17:00:00.000-05:00

2018-10-15T18:00:55.130-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3597 BUGTRAQ 20080127 ClanSphere 2007.4.4 Remote File Disclosure Vulnerability. BID 27471 XF clansphere-install-directory-traversal(39977) Directory traversal vulnerability in install.php in Clansphere 2007.4.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.

cpe:/a:wordpress:wp_cal_plugin:0.3

CVE-2008-0490

2008-01-30T17:00:00.000-05:00

2017-09-28T21:30:18.473-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27465 VUPEN ADV-2008-0348 XF wpcal-editevent-sql-injection(39966) EXPLOIT-DB 4992 SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:wordpress:fgallery_plugin:2.4.1 cpe:/a:wordpress:wordpress

CVE-2008-0491

2008-01-30T17:00:00.000-05:00

2017-09-28T21:30:18.533-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27464 VUPEN ADV-2008-0349 XF fgallery-fimrss-sql-injection(39964) EXPLOIT-DB 4993 SQL injection vulnerability in fim_rss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the album parameter.

cpe:/a:persits:xupload:3.0

CVE-2008-0492

2008-01-30T17:00:00.000-05:00

2017-09-28T21:30:18.597-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27456 VUPEN ADV-2008-0315 XF persits-xupload-bo(39967) EXPLOIT-DB 4987 Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpload 3.0 allows remote attackers to execute arbitrary code via a long argument to the AddFile method. NOTE: some of these details are obtained from third party information.

cpe:/a:irfanview:irfanview:4.10

CVE-2008-0493

2008-01-30T17:00:00.000-05:00

2017-09-28T21:30:18.643-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27479 VUPEN ADV-2008-0318 XF irfanview-flashpix-bo(40012) EXPLOIT-DB 4998 fpx.dll 3.9.8.0 in the FlashPix plugin for IrfanView 4.10 allows remote attackers to execute arbitrary code via a crafted FlashPix (.FPX) file, which triggers heap corruption. NOTE: some of these details are obtained from third party information.

cpe:/a:endian:firewall:2.1.2

CVE-2008-0494

2008-01-30T17:00:00.000-05:00

2008-09-05T17:35:13.353-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-01-30T20:28:00.000-05:00

MISC http://downloads.securityfocus.com/vulnerabilities/exploits/27477.html BID 27477 Cross-site scripting (XSS) vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the psearch parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:ibm:hardware_management_console:7.3.2.0

CVE-2008-0495

2008-01-30T17:00:00.000-05:00

2017-08-07T21:29:36.260-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BID 27484 SECTRACK 1019280 VUPEN ADV-2008-0323 VUPEN ADV-2008-0638 CONFIRM http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4129 XF hmc-pegasus-cim-dos(40021) CONFIRM https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power6/install/v7.Readme.html Unspecified vulnerability in the Pegasus CIM Server in IBM Hardware Management Console (HMC) 7 R3.2.0 allows remote attackers to cause a denial of service via unspecified vectors.

cpe:/a:ampjuke:ampjuke:0.7.0

CVE-2008-0496

2008-01-30T17:00:00.000-05:00

2018-10-15T18:00:55.490-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3594 BUGTRAQ 20080129 AmpJuke-0.7.0 (index.php) Xss VuLn. BID 27498 VUPEN ADV-2008-0332 XF juke-index-xss(40023) Cross-site scripting (XSS) vulnerability in index.php in AmpJuke 0.7.0 allows remote attackers to inject arbitrary web script or HTML via the limit parameter in a search action.

cpe:/a:nucleus_cms:nucleus_cms:3.31

CVE-2008-0497

2008-01-30T17:00:00.000-05:00

2018-10-15T18:00:56.037-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3593 CONFIRM http://sourceforge.net/project/shownotes.php?group_id=66479&release_id=572117 CONFIRM http://www.nucleuscms.org/item/3047 BUGTRAQ 20080129 Nucleus 3.31 XSS in path BUGTRAQ 20080129 [!!FIX Information ] Nucleus 3.31 XSS in path BID 27492 VUPEN ADV-2008-0369 Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, which is not quoted when processing PHP_SELF.

cpe:/a:bigware:bigware_shop:2.0

CVE-2008-0498

2008-01-30T17:00:00.000-05:00

2017-09-28T21:30:18.707-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27489 VUPEN ADV-2008-0351 XF bigwareshop-mainbigware-sql-injection(40010) EXPLOIT-DB 5002 SQL injection vulnerability in main_bigware_53.tpl.php in Bigware Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the pollid parameter in a results action to main_bigware_53.php.

cpe:/a:mamboxchange:laithai:4.5.5

CVE-2008-0499

2008-01-30T17:00:00.000-05:00

2017-08-07T21:29:36.417-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://sourceforge.net/project/shownotes.php?group_id=192544&release_id=571300 BID 27483 VUPEN ADV-2008-0316 XF mambo-laithai-unspecified-sql-injection(40013) SQL injection vulnerability in Mambo LaiThai 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:mamboxchange:laithai:4.5.5

CVE-2008-0500

2008-01-30T17:00:00.000-05:00

2017-08-07T21:29:36.463-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://sourceforge.net/project/shownotes.php?group_id=192544&release_id=571300 BID 27483 VUPEN ADV-2008-0316 XF mambo-laithai-multiple-unspecified(40014) Multiple unspecified vulnerabilities in Mambo LaiThai 4.5.5 have unknown impact and attack vectors related to (1) mod_login and (2) mod_template_chooser.

cpe:/a:sourceforge:phpmyclub:0.0.1

CVE-2008-0501

2008-01-30T17:00:00.000-05:00

2017-09-28T21:30:18.753-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27480 VUPEN ADV-2008-0350 XF phpmyclub-pagecourante-file-include(40007) EXPLOIT-DB 5000 Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page_courante parameter to the top-level URI.

cpe:/a:connectix:connectix_boards:0.8.1 cpe:/a:connectix:connectix_boards:0.8.2

CVE-2008-0502

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:18.817-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27506 VUPEN ADV-2008-0363 XF connectixboards-templatepath-file-include(40040) EXPLOIT-DB 5012 PHP remote file inclusion vulnerability in templates/Official/part_userprofile.php in Connectix Boards 0.8.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the template_path parameter.

cpe:/a:netwerk:smart_publisher:1.0.1

CVE-2008-0503

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:18.863-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27488 VUPEN ADV-2008-0352 EXPLOIT-DB 5003 Eval injection vulnerability in admin/op/disp.php in Netwerk Smart Publisher 1.0.1 allows remote attackers to execute arbitrary PHP code via the filedata parameter.

cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.0 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.0:rc3 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.1 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.1:beta_2 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.1.0 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.2 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.2.0 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.2.0:rc2 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.2.1 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b-nuke cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.3.0 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.3.1 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.3.2 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.3.3 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.3.4 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.3.5 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.4 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.4.0 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.4.0:alpha cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.4.0:beta cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.4.1 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.4.1:beta cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.4.10 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.4.11 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.4.12 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.4.13 cpe:/a:coppermine-gallery:coppermine_photo_gallery:1.4.14

CVE-2008-0504

2008-01-31T15:00:00.000-05:00

2018-10-16T12:50:12.210-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://coppermine-gallery.net/forum/index.php?topic=50103.0 BUGTRAQ 20080131 [waraxe-2008-SA#066] - Multiple Vulnerabilities in Coppermine 1.4.14 BID 27509 SECTRACK 1019285 VUPEN ADV-2008-0367 MISC http://www.waraxe.us/advisory-66.html Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) albumid, (2) startpic, and (3) numpics parameters to util.php; and (4) cid_array parameter to reviewcom.php.

cpe:/a:coppermine:coppermine_photo_gallery:1.4.10 cpe:/a:coppermine:coppermine_photo_gallery:1.4.11 cpe:/a:coppermine:coppermine_photo_gallery:1.4.12 cpe:/a:coppermine:coppermine_photo_gallery:1.4.13 cpe:/a:coppermine:coppermine_photo_gallery:1.4.14

CVE-2008-0505

2008-01-31T15:00:00.000-05:00

2018-10-15T18:00:57.287-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://coppermine-gallery.net/forum/index.php?topic=50103.0 BUGTRAQ 20080131 [waraxe-2008-SA#066] - Multiple Vulnerabilities in Coppermine 1.4.14 BID 27511 SECTRACK 1019285 VUPEN ADV-2008-0367 MISC http://www.waraxe.us/advisory-66.html Multiple cross-site scripting (XSS) vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters.

cpe:/a:coppermine:coppermine_photo_gallery:1.4.14

CVE-2008-0506

2008-01-31T15:00:00.000-05:00

2018-10-15T18:00:57.803-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://coppermine-gallery.net/forum/index.php?topic=50103.0 BUGTRAQ 20080130 [waraxe-2008-SA#065] - Remote Shell Command Execution in Coppermine 1.4.14 BID 27512 SECTRACK 1019286 VUPEN ADV-2008-0367 MISC http://www.waraxe.us/advisory-65.html EXPLOIT-DB 5019 include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter to picEditor.php.

cpe:/a:wordpress:adserve:0.2

CVE-2008-0507

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:18.987-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27504 VUPEN ADV-2008-0364 XF adserve-adclick-sql-injection(40045) EXPLOIT-DB 5013 SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:wordpress:permalinks_migration_plugin:1.0

CVE-2008-0508

2008-01-31T15:00:00.000-05:00

2018-10-15T18:00:58.490-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MISC http://g30rg3x.com/wp-files/dpm_11gx.zip MISC http://g30rg3x.com/xsrf-bajo-deans-permalinks-migration-10 MISC http://packetstorm.linuxsecurity.com/0801-advisories/deans-xsrf.txt SREASON 3595 BUGTRAQ 20080122 XSRF under Deanâ??s Permalinks Migration 1.0 VUPEN ADV-2008-0281 XF permalinks-deanpmconfig-csrf(39845) Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean's Permalinks Migration 1.0 plugin for WordPress allows remote attackers to modify the oldstructure (aka dean_pm_config[oldstructure]) configuration setting as administrators via the old_struct parameter in a deans_permalinks_migration.php action to wp-admin/options-general.php, as demonstrated by placing an XSS sequence in this setting.

cpe:/o:ibm:aix:4.3

CVE-2008-0509

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:19.033-04:00

4.4

LOCAL

MEDIUM

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov BID 27510 VUPEN ADV-2008-0324 AIXAPAR IZ13739 Multiple buffer overflows in IBM AIX 4.3 allow remote attackers to cause a denial of service (crash) or possibly gain privileges via a long argument to (1) piox25, related to piox25.c; or (2) piox25remote, related to piox25remote.sh.

cpe:/a:joomla:com_newsletter cpe:/a:mambo:com_newsletter cpe:/a:mambo:mambo:4.5

CVE-2008-0510

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:19.080-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27502 VUPEN ADV-2008-0354 XF newsletter-index-sql-injection(40036) EXPLOIT-DB 5007 SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter.

cpe:/a:joomla:com_mamml cpe:/a:mambo:com_mamml

CVE-2008-0511

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:19.143-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27503 VUPEN ADV-2008-0356 XF mamml-index-sql-injection(40037) EXPLOIT-DB 5009 SQL injection vulnerability in index.php in the MaMML (com_mamml) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter.

cpe:/a:joomla:com_fq

CVE-2008-0512

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:19.190-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27501 VUPEN ADV-2008-0355 XF fq-index-sql-injection(40035) EXPLOIT-DB 5008 SQL injection vulnerability in index.php in the fq (com_fq) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter.

cpe:/a:phpcms:phpcms:1.2.2

CVE-2008-0513

2008-01-31T15:00:00.000-05:00

2018-10-15T18:00:59.130-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov BUGTRAQ 20080129 Remote File Disclosure in phpCMS 1.2.2 BUGTRAQ 20080129 Re: Remote File Disclosure in phpCMS 1.2.2 BID 27495 VUPEN ADV-2008-0353 XF phpcms-parser-directory-traversal(40017) EXPLOIT-DB 5006 Directory traversal vulnerability in parser/include/class.cache_phpcms.php in phpCMS 1.2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to parser/parser.php, as demonstrated by a filename ending with %00.gif, a different vector than CVE-2005-1840.

cpe:/a:joomla:glossary:2.0 cpe:/a:mambo:glossary:2.0

CVE-2008-0514

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:19.300-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27505 VUPEN ADV-2008-0357 XF glossary-index-sql-injection(40038) EXPLOIT-DB 5010 SQL injection vulnerability in index.php in the Glossary (com_glossary) 2.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action.

cpe:/a:joomla:musepoes_component cpe:/a:mambo:musepoes_component

CVE-2008-0515

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:19.363-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27507 VUPEN ADV-2008-0358 EXPLOIT-DB 5011 SQL injection vulnerability in index.php in the musepoes (com_musepoes) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action.

cpe:/a:sqlite_manager:sqlite_manager:1.2

CVE-2008-0516

2008-01-31T15:00:00.000-05:00

2017-08-07T21:29:37.027-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 27515 XF sqlitemanager-confirm-file-include(40065) PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:darko_selesi:estateagent:0.1 cpe:/a:joomla:joomla cpe:/a:mambo:mambo:4.5 cpe:/a:mambo:mambo:4.5.0.2 cpe:/a:mambo:mambo:4.5.1.3 cpe:/a:mambo:mambo:4.5.1_1.0.9 cpe:/a:mambo:mambo:4.5.1_beta cpe:/a:mambo:mambo:4.5.1_beta2 cpe:/a:mambo:mambo:4.5.1a cpe:/a:mambo:mambo:4.5.2 cpe:/a:mambo:mambo:4.5.2.1 cpe:/a:mambo:mambo:4.5.2.2 cpe:/a:mambo:mambo:4.5.2.3 cpe:/a:mambo:mambo:4.5.3h cpe:/a:mambo:mambo:4.5.4 cpe:/a:mambo:mambo:4.5_1.0.0 cpe:/a:mambo:mambo:4.5_1.0.1 cpe:/a:mambo:mambo:4.5_1.0.2 cpe:/a:mambo:mambo:4.5_1.0.3_beta cpe:/a:mambo:mambo:4.5_1.0.9

CVE-2008-0517

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:19.410-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27520 VUPEN ADV-2008-0362 XF estateagent-index-sql-injection(40060) EXPLOIT-DB 5016 SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action.

cpe:/a:joomla:com_recipes:1.00 cpe:/a:mambo:com_recipes:1.00

CVE-2008-0518

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:19.473-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27519 VUPEN ADV-2008-0360 XF recipes-index-sql-injection(40064) EXPLOIT-DB 5014 SQL injection vulnerability in index.php in the Recipes (com_recipes) 1.00 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.

cpe:/a:joomla:com_jokes:1.0 cpe:/a:mambo:com_jokes:1.0

CVE-2008-0519

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:19.533-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27522 VUPEN ADV-2008-0361 XF jokes-index-sql-injection(40067) EXPLOIT-DB 5015 SQL injection vulnerability in index.php in the Atapin Jokes (com_jokes) 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a CatView action.

cpe:/a:wordpress:wassup_plugin:1.4 cpe:/a:wordpress:wassup_plugin:1.4.3

CVE-2008-0520

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:19.580-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27525 VUPEN ADV-2008-0365 CONFIRM http://www.wpwp.org/archives/warning-security-bug-in-version/ EXPLOIT-DB 5017 Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) from_date or (2) to_date parameter to spy.php.

cpe:/a:bubbling_library:bubbling_library:1.32

CVE-2008-0521

2008-01-31T15:00:00.000-05:00

2017-09-28T21:30:19.643-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27482 XF bubbling-dispatcher-directory-traversal(40008) EXPLOIT-DB 5001 Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to read arbitrary files via a .. (dot dot) in the uri parameter to dispatcher.php in (1) examples/dispatcher/framework/, (2) examples/dispatcher/, (3) examples/wizard/, and (4) PHP/, different vectors than CVE-2008-0545.

cpe:/a:hal_networks:perl__cgi_cart cpe:/a:hal_networks:php_cart cpe:/a:hal_networks:shop_hal_v1

CVE-2008-0522

2008-01-31T15:00:00.000-05:00

2011-03-07T22:04:50.500-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov JVN JVN#01162446 CONFIRM http://www.hal9800.com/home/bug/20080123.html CONFIRM http://www.hal9800.com/home/bug/20080127.html CONFIRM http://www.hal9800.com/home/bug/20080128.html CONFIRM http://www.hal9800.com/home/bug/20080129.html BID 27513 VUPEN ADV-2008-0368 Cross-site scripting (XSS) vulnerability in multiple Hal Networks shopping-cart products allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:softcart:softcart:5.1.2.2

CVE-2008-0523

2008-01-31T15:00:00.000-05:00

2017-08-07T21:29:37.290-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27524 XF softcart-softcart-xss(40061) Multiple cross-site scripting (XSS) vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) License_Plate, (2) License_State, (3) Ticket_Date, and (4) Ticket_Number parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/h:yamaha:rt107e cpe:/h:yamaha:rt52pro cpe:/h:yamaha:rt56v cpe:/h:yamaha:rt57i cpe:/h:yamaha:rt58i cpe:/h:yamaha:rt60w cpe:/h:yamaha:rt80i cpe:/h:yamaha:rta50i cpe:/h:yamaha:rta52i cpe:/h:yamaha:rta54i cpe:/h:yamaha:rta55i cpe:/h:yamaha:rtv700 cpe:/h:yamaha:rtw65b cpe:/h:yamaha:rtw65i cpe:/h:yamaha:rtx1000 cpe:/h:yamaha:rtx1100 cpe:/h:yamaha:rtx1500 cpe:/h:yamaha:srt100

CVE-2008-0524

2008-01-31T15:00:00.000-05:00

2017-08-07T21:29:37.337-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

JVN JVN#88575577 CONFIRM http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN88575577.html BID 27491 XF yamaha-routers-http-csrf(40015) Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors.

cpe:/a:lumension_security:patchlink_update:6.2::linux cpe:/a:lumension_security:patchlink_update:6.2::mac cpe:/a:lumension_security:patchlink_update:6.2::unix cpe:/a:lumension_security:patchlink_update:6.3::linux cpe:/a:lumension_security:patchlink_update:6.3::mac cpe:/a:lumension_security:patchlink_update:6.3::unix cpe:/a:lumension_security:patchlink_update:6.4::linux cpe:/a:lumension_security:patchlink_update:6.4::mac cpe:/a:lumension_security:patchlink_update:6.4::unix cpe:/a:novell:zenworks_patch_management_update_agent:6.2::linux cpe:/a:novell:zenworks_patch_management_update_agent:6.2::mac cpe:/a:novell:zenworks_patch_management_update_agent:6.2::unix cpe:/a:novell:zenworks_patch_management_update_agent:6.3::linux cpe:/a:novell:zenworks_patch_management_update_agent:6.3::mac cpe:/a:novell:zenworks_patch_management_update_agent:6.3::unix cpe:/a:novell:zenworks_patch_management_update_agent:6.4::linux cpe:/a:novell:zenworks_patch_management_update_agent:6.4::mac cpe:/a:novell:zenworks_patch_management_update_agent:6.4::unix

CVE-2008-0525

2008-01-31T15:00:00.000-05:00

2018-10-15T18:00:59.817-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3599 CONFIRM http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=527 CONFIRM http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=528 CONFIRM http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=530 BUGTRAQ 20080125 Two vulnerabilities for PatchLink Update Client for Unix. BID 27458 SECTRACK 1019272 VUPEN ADV-2008-0426 XF patchlinkupdate-logtrimmer-symlink(39956) XF patchlinkupdate-reboottask-symlink(39958) CONFIRM https://secure-support.novell.com/KanisaPlatform/Publishing/18/3908994_f.SAL_Public.html PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac (LUM) 6.2094 through 6.4102 and other products, allows local users to (1) truncate arbitrary files via a symlink attack on the /tmp/patchlink.tmp file used by the logtrimmer script, and (2) execute arbitrary code via a symlink attack on the /tmp/plshutdown file used by the rebootTask script.

cpe:/a:cisco:session_initiation_protocol_%28sip%29_firmware cpe:/a:cisco:skinny_client_control_protocol_%28sccp%29_firmware

CVE-2008-0526

2008-02-14T21:00:00.000-05:00

2017-08-07T21:29:37.477-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities BID 27774 SECTRACK 1019407 VUPEN ADV-2008-0543 XF cisco-unifiedipphone-icmp-dos(40487) Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a long ICMP echo request (ping) packet.

cpe:/a:cisco:session_initiation_protocol_%28sip%29_firmware cpe:/a:cisco:skinny_client_control_protocol_%28sccp%29_firmware

CVE-2008-0527

2008-02-14T21:00:00.000-05:00

2017-08-07T21:29:37.557-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities BID 27774 SECTRACK 1019408 VUPEN ADV-2008-0543 XF cisco-unifiedipphone-httpserver-dos(40489) The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a crafted HTTP request.

cpe:/a:cisco:session_initiation_protocol_%28sip%29_firmware cpe:/a:cisco:skinny_client_control_protocol_%28sccp%29_firmware

CVE-2008-0528

2008-02-14T21:00:00.000-05:00

2017-08-07T21:29:37.617-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CISCO 20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities BID 27774 SECTRACK 1019409 VUPEN ADV-2008-0543 XF cisco-unifiedipphone-sipmime-bo(40492) Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data.

cpe:/a:cisco:session_initiation_protocol_%28sip%29_firmware cpe:/a:cisco:skinny_client_control_protocol_%28sccp%29_firmware

CVE-2008-0529

2008-02-14T21:00:00.000-05:00

2017-08-07T21:29:37.680-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CISCO 20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities BID 27774 SECTRACK 1019410 VUPEN ADV-2008-0543 XF cisco-unifiedipphone-telnet-bo(40493) Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command.

cpe:/a:cisco:session_initiation_protocol_%28sip%29_firmware cpe:/a:cisco:skinny_client_control_protocol_%28sccp%29_firmware

CVE-2008-0530

2008-02-14T21:00:00.000-05:00

2017-08-07T21:29:37.743-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CISCO 20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities BID 27774 SECTRACK 1019406 VUPEN ADV-2008-0543 XF cisco-unifiedipphone-dns-bo(40485) Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote attackers to execute arbitrary code via a crafted DNS response.

cpe:/a:cisco:session_initiation_protocol_%28sip%29_firmware cpe:/a:cisco:skinny_client_control_protocol_%28sccp%29_firmware

CVE-2008-0531

2008-02-14T21:00:00.000-05:00

2017-08-07T21:29:37.807-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CISCO 20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities BID 27774 SECTRACK 1019411 VUPEN ADV-2008-0543 XF cisco-unifiedipphone-sipproxy-bo(40498) Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote SIP servers to execute arbitrary code via a crafted challenge/response message.

cpe:/a:cisco:acs_for_windows cpe:/a:cisco:acs_solution_engine cpe:/a:cisco:user_changeable_password:4.1

CVE-2008-0532

2008-03-14T16:44:00.000-04:00

2018-10-15T18:01:01.067-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SREASON 3743 SECTRACK 1019608 CISCO 20080312 Cisco Secure Access Control Server for Windows User-Changeable Password Vulnerabilities MISC http://www.recurity-labs.com/content/pub/RecurityLabs_Cisco_ACS_UCP_advisory.txt BUGTRAQ 20080312 Cisco ACS UCP Remote Pre-Authentication Buffer Overflows BID 28222 VUPEN ADV-2008-0868 XF cisco-acs-ucp-csusercgi-bo(41154) Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and possibly unspecified other vectors.

cpe:/a:cisco:acs_for_windows cpe:/a:cisco:acs_solution_engine cpe:/a:cisco:user_changeable_password:4.1

CVE-2008-0533

2008-03-14T16:44:00.000-04:00

2018-10-15T18:01:01.770-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3743 SECTRACK 1019607 CISCO 20080312 Cisco Secure Access Control Server for Windows User-Changeable Password Vulnerabilities MISC http://www.recurity-labs.com/content/pub/RecurityLabs_Cisco_ACS_UCP_advisory.txt BUGTRAQ 20080312 Cisco ACS UCP Remote Pre-Authentication Buffer Overflows BID 28222 VUPEN ADV-2008-0868 XF cisco-acs-ucp-csusercgi-xss(41156) Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an argument located immediately after the Help argument, and possibly unspecified other vectors.

cpe:/a:cisco:service_control_engine:3.1.6 cpe:/a:icon-labs:iconfidant_ssh:2.3.7

CVE-2008-0534

2008-05-22T09:09:00.000-04:00

2017-08-07T21:29:37.977-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1020074 CISCO 20080521 Cisco Service Control Engine Denial of Service Vulnerabilities CONFIRM http://www.icon-labs.com/news/read.asp?newsID=77 CERT-VN VU#626979 BID 29316 BID 29609 VUPEN ADV-2008-1604 VUPEN ADV-2008-1774 XF cisco-sce-sshlogin-dos(42565) The SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (device restart or daemon outage) via a high rate of login attempts, aka Bug ID CSCsi68582.

cpe:/a:cisco:service_control_engine:3.1.5 cpe:/a:icon-labs:iconfidant_ssh:2.3.7

CVE-2008-0535

2008-05-22T09:09:00.000-04:00

2017-08-07T21:29:38.040-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1020074 CISCO 20080521 Cisco Service Control Engine Denial of Service Vulnerabilities CONFIRM http://www.icon-labs.com/news/read.asp?newsID=77 CERT-VN VU#626979 BID 29316 BID 29609 VUPEN ADV-2008-1604 VUPEN ADV-2008-1774 XF cisco-sce-ssh-credentials-dos(42567) Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (device instability) via "SSH credentials that attempt to change the authentication method," aka Bug ID CSCsm14239.

cpe:/a:cisco:service_control_engine:3.0 cpe:/a:cisco:service_control_engine:3.1.6 cpe:/a:icon-labs:iconfidant_ssh:2.3.7

CVE-2008-0536

2008-05-22T09:09:00.000-04:00

2017-08-07T21:29:38.103-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1020074 CISCO 20080521 Cisco Service Control Engine Denial of Service Vulnerabilities CONFIRM http://www.icon-labs.com/news/read.asp?newsID=77 CERT-VN VU#626979 BID 29316 BID 29609 VUPEN ADV-2008-1604 VUPEN ADV-2008-1774 XF cisco-sce-managementagent-dos(42566) Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (management interface outage) via SSH traffic that occurs during management operations and triggers "illegal I/O operations," aka Bug ID CSCsh49563.

cpe:/a:cisco:route_switch_processor:rsp720 cpe:/a:cisco:supervisor_engine:sup32 cpe:/a:cisco:supervisor_engine:sup720

CVE-2008-0537

2008-03-27T06:44:00.000-04:00

2017-08-07T21:29:38.167-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CISCO 20080326 Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720 BID 28463 SECTRACK 1019716 CERT TA08-087B VUPEN ADV-2008-1005 XF cisco-catalyst-sup-rsp-dos(41466) Unspecified vulnerability in the Supervisor Engine 32 (Sup32), Supervisor Engine 720 (Sup720), and Route Switch Processor 720 (RSP720) for multiple Cisco products, when using Multi Protocol Label Switching (MPLS) VPN and OSPF sham-link, allows remote attackers to cause a denial of service (blocked queue, device restart, or memory leak) via unknown vectors.

cpe:/a:phpip:phpip_management:4.3.2

CVE-2008-0538

2008-02-01T15:00:00.000-05:00

2018-10-15T18:01:02.490-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20080127 phpIP 4.3.2 - Numerous SQL Injection Vulnerablities BUGTRAQ 20080127 phpIP 4.3.2 - Numerous SQL Injection Vulnerablities BID 27468 VUPEN ADV-2008-0346 XF phpip-display-sql-injection(39965) EXPLOIT-DB 4990 Multiple SQL injection vulnerabilities in phpIP Management 4.3.2 allow remote attackers to execute arbitrary SQL commands via the (1) password parameter to login.php, the (2) id parameter to display.php, and unspecified other vectors. NOTE: some of these details are obtained from third party information.

cpe:/o:f5:tmos:9.4.3

CVE-2008-0539

2008-02-01T15:00:00.000-05:00

2018-10-30T12:25:15.200-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3602 BUGTRAQ 20080126 F5 BIG-IP Web Management ASM Security Report XSS BUGTRAQ 20080308 F5 BIG-IP Web Management Console XSS BID 27462 BID 28151 SECTRACK 1019276 VUPEN ADV-2008-0301 XF f5bigipwebmgmt-reprequest-xss(39979) Cross-site scripting (XSS) vulnerability in dms/policy/rep_request.php in F5 BIG-IP Application Security Manager (ASM) 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the report_type parameter.

cpe:/a:trixbox:trixbox:2.4.2.0

CVE-2008-0540

2008-02-01T15:00:00.000-05:00

2008-09-05T17:35:21.073-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-01T15:39:00.000-05:00

MISC http://www.digitrustgroup.com/advisories/web-application-security-trixbox.html BID 27460 Multiple cross-site scripting (XSS) vulnerabilities in trixbox 2.4.2.0 allow remote attackers to inject arbitrary web script or HTML via the query string to index.php in (1) user/ or (2) maint/.

cpe:/a:gerd_tentler:simple_forum:3.2

CVE-2008-0541

2008-02-01T15:00:00.000-05:00

2017-09-28T21:30:20.050-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27463 XF simpleforum-forum-xss(39978) EXPLOIT-DB 4989 Multiple cross-site scripting (XSS) vulnerabilities in forum.php in Gerd Tentler Simple Forum 3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) open and (2) date_show parameters.

cpe:/a:gerd_tentler:simple_forum:3.2

CVE-2008-0542

2008-02-01T15:00:00.000-05:00

2017-09-28T21:30:20.113-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27463 XF simpleforum-thumbnail-directory-traversal(39980) EXPLOIT-DB 4989 Directory traversal vulnerability in thumbnail.php in Gerd Tentler Simple Forum 3.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

cpe:/a:pre_projects:pre_dynamic_institution

CVE-2008-0543

2008-02-01T15:00:00.000-05:00

2018-10-15T18:01:03.880-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3603 BUGTRAQ 20080124 Pre Dynamic Institution bypass BID 27451 XF predynamic-login-sql-injection(39942) Multiple SQL injection vulnerabilities in Pre Dynamic Institution allow remote attackers to execute arbitrary SQL commands via the (1) sloginid and (2) spass parameters to (a) login.asp and (b) siteadmin/login.asp. NOTE: some of these details are obtained from third party information.

cpe:/a:sdl:sdl_image:1.2.6

CVE-2008-0544

2008-02-01T15:00:00.000-05:00

2018-10-15T18:01:04.287-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=207933 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0061 DEBIAN DSA-1493 GENTOO GLSA-200802-01 CONFIRM http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/IMG_lbm.c?r1=3341&r2=3521 CONFIRM http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/IMG_lbm.c?revision=3521&view=markup MANDRIVA MDVSA-2008:040 BUGTRAQ 20080213 rPSA-2008-0061-1 SDL_image BID 27435 UBUNTU USN-595-1 VUPEN ADV-2008-0266 XF sdlimage-imgloadlbmrw-bo(39899) CONFIRM https://issues.rpath.com/browse/RPL-2206 FEDORA FEDORA-2008-1208 FEDORA FEDORA-2008-1231 Heap-based buffer overflow in the IMG_LoadLBM_RW function in IMG_lbm.c in SDL_image before 1.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted IFF ILBM file. NOTE: some of these details are obtained from third party information.

cpe:/a:bubbling_library:bubbling_library:1.32

CVE-2008-0545

2008-02-01T15:00:00.000-05:00

2017-09-28T21:30:20.177-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27466 VUPEN ADV-2008-0347 XF bubblinglibrary-page-uri-file-include(39969) EXPLOIT-DB 4991 Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) uri parameter to (a) yui-menu.tpl.php, (b) simple.tpl.php, and (c) advanced.tpl.php in dispatcher/framework/; and the (2) page parameter to (d) yui-menu.php, (e) simple.php, and (f) advanced.php in dispatcher/framework/, different vectors than CVE-2008-0521.

cpe:/a:shoppingtree:candypress_store:4.1 cpe:/a:shoppingtree:candypress_store:4.1.1.26

CVE-2008-0546

2008-02-01T15:00:00.000-05:00

2018-10-15T18:01:06.117-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3600 CONFIRM http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1 BUGTRAQ 20080125 [CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure) BID 27454 VUPEN ADV-2008-0314 XF ecommercesuite-ajaxgetbrands-sql-injection(39939) EXPLOIT-DB 4988 Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the (1) idProduct and (2) options parameters to (a) ajax/ajax_optInventory.asp, or the (2) recid parameter to (b) ajax/ajax_getBrands.asp.

cpe:/a:shoppingtree:candypress_store:4.1 cpe:/a:shoppingtree:candypress_store:4.1.1.26

CVE-2008-0547

2008-02-01T15:00:00.000-05:00

2018-10-15T18:01:06.817-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3600 CONFIRM http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1 BUGTRAQ 20080125 [CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure BID 27454 VUPEN ADV-2008-0314 XF ecommercesuite-utilitiesconfighelp-xss(39940) EXPLOIT-DB 4988 Cross-site scripting (XSS) vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and probably earlier 4.x and 3.x versions, allows remote attackers to inject arbitrary web script or HTML via the helpfield parameter.

cpe:/a:radio_toolbox:steamcast:0.9.75

CVE-2008-0548

2008-02-01T15:00:00.000-05:00

2017-08-07T21:29:38.713-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/steamcazz-adv.txt XF steamcast-contentlength-dos(39927) Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL dereference when malloc fails.

cpe:/a:radio_toolbox:steamcast:0.9.75

CVE-2008-0549

2008-02-01T15:00:00.000-05:00

2017-08-07T21:29:38.760-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/steamcazz-adv.txt MISC http://aluigi.org/poc/steamcazz.zip XF steamcast-oggheaderparse-dos(39929) Integer overflow in the OggHeaderParse function in Steamcast 0.9.75 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via a long Ogg tag.

cpe:/a:radio_toolbox:steamcast:0.9.75

CVE-2008-0550

2008-02-01T15:00:00.000-05:00

2017-08-07T21:29:38.807-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://aluigi.altervista.org/adv/steamcazz-adv.txt MISC http://aluigi.org/poc/steamcazz.zip XF steamcast-http-bo(39928) Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HTTP request that leads to a buffer overflow, as demonstrated by a long User-Agent header.

cpe:/a:microsoft:activex cpe:/a:sejoong_namo:activesquare:6

CVE-2008-0551

2008-02-01T15:00:00.000-05:00

2017-09-28T21:30:20.363-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27453 BID 27580 VUPEN ADV-2008-0299 XF activesquare-namoinstaller-code-execution(39943) XF namoinstaller-namoinstaller-code-execution(39974) EXPLOIT-DB 4986 The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party information.

cpe:/a:eticket:eticket:1.5.6_rc4

CVE-2008-0552

2008-02-01T15:00:00.000-05:00

2018-10-15T18:01:07.537-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3601 MISC http://www.lonerunners.net/users/jekil/pub/hack-eticket/hack-eticket.txt BUGTRAQ 20080127 eTicket 'index.php' Cross Site Scripting Path Vulnerability BID 27473 SECTRACK 1019278 XF eticket-index-xss(39968) Cross-site scripting (XSS) vulnerability in index.php in eTicket 1.5.6-RC4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

cpe:/a:tcl_tk:tcl_tk:2.1 cpe:/a:tcl_tk:tcl_tk:3.3 cpe:/a:tcl_tk:tcl_tk:4.0p1 cpe:/a:tcl_tk:tcl_tk:6.1 cpe:/a:tcl_tk:tcl_tk:6.1p1 cpe:/a:tcl_tk:tcl_tk:6.2 cpe:/a:tcl_tk:tcl_tk:6.4 cpe:/a:tcl_tk:tcl_tk:6.5 cpe:/a:tcl_tk:tcl_tk:6.6 cpe:/a:tcl_tk:tcl_tk:6.7 cpe:/a:tcl_tk:tcl_tk:7.0 cpe:/a:tcl_tk:tcl_tk:7.1 cpe:/a:tcl_tk:tcl_tk:7.3 cpe:/a:tcl_tk:tcl_tk:7.4 cpe:/a:tcl_tk:tcl_tk:7.5 cpe:/a:tcl_tk:tcl_tk:7.5p1 cpe:/a:tcl_tk:tcl_tk:7.6 cpe:/a:tcl_tk:tcl_tk:7.6p2 cpe:/a:tcl_tk:tcl_tk:8.0 cpe:/a:tcl_tk:tcl_tk:8.0.3 cpe:/a:tcl_tk:tcl_tk:8.0.4 cpe:/a:tcl_tk:tcl_tk:8.0.5 cpe:/a:tcl_tk:tcl_tk:8.0p2 cpe:/a:tcl_tk:tcl_tk:8.1 cpe:/a:tcl_tk:tcl_tk:8.1.1 cpe:/a:tcl_tk:tcl_tk:8.2.0 cpe:/a:tcl_tk:tcl_tk:8.2.1 cpe:/a:tcl_tk:tcl_tk:8.2.2 cpe:/a:tcl_tk:tcl_tk:8.2.3 cpe:/a:tcl_tk:tcl_tk:8.3.0 cpe:/a:tcl_tk:tcl_tk:8.3.1 cpe:/a:tcl_tk:tcl_tk:8.3.2 cpe:/a:tcl_tk:tcl_tk:8.3.3 cpe:/a:tcl_tk:tcl_tk:8.3.4 cpe:/a:tcl_tk:tcl_tk:8.3.5 cpe:/a:tcl_tk:tcl_tk:8.4.0 cpe:/a:tcl_tk:tcl_tk:8.4.1 cpe:/a:tcl_tk:tcl_tk:8.4.2 cpe:/a:tcl_tk:tcl_tk:8.4.3 cpe:/a:tcl_tk:tcl_tk:8.4.4 cpe:/a:tcl_tk:tcl_tk:8.4.5 cpe:/a:tcl_tk:tcl_tk:8.4.6 cpe:/a:tcl_tk:tcl_tk:8.4.7 cpe:/a:tcl_tk:tcl_tk:8.4.8 cpe:/a:tcl_tk:tcl_tk:8.4.9 cpe:/a:tcl_tk:tcl_tk:8.4.10 cpe:/a:tcl_tk:tcl_tk:8.4.11 cpe:/a:tcl_tk:tcl_tk:8.4.12 cpe:/a:tcl_tk:tcl_tk:8.4.13 cpe:/a:tcl_tk:tcl_tk:8.4.14 cpe:/a:tcl_tk:tcl_tk:8.4.15 cpe:/a:tcl_tk:tcl_tk:8.4.16 cpe:/a:tcl_tk:tcl_tk:8.4.17 cpe:/a:tcl_tk:tcl_tk:8.4a2 cpe:/a:tcl_tk:tcl_tk:8.4a3 cpe:/a:tcl_tk:tcl_tk:8.4a4 cpe:/a:tcl_tk:tcl_tk:8.4b1 cpe:/a:tcl_tk:tcl_tk:8.4b2 cpe:/a:tcl_tk:tcl_tk:8.5.0 cpe:/a:tcl_tk:tcl_tk:8.5_a3 cpe:/a:tcl_tk:tcl_tk:8.5a1 cpe:/a:tcl_tk:tcl_tk:8.5a2 cpe:/a:tcl_tk:tcl_tk:8.5a3 cpe:/a:tcl_tk:tcl_tk:8.5a4 cpe:/a:tcl_tk:tcl_tk:8.5a5 cpe:/a:tcl_tk:tcl_tk:8.5a6 cpe:/a:tcl_tk:tcl_tk:8.5b1 cpe:/a:tcl_tk:tcl_tk:8.5b2 cpe:/a:tcl_tk:tcl_tk:8.5b3

CVE-2008-0553

2008-02-07T16:00:00.000-05:00

2018-10-15T18:01:08.100-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SR:2008:008 SECTRACK 1019309 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=573933&group_id=10894 SUNALERT 237465 UBUNTU USN-664-1 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0054 DEBIAN DSA-1490 DEBIAN DSA-1491 DEBIAN DSA-1598 MANDRIVA MDVSA-2008:041 SUSE SUSE-SR:2008:013 REDHAT RHSA-2008:0134 REDHAT RHSA-2008:0135 REDHAT RHSA-2008:0136 BUGTRAQ 20080212 rPSA-2008-0054-1 tk BUGTRAQ 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues BID 27655 CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0009.html VUPEN ADV-2008-0430 VUPEN ADV-2008-1456 VUPEN ADV-2008-1744 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=431518 CONFIRM https://issues.rpath.com/browse/RPL-2215 FEDORA FEDORA-2008-1323 FEDORA FEDORA-2008-1131 FEDORA FEDORA-2008-1122 FEDORA FEDORA-2008-1384 FEDORA FEDORA-2008-3545 Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.

cpe:/a:netpbm:netpbm:10.26

CVE-2008-0554

2008-02-07T21:00:00.000-05:00

2017-09-28T21:30:20.550-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464056 UBUNTU USN-665-1 DEBIAN DSA-1579 MANDRIVA MDVSA-2008:039 REDHAT RHSA-2008:0131 BID 27682 SECTRACK 1019358 VUPEN ADV-2008-0460 MISC https://issues.rpath.com/browse/RPL-2216 Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in netpbm before 10.27 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.

cpe:/a:apache-ssl:apache-ssl:1.3.34_1.57

CVE-2008-0555

2008-04-03T20:44:00.000-04:00

2018-10-15T18:01:14.333-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3797 MISC http://www.apache-ssl.org/advisory-cve-2008-0555.txt MISC http://www.cynops.de/advisories/CVE-2008-0555.txt MISC http://www.klink.name/security/aklink-sa-2008-005-apache-ssl.txt BUGTRAQ 20080402 ANNOUNCE: Apache-SSL security release - apache_1.3.41+ssl_1.59 BID 28576 SECTRACK 1019784 VUPEN ADV-2008-1079 XF apachessl-expandcert-information-disclosure(41618) The ExpandCert function in Apache-SSL before apache_1.3.41+ssl_1.59 does not properly handle (1) '/' and (2) '=' characters in a Distinguished Name (DN) in a client certificate, which might allow remote attackers to bypass authentication via a crafted DN that triggers overwriting of environment variables.

cpe:/a:openca:openca_pki:0.9.2.5

CVE-2008-0556

2008-02-18T19:00:00.000-05:00

2017-08-07T21:29:39.290-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20080213 OpenCA XSRF (CVE-2008-0556) SECTRACK 1019426 CERT-VN VU#264385 VUPEN ADV-2008-0588 XF openca-certificate-csrf(40476) MISC https://www.cynops.de/advisories/CVE-2008-0556.txt Cross-site request forgery (CSRF) vulnerability in OpenCA PKI 0.9.2.5, and possibly earlier versions, allows remote attackers to perform unauthorized actions as authorized users via a link or IMG tag to RAServer.

cpe:/a:mamboserver:catalogshop:1.0b1

CVE-2008-0557

2008-02-04T18:00:00.000-05:00

2017-09-28T21:30:20.613-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27558 XF catalogshop-index-sql-injection(40142) EXPLOIT-DB 5030 SQL injection vulnerability in index.php in the CatalogShop (com_catalogshop) 1.0b1 componenent for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.

cpe:/a:uniwin:ecart_professional:2.0.11 cpe:/a:uniwin:ecart_professional:2.0.12 cpe:/a:uniwin:ecart_professional:2.0.14 cpe:/a:uniwin:ecart_professional:2.0.15

CVE-2008-0558

2008-02-04T18:00:00.000-05:00

2008-09-05T17:35:23.790-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-05T10:32:00.000-05:00

BID 27560 Cross-site scripting (XSS) vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:nilsons_blogger:nilsons_blogger:0.11

CVE-2008-0559

2008-02-04T18:00:00.000-05:00

2018-10-15T18:01:15.100-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3604 BUGTRAQ 20080131 nilson's blogger 0.11 remote file disclosure vulnerabilities BID 27559 Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the permalink parameter in core.php, accessed through index.php; and (2) the thispost parameter in comments.php.

cpe:/a:contact_forms:cforms

CVE-2008-0560

2008-02-04T18:00:00.000-05:00

2018-10-15T18:01:15.397-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3605 VIM 20080131 [Fwd: contactforms "cforms-css.php" Remote File Inclusion] BUGTRAQ 20080131 contactforms "cforms-css.php" Remote File Inclusion XF contactform-cformscss-file-include(40143) ** DISPUTED ** PHP remote file inclusion vulnerability in cforms-css.php in Oliver Seidel cforms (contactforms), a Wordpress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the tm parameter. NOTE: CVE disputes this issue for 7.3, since there is no tm parameter, and the code exits with a fatal error due to a call to an undefined function.

cpe:/a:arthur_konze_webdesign:akogallery:2.5_beta cpe:/a:joomla:joomla cpe:/a:mambo:mambo

CVE-2008-0561

2008-02-04T18:00:00.000-05:00

2017-09-28T21:30:20.660-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 27557 XF akogallery-index-sql-injection(40141) EXPLOIT-DB 5029 SQL injection vulnerability in index.php in the Arthur Konze AkoGallery (com_akogallery) 2.5 beta component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.

cpe:/a:mamboserver:joomla:1.0 cpe:/a:mamboserver:mambo:1.0

CVE-2008-0562

2008-02-04T18:00:00.000-05:00

2017-09-28T21:30:20.723-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27551 XF restaurant-index-sql-injection(40144) EXPLOIT-DB 5031 SQL injection vulnerability in index.php in the Restaurant (com_restaurant) 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.

cpe:/a:liferay:liferay_enterprise_portal:4.3.6

CVE-2008-0563

2008-02-04T19:00:00.000-05:00

2008-09-05T17:35:24.603-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-05T11:10:00.000-05:00

CONFIRM http://support.liferay.com/browse/LEP-4737 Cross-site request forgery (CSRF) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to perform unspecified actions as unspecified authenticated users via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in HTML format.

cpe:/a:mailman:mailman:2.1.10b

CVE-2008-0564

2008-02-04T21:00:00.000-05:00

2018-10-15T18:01:15.787-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 SUSE SUSE-SR:2008:017 MLIST [Mailman-Announce] 20080203 Mailman 2.1.10b3 Released (was: Re: Mailman 2.1.10b1 Released) CONFIRM http://sourceforge.net/project/shownotes.php?release_id=559308&group_id=103 CONFIRM http://support.apple.com/kb/HT4077 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0056 MANDRIVA MDVSA-2008:061 REDHAT RHSA-2011:0307 BUGTRAQ 20080215 rPSA-2008-0056-1 mailman BID 27630 UBUNTU USN-586-1 VUPEN ADV-2008-0422 VUPEN ADV-2011-0542 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=431526 CONFIRM https://issues.rpath.com/browse/RPL-2207 FEDORA FEDORA-2008-1334 Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) editing templates and (2) the list's "info attribute" in the web administrator interface, a different vulnerability than CVE-2006-3636.

cpe:/a:deltascripts:php_links:1.3

CVE-2008-0565

2008-02-04T21:00:00.000-05:00

2017-09-28T21:30:20.783-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27530 EXPLOIT-DB 5021 SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:deltascripts:php_links:1.3

CVE-2008-0566

2008-02-04T21:00:00.000-05:00

2017-09-28T21:30:20.830-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27529 EXPLOIT-DB 5022 PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the full_path_to_public_program parameter.

cpe:/a:chronoengine:chronoforms:2.3.5

CVE-2008-0567

2008-02-04T21:00:00.000-05:00

2017-09-28T21:30:20.893-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27531 EXPLOIT-DB 5020 Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) PPS/File.php, (2) Writer.php, and (3) PPS.php in excelwriter/; and (4) BIFFwriter.php, (5) Workbook.php, (6) Worksheet.php, and (7) Format.php in excelwriter/Writer/.

cpe:/a:drupal:secure_site_module:4.7 cpe:/a:drupal:secure_site_module:5.0

CVE-2008-0568

2008-02-04T21:00:00.000-05:00

2011-03-07T22:04:55.783-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://drupal.org/node/216019 BID 27543 VUPEN ADV-2008-0377 Unspecified vulnerability in the IP-authentication feature in the Secure Site 5.x-1.0 and 4.7.x-1.0 module for Drupal allows remote attackers to gain the privileges of a user who has authenticated from behind the same proxy server as the attacker.

cpe:/a:drupal:comment_upload_module:4.7 cpe:/a:drupal:comment_upload_module:5.0

CVE-2008-0569

2008-02-04T21:00:00.000-05:00

2011-03-07T22:04:55.877-05:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/216024 CONFIRM http://drupal.org/node/216035 CONFIRM http://drupal.org/node/216036 BID 27544 VUPEN ADV-2008-0374 The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors.

cpe:/a:drupal:openid:5

CVE-2008-0570

2008-02-04T21:00:00.000-05:00

2011-03-07T22:04:55.987-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/216022 BID 27542 VUPEN ADV-2008-0373 The OpenID 5.x-1.0 and earlier module for Drupal does not properly verify the claimed_id returned by an OpenID provider, which allows remote OpenID providers to spoof OpenID authentication for domains associated with other providers.

cpe:/a:drupal:userpoints_module:4.7 cpe:/a:drupal:userpoints_module:5.0

CVE-2008-0571

2008-02-04T21:00:00.000-05:00

2011-03-07T22:04:56.080-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/216023 VUPEN ADV-2008-0375 The point moderation form in the Userpoints 4.7.x before 4.7.x-2.3, 5.x-2 before 5.x-2.16, and 5.x-3 before 5.x-3.3 module for Drupal does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and manipulate points.

cpe:/a:mindmeld:mindmeld:1.2.0.10

CVE-2008-0572

2008-02-04T21:00:00.000-05:00

2017-09-28T21:30:20.957-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27538 EXPLOIT-DB 5026 Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP code via a URL in the MM_GLOBALS[home] parameter to (1) acweb/admin_index.php; and (2) ask.inc.php, (3) learn.inc.php, (4) manage.inc.php, (5) mind.inc.php, and (6) sensory.inc.php in include/.

cpe:/a:safenet:ipsecdrv.sys:10.4.0.12 cpe:/a:safenet:safenet_highassurance_remote:1.4.12 cpe:/a:safenet:softremote_vpn_client:1.4.12

CVE-2008-0573

2008-02-04T21:00:00.000-05:00

2017-09-28T21:30:21.020-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27496 SECTRACK 1019282 VUPEN ADV-2008-0333 EXPLOIT-DB 5004 IPSecDrv.sys 10.4.0.12 in SafeNET HighAssurance Remote and SoftRemote allows local users to gain privileges via a crafted IPSECDRV_IOCTL IOCTL request.

cpe:/a:webspell:webspell:4.01.02

CVE-2008-0574

2008-02-04T21:00:00.000-05:00

2018-10-15T18:01:17.817-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3606 BUGTRAQ 20080130 Webspell 4.01.02 2 Vulnerabilites BID 27517 XF webspell-index-xss(40084) Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.01.02 allows remote attackers to inject arbitrary web script or HTML via the sort parameter in a whoisonline action.

cpe:/a:webspell:webspell:4.01.02

CVE-2008-0575

2008-02-04T21:00:00.000-05:00

2018-10-15T18:01:18.257-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3606 BUGTRAQ 20080130 Webspell 4.01.02 2 Vulnerabilites Cross-site request forgery (CSRF) vulnerability in admin/admincenter.php in webSPELL 4.01.02 allows remote attackers to assign the superadmin privilege level to arbitrary accounts as administrators via an "update member" action.

cpe:/a:drupal:project_issue_tracking_module:4.7 cpe:/a:drupal:project_issue_tracking_module:5

CVE-2008-0576

2008-02-04T21:00:00.000-05:00

2011-03-07T22:04:56.597-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/216062 VUPEN ADV-2008-0376 Cross-site scripting (XSS) vulnerability in the Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and earlier in the 5.x-1.x series, 4.7.x-2.6 and earlier in the 4.7.x-2.x series, and 4.7.x-1.6 and earlier in the 4.7.x-1.x series for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors that write to summary table pages.

cpe:/a:drupal:project_issue_tracking_module:4.7 cpe:/a:drupal:project_issue_tracking_module:5.0

CVE-2008-0577

2008-02-04T21:00:00.000-05:00

2011-03-07T22:04:56.703-05:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/216063 VUPEN ADV-2008-0376 The Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and earlier in the 5.x-1.x series, 4.7.x-2.6 and earlier in the 4.7.x-2.x series, and 4.7.x-1.6 and earlier in the 4.7.x-1.x series for Drupal (1) does not restrict the extensions of attached files when the Upload module is enabled for issue nodes, which allows remote attackers to upload and possibly execute arbitrary files; and (2) accepts the .html extension within the bundled file-upload functionality, which allows remote attackers to upload files containing arbitrary web script or HTML.

cpe:/a:tripwire:tripwire_enterprise:7.0

CVE-2008-0578

2008-02-04T21:00:00.000-05:00

2018-10-15T18:01:18.490-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3610 MISC http://www.liquidmatrix.org/blog/2008/01/29/advisory-tripwire-enterprise-xss-vulnerability BUGTRAQ 20080129 Advisory: Tripwire Enterprise/Server XSS Vulnerability BID 27486 SECTRACK 1019279 VUPEN ADV-2008-0372 XF tripwire-login-xss(40016) Cross-site scripting (XSS) vulnerability in the web management login page in Tripwire Enterprise 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:joomla:com_buslicense

CVE-2008-0579

2008-02-04T22:00:00.000-05:00

2017-09-28T21:30:21.067-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27508 VUPEN ADV-2008-0359 EXPLOIT-DB 5011 SQL injection vulnerability in index.php in the buslicense (com_buslicense) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in a list action.

cpe:/a:geert_moernaut:lsrunase cpe:/a:geert_moernaut:supercrypt

CVE-2008-0580

2008-02-04T22:00:00.000-05:00

2018-10-15T18:01:19.147-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3611 BUGTRAQ 20080129 Insecure Use of RC4 in LSrunasE and Supercrypt (CVE-2007-6340) BID 27500 Geert Moernaut LSrunasE and Supercrypt use an encryption key composed of an SHA1 hash of a fixed string embedded in the executable file, which makes it easier for local users to obtain this key without reverse engineering.

cpe:/a:moernaut:lsrunase:1.0 cpe:/a:moernaut:supercrypt:1.0

CVE-2008-0581

2008-02-04T22:00:00.000-05:00

2018-10-15T18:01:19.380-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SREASON 3611 BUGTRAQ 20080129 Insecure Use of RC4 in LSrunasE and Supercrypt (CVE-2007-6340) Geert Moernaut LSrunasE allows local users to gain privileges by obtaining the encrypted password from a batch file, and constructing a modified batch file that specifies this password in the /password switch and specifies an arbitrary program in the /command switch.

cpe:/a:skype_technologies:skype:3.1 cpe:/a:skype_technologies:skype:3.2 cpe:/a:skype_technologies:skype:3.5 cpe:/a:skype_technologies:skype:3.6 cpe:/a:skype_technologies:skype:3.6.0.244

CVE-2008-0582

2008-02-04T22:00:00.000-05:00

2018-10-15T18:01:19.567-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aviv.raffon.net/2008/01/31/AttackersCanSkypeFindYou.aspx CERT-VN VU#794236 BUGTRAQ 20080131 Attackers can SkypeFind you BID 27338 Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.1 through 3.6.0.244 on Windows allows remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Full Name field of a reviewer of a business item entry, accessible through (1) the SkypeFind dialog and (2) a skype:?skypefind URI for the skype: URI handler.

cpe:/a:skype_technologies:skype:3.5 cpe:/a:skype_technologies:skype:3.6 cpe:/a:skype_technologies:skype:3.6.216 cpe:/a:skype_technologies:skype:3.6.244

CVE-2008-0583

2008-02-04T22:00:00.000-05:00

2017-08-07T21:29:40.103-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aviv.raffon.net/2008/01/22/NoMoreVideosForYouComeBackWhenPatchAvailable.aspx MISC http://skype.com/security/skype-sb-2008-001-update1.htm CERT-VN VU#794236 BID 27338 XF skype-addvideotochat-code-execution(39754) Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Description and unspecified other metadata fields of a Metacafe movie submitted by Metacafe Pro to the Skype video gallery, accessible through a search within the (1) "Add video to chat" or (2) "Add video to mood" dialog, a different vector than CVE-2008-0454.

cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.3

CVE-2008-0584

2008-02-04T22:00:00.000-05:00

2017-09-28T21:30:21.127-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

AIXAPAR IY96095 AIXAPAR IY96101 BID 27432 VUPEN ADV-2008-0261 CONFIRM http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4064 Multiple buffer overflows in bos.rte.control in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) swap, (2) swapoff, and (3) swapon programs.

cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.3

CVE-2008-0585

2008-02-04T22:00:00.000-05:00

2017-08-07T21:29:40.213-04:00

6.6

LOCAL

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov AIXAPAR IY97257 BID 27433 VUPEN ADV-2008-0261 CONFIRM http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4066 XF aix-websm-insecure-permissions(39906) sysmgt.websm.webaccess in IBM AIX 5.2 and 5.3 has world writable permissions for unspecified WebSM Remote Client files, which allows local users to "alter the behavior of" this client by overwriting these files.

cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.3

CVE-2008-0586

2008-02-04T22:00:00.000-05:00

2017-09-28T21:30:21.190-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://aix.software.ibm.com/aix/efixes/security/lvm_advisory.asc AIXAPAR IY98331 AIXAPAR IY98340 AIXAPAR IY99537 AIXAPAR IZ00559 AIXAPAR IZ10828 BID 27431 VUPEN ADV-2008-0261 AIXAPAR IY98448 AIXAPAR IY98450 CONFIRM http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4068 XF aix-lvm-commands-bo(39907) Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) lchangevg, (2) ldeletepv, (3) putlvodm, (4) lvaryoffvg, and (5) lvgenminor programs in bos.rte.lvm; and the (6) tellclvmd program in bos.clvm.enh.

cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.3

CVE-2008-0587

2008-02-04T22:00:00.000-05:00

2017-09-28T21:30:21.253-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

AIXAPAR IZ06261 AIXAPAR IZ06489 AIXAPAR IZ06621 BID 27429 VUPEN ADV-2008-0261 CONFIRM http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4072 XF aix-uspchrp-bo(39910) Buffer overflow in the uspchrp program in devices.chrp.base.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors.

cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.3

CVE-2008-0588

2008-02-04T22:00:00.000-05:00

2017-09-28T21:30:21.317-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

AIXAPAR IZ06260 AIXAPAR IZ06488 AIXAPAR IZ06620 BID 27430 VUPEN ADV-2008-0261 CONFIRM http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4070 XF aix-utape-bo(39909) Buffer overflow in the utape program in devices.scsi.tape.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors.

cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.3 cpe:/o:ibm:aix:6.1

CVE-2008-0589

2008-02-04T22:00:00.000-05:00

2017-08-07T21:29:40.447-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov SECTRACK 1019265 AIXAPAR IZ11242 AIXAPAR IZ11243 AIXAPAR IZ11244 AIXAPAR IZ12745 BID 27434 VUPEN ADV-2008-0261 CONFIRM http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4075 XF aix-ps-information-disclosure(39911) The ps program in bos.rte.control in IBM AIX 5.2, 5.3, and 6.1 allows local users to obtain sensitive information via unspecified vectors.

cpe:/a:progress:ipswitch_ws_ftp_server:6.1.0.0

CVE-2008-0590

2008-02-05T07:00:00.000-05:00

2019-08-13T10:40:02.327-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SREASON 3609 BUGTRAQ 20080202 IpSwitch WS_FTPSERVER with SSH remote Buffer Overflow BID 27573 VUPEN ADV-2008-0400 EXPLOIT-DB 5044 Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long opendir command.

cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:thunderbird:2.0.0.11

CVE-2008-0591

2008-02-08T19:00:00.000-05:00

2018-10-15T18:01:20.537-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20070604 Assorted browser vulnerabilities CONFIRM http://browser.netscape.com/releasenotes/ MISC http://lcamtuf.coredump.cx/ffclick2/ SUSE SUSE-SA:2008:008 SREASON 2781 SUNALERT 238492 CONFIRM http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0051 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0093 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 DEBIAN DSA-1484 DEBIAN DSA-1485 DEBIAN DSA-1489 DEBIAN DSA-1506 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:048 MANDRIVA MDVSA-2008:062 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-08.html REDHAT RHSA-2008:0103 REDHAT RHSA-2008:0104 REDHAT RHSA-2008:0105 BUGTRAQ 20070604 Assorted browser vulnerabilities BUGTRAQ 20080209 rPSA-2008-0051-1 firefox BUGTRAQ 20080212 FLEA-2008-0001-1 firefox BUGTRAQ 20080229 rPSA-2008-0093-1 thunderbird BID 24293 BID 27683 SECTRACK 1019339 UBUNTU USN-576-1 VUPEN ADV-2008-0453 VUPEN ADV-2008-0454 VUPEN ADV-2008-0627 VUPEN ADV-2008-1793 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=376473 CONFIRM https://issues.rpath.com/browse/RPL-1995 FEDORA FEDORA-2008-1435 FEDORA FEDORA-2008-1459 FEDORA FEDORA-2008-1535 FEDORA FEDORA-2008-2060 FEDORA FEDORA-2008-2118 Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the "dialog refocus bug" or "ffclick2".

cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:seamonkey:1.1.7

CVE-2008-0592

2008-02-08T19:00:00.000-05:00

2018-10-15T18:01:30.490-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://browser.netscape.com/releasenotes/ SUSE SUSE-SA:2008:008 SUNALERT 238492 CONFIRM http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0051 DEBIAN DSA-1484 DEBIAN DSA-1485 DEBIAN DSA-1489 DEBIAN DSA-1506 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:048 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-09.html REDHAT RHSA-2008:0103 REDHAT RHSA-2008:0104 REDHAT RHSA-2008:0105 BUGTRAQ 20080209 rPSA-2008-0051-1 firefox BUGTRAQ 20080212 FLEA-2008-0001-1 firefox BID 27683 SECTRACK 1019340 UBUNTU USN-576-1 VUPEN ADV-2008-0453 VUPEN ADV-2008-0627 VUPEN ADV-2008-1793 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=387258 FEDORA FEDORA-2008-1435 FEDORA FEDORA-2008-1459 FEDORA FEDORA-2008-1535 FEDORA FEDORA-2008-2060 FEDORA FEDORA-2008-2118 Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a "Content-Disposition: attachment" and an invalid "Content-Type: plain/text," which prevents Firefox from rendering future plain text files within the browser.

cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:seamonkey cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0::alpha cpe:/a:mozilla:seamonkey:1.0::beta cpe:/a:mozilla:seamonkey:1.0::dev cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.0.99 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/a:mozilla:seamonkey:1.1.13 cpe:/a:mozilla:seamonkey:1.1.14 cpe:/a:mozilla:seamonkey:1.1.15 cpe:/a:mozilla:seamonkey:1.1.16 cpe:/a:mozilla:seamonkey:1.1.17

CVE-2008-0593

2008-02-08T20:00:00.000-05:00

2018-10-15T18:01:36.287-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://browser.netscape.com/releasenotes/ SUSE SUSE-SA:2008:008 SUNALERT 238492 CONFIRM http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0051 DEBIAN DSA-1484 DEBIAN DSA-1485 DEBIAN DSA-1489 DEBIAN DSA-1506 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:048 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-10.html REDHAT RHSA-2008:0103 REDHAT RHSA-2008:0104 REDHAT RHSA-2008:0105 BUGTRAQ 20080209 rPSA-2008-0051-1 firefox BID 27683 SECTRACK 1019341 UBUNTU USN-576-1 VUPEN ADV-2008-0453 VUPEN ADV-2008-0627 VUPEN ADV-2008-1793 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=397427 FEDORA FEDORA-2008-1435 FEDORA FEDORA-2008-1459 FEDORA FEDORA-2008-1535 FEDORA FEDORA-2008-2060 FEDORA FEDORA-2008-2118 Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.

cpe:/a:mozilla:firefox:2.0.0.11

CVE-2008-0594

2008-02-08T20:00:00.000-05:00

2018-10-15T18:01:48.553-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://browser.netscape.com/releasenotes/ SUSE SUSE-SA:2008:008 SUNALERT 238492 CONFIRM http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0051 DEBIAN DSA-1484 DEBIAN DSA-1485 DEBIAN DSA-1489 DEBIAN DSA-1506 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:048 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-11.html BUGTRAQ 20080209 rPSA-2008-0051-1 firefox BUGTRAQ 20080212 FLEA-2008-0001-1 firefox BID 27683 SECTRACK 1019342 UBUNTU USN-576-1 VUPEN ADV-2008-0453 VUPEN ADV-2008-0627 VUPEN ADV-2008-1793 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=408164 FEDORA FEDORA-2008-1435 FEDORA FEDORA-2008-1535 Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks.

cpe:/o:d-bus:inter-process_communication_system:0.13 cpe:/o:d-bus:inter-process_communication_system:0.20 cpe:/o:d-bus:inter-process_communication_system:0.21 cpe:/o:d-bus:inter-process_communication_system:0.22 cpe:/o:d-bus:inter-process_communication_system:0.23 cpe:/o:d-bus:inter-process_communication_system:1.0 cpe:/o:d-bus:inter-process_communication_system:1.0.1 cpe:/o:d-bus:inter-process_communication_system:1.0.2 cpe:/o:d-bus:inter-process_communication_system:1.1.4 cpe:/o:mandrakesoft:mandrake_linux:2007 cpe:/o:mandrakesoft:mandrake_linux:2007.0_x86_64 cpe:/o:mandrakesoft:mandrake_linux:2007.1 cpe:/o:mandrakesoft:mandrake_linux:2007.1::x86-64 cpe:/o:mandrakesoft:mandrake_linux:2008.0 cpe:/o:mandrakesoft:mandrake_linux:2008.0::x86-64 cpe:/o:red_hat:enterprise_linux:5::server cpe:/o:red_hat:enterprise_linux_desktop:5::client cpe:/o:red_hat:enterprise_linux_desktop_workstation:5::client cpe:/o:redhat:fedora:7

CVE-2008-0595

2008-02-29T14:44:00.000-05:00

2018-10-15T18:01:52.680-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MLIST [dbus] 20080227 [ANNOUNCE] CVE-2008-0595 D-Bus Security Releases - D-Bus 1.0.3 and D-Bus 1.1.20 SUSE SUSE-SR:2008:006 SUSE openSUSE-SU-2012:1418 SECTRACK 1019512 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0099 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0099 DEBIAN DSA-1599 CONFIRM http://www.j5live.com/2008/02/27/announce-d-bus-1120-conisten-water-released/ MANDRIVA MDVSA-2008:054 REDHAT RHSA-2008:0159 BUGTRAQ 20080307 rPSA-2008-0099-1 dbus dbus-glib dbus-qt dbus-x11 BID 28023 UBUNTU USN-653-1 VUPEN ADV-2008-0694 CONFIRM https://issues.rpath.com/browse/RPL-2282 FEDORA FEDORA-2008-2043 FEDORA FEDORA-2008-2070 dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.

cpe:/a:easy_software_products:cups:1.1.17 cpe:/a:easy_software_products:cups:1.1.22

CVE-2008-0596

2008-02-25T19:44:00.000-05:00

2018-10-15T18:01:55.413-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 SUSE SUSE-SA:2008:012 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-098.htm CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0091 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0091 MANDRIVA MDVSA-2008:050 REDHAT RHSA-2008:0153 REDHAT RHSA-2008:0161 BUGTRAQ 20080229 rPSA-2008-0091-1 cups BID 27988 SECTRACK 1019497 VUPEN ADV-2008-0924 XF cups-ippbrowse-memoryleak-dos(40842) CONFIRM https://issues.rpath.com/browse/RPL-2283 Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a large number of requests to add and remove shared printers.

cpe:/a:easy_software_products:cups:1.1.17 cpe:/a:easy_software_products:cups:1.1.22

CVE-2008-0597

2008-02-25T19:44:00.000-05:00

2018-10-15T18:01:57.633-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SA:2008:012 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-098.htm CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0091 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0091 MANDRIVA MDVSA-2008:050 REDHAT RHSA-2008:0153 REDHAT RHSA-2008:0161 BUGTRAQ 20080229 rPSA-2008-0091-1 cups BID 27988 SECTRACK 1019497 XF cups-ippbrowse-useafterfree-dos(40845) CONFIRM https://issues.rpath.com/browse/RPL-2283 Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets.

cpe:/o:linux:linux_kernel:2.6.9 cpe:/o:linux:linux_kernel:2.6.18

CVE-2008-0598

2008-06-30T18:41:00.000-04:00

2017-09-28T21:30:21.987-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov SUSE SUSE-SA:2008:047 SUSE SUSE-SA:2008:048 SUSE SUSE-SA:2008:049 REDHAT RHSA-2008:0508 DEBIAN DSA-1630 MANDRIVA MDVSA-2008:220 REDHAT RHSA-2008:0519 REDHAT RHSA-2008:0973 REDHAT RHSA-2009:0009 BID 29942 SECTRACK 1020367 UBUNTU USN-625-1 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=433938 XF linux-kernel-emulation-disclosure(43554) Unspecified vulnerability in the 32-bit and 64-bit emulation in the Linux kernel 2.6.9, 2.6.18, and probably other versions allows local users to read uninitialized memory via unknown vectors involving a crafted binary.

cpe:/a:php:php:5.0.0:beta1 cpe:/a:php:php:5.0.0:beta2 cpe:/a:php:php:5.0.0:beta3 cpe:/a:php:php:5.0.0:beta4 cpe:/a:php:php:5.0.0:rc1 cpe:/a:php:php:5.0.0:rc2 cpe:/a:php:php:5.0.0:rc3 cpe:/a:php:php:5.0.1 cpe:/a:php:php:5.0.2 cpe:/a:php:php:5.0.3 cpe:/a:php:php:5.0.4 cpe:/a:php:php:5.0.5 cpe:/a:php:php:5.1.0 cpe:/a:php:php:5.1.1 cpe:/a:php:php:5.1.2 cpe:/a:php:php:5.1.3 cpe:/a:php:php:5.1.4 cpe:/a:php:php:5.1.5 cpe:/a:php:php:5.1.6 cpe:/a:php:php:5.2.0 cpe:/a:php:php:5.2.1 cpe:/a:php:php:5.2.2 cpe:/a:php:php:5.2.3 cpe:/a:php:php:5.2.4 cpe:/a:php:php:5.2.5

CVE-2008-0599

2008-05-05T13:20:00.000-04:00

2018-10-15T18:01:59.383-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://cvs.php.net/viewvc.cgi/php-src/sapi/cgi/cgi_main.c?r1=1.267.2.15.2.50.2.12&r2=1.267.2.15.2.50.2.13&diff_format=u HP HPSBUX02342 APPLE APPLE-SA-2008-07-31 HP SSRT090085 HP HPSBUX02465 GENTOO GLSA-200811-05 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176 CERT-VN VU#147027 MANDRIVA MDVSA-2008:127 MANDRIVA MDVSA-2008:128 MLIST [oss-security] 20080502 CVE Request (PHP) CONFIRM http://www.php.net/ChangeLog-5.php REDHAT RHSA-2008:0505 BUGTRAQ 20080523 rPSA-2008-0176-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl BID 29009 SECTRACK 1019958 SLACKWARE SSA:2008-128-01 UBUNTU USN-628-1 VUPEN ADV-2008-1412 VUPEN ADV-2008-1810 VUPEN ADV-2008-2268 XF php-vector-unspecified(42137) CONFIRM https://issues.rpath.com/browse/RPL-2503 FEDORA FEDORA-2008-3864 FEDORA FEDORA-2008-3606 The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.

cpe:/o:linux:linux_kernel:2.6.17 cpe:/o:linux:linux_kernel:2.6.17:rc1 cpe:/o:linux:linux_kernel:2.6.17:rc2 cpe:/o:linux:linux_kernel:2.6.17:rc3 cpe:/o:linux:linux_kernel:2.6.17:rc4 cpe:/o:linux:linux_kernel:2.6.17:rc5 cpe:/o:linux:linux_kernel:2.6.17:rc6 cpe:/o:linux:linux_kernel:2.6.17.1 cpe:/o:linux:linux_kernel:2.6.17.2 cpe:/o:linux:linux_kernel:2.6.17.3 cpe:/o:linux:linux_kernel:2.6.17.4 cpe:/o:linux:linux_kernel:2.6.17.5 cpe:/o:linux:linux_kernel:2.6.17.6 cpe:/o:linux:linux_kernel:2.6.17.7 cpe:/o:linux:linux_kernel:2.6.17.8 cpe:/o:linux:linux_kernel:2.6.17.9 cpe:/o:linux:linux_kernel:2.6.17.10 cpe:/o:linux:linux_kernel:2.6.17.11 cpe:/o:linux:linux_kernel:2.6.17.12 cpe:/o:linux:linux_kernel:2.6.17.13 cpe:/o:linux:linux_kernel:2.6.17.14 cpe:/o:linux:linux_kernel:2.6.18 cpe:/o:linux:linux_kernel:2.6.18:rc1 cpe:/o:linux:linux_kernel:2.6.18:rc2 cpe:/o:linux:linux_kernel:2.6.18:rc3 cpe:/o:linux:linux_kernel:2.6.18:rc4 cpe:/o:linux:linux_kernel:2.6.18:rc5 cpe:/o:linux:linux_kernel:2.6.18:rc6 cpe:/o:linux:linux_kernel:2.6.18:rc7 cpe:/o:linux:linux_kernel:2.6.18.1 cpe:/o:linux:linux_kernel:2.6.18.2 cpe:/o:linux:linux_kernel:2.6.18.3 cpe:/o:linux:linux_kernel:2.6.18.4 cpe:/o:linux:linux_kernel:2.6.18.5 cpe:/o:linux:linux_kernel:2.6.18.6 cpe:/o:linux:linux_kernel:2.6.18.7 cpe:/o:linux:linux_kernel:2.6.18.8 cpe:/o:linux:linux_kernel:2.6.19 cpe:/o:linux:linux_kernel:2.6.19:rc1 cpe:/o:linux:linux_kernel:2.6.19:rc2 cpe:/o:linux:linux_kernel:2.6.19:rc3 cpe:/o:linux:linux_kernel:2.6.19:rc4 cpe:/o:linux:linux_kernel:2.6.19.1 cpe:/o:linux:linux_kernel:2.6.19.2 cpe:/o:linux:linux_kernel:2.6.19.3 cpe:/o:linux:linux_kernel:2.6.20 cpe:/o:linux:linux_kernel:2.6.20:rc2 cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:linux:linux_kernel:2.6.20.2 cpe:/o:linux:linux_kernel:2.6.20.3 cpe:/o:linux:linux_kernel:2.6.20.4 cpe:/o:linux:linux_kernel:2.6.20.5 cpe:/o:linux:linux_kernel:2.6.20.6 cpe:/o:linux:linux_kernel:2.6.20.7 cpe:/o:linux:linux_kernel:2.6.20.8 cpe:/o:linux:linux_kernel:2.6.20.9 cpe:/o:linux:linux_kernel:2.6.20.10 cpe:/o:linux:linux_kernel:2.6.20.11 cpe:/o:linux:linux_kernel:2.6.20.12 cpe:/o:linux:linux_kernel:2.6.20.13 cpe:/o:linux:linux_kernel:2.6.20.14 cpe:/o:linux:linux_kernel:2.6.20.15 cpe:/o:linux:linux_kernel:2.6.21 cpe:/o:linux:linux_kernel:2.6.21:git1 cpe:/o:linux:linux_kernel:2.6.21:git2 cpe:/o:linux:linux_kernel:2.6.21:git3 cpe:/o:linux:linux_kernel:2.6.21:git4 cpe:/o:linux:linux_kernel:2.6.21:git5 cpe:/o:linux:linux_kernel:2.6.21:git6 cpe:/o:linux:linux_kernel:2.6.21:git7 cpe:/o:linux:linux_kernel:2.6.21:rc3 cpe:/o:linux:linux_kernel:2.6.21:rc4 cpe:/o:linux:linux_kernel:2.6.21:rc5 cpe:/o:linux:linux_kernel:2.6.21:rc6 cpe:/o:linux:linux_kernel:2.6.21:rc7 cpe:/o:linux:linux_kernel:2.6.21.1 cpe:/o:linux:linux_kernel:2.6.21.2 cpe:/o:linux:linux_kernel:2.6.21.3 cpe:/o:linux:linux_kernel:2.6.21.4 cpe:/o:linux:linux_kernel:2.6.22 cpe:/o:linux:linux_kernel:2.6.22:rc6 cpe:/o:linux:linux_kernel:2.6.22.1 cpe:/o:linux:linux_kernel:2.6.22.3 cpe:/o:linux:linux_kernel:2.6.22.4 cpe:/o:linux:linux_kernel:2.6.22.5 cpe:/o:linux:linux_kernel:2.6.22.6 cpe:/o:linux:linux_kernel:2.6.22.7 cpe:/o:linux:linux_kernel:2.6.22.16 cpe:/o:linux:linux_kernel:2.6.23 cpe:/o:linux:linux_kernel:2.6.23:rc1 cpe:/o:linux:linux_kernel:2.6.23:rc2 cpe:/o:linux:linux_kernel:2.6.23.1 cpe:/o:linux:linux_kernel:2.6.23.2 cpe:/o:linux:linux_kernel:2.6.23.3 cpe:/o:linux:linux_kernel:2.6.23.4 cpe:/o:linux:linux_kernel:2.6.23.5 cpe:/o:linux:linux_kernel:2.6.23.6 cpe:/o:linux:linux_kernel:2.6.23.7 cpe:/o:linux:linux_kernel:2.6.23.9 cpe:/o:linux:linux_kernel:2.6.23.14 cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.24:rc2 cpe:/o:linux:linux_kernel:2.6.24:rc3 cpe:/o:linux:linux_kernel:2.6.24.1

CVE-2008-0600

2008-02-12T16:00:00.000-05:00

2018-10-30T12:25:10.013-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SUSE SUSE-SA:2008:007 SUSE SUSE-SA:2008:013 SUSE SUSE-SA:2008:030 MLIST [linux-kernel] 20080210 Re: [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit MLIST [linux-kernel] 20080210 Re: [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit MLIST [linux-kernel] 20080210 Re: [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit MLIST [linux-kernel] 20080210 Re: [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit MLIST [linux-kernel] 20080210 Re: [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit SECTRACK 1019393 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0052 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0052 DEBIAN DSA-1494 MANDRIVA MDVSA-2008:043 MANDRIVA MDVSA-2008:044 REDHAT RHSA-2008:0129 BUGTRAQ 20080212 rPSA-2008-0052-1 kernel BID 27704 BID 27801 UBUNTU USN-577-1 VUPEN ADV-2008-0487 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=432229 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=432517 CONFIRM https://issues.rpath.com/browse/RPL-2237 EXPLOIT-DB 5092 FEDORA FEDORA-2008-1422 FEDORA FEDORA-2008-1423 FEDORA FEDORA-2008-1433 FEDORA FEDORA-2008-1629 The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010.

cpe:/a:all_club_cms:all_club_cms:0.0.1f

CVE-2008-0601

2008-02-06T07:00:00.000-05:00

2017-09-28T21:30:22.253-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27624 EXPLOIT-DB 5064 SQL injection vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter.

cpe:/a:all_club_cms:all_club_cms:0.0.1f

CVE-2008-0602

2008-02-06T07:00:00.000-05:00

2017-09-28T21:30:22.317-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

EXPLOIT-DB 5061 Directory traversal vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the class_name parameter.

cpe:/a:amazoop:awesom:0.3.2 cpe:/a:joomla:com_awesom:0.3.2 cpe:/a:mambo:com_awesom:0.3.2

CVE-2008-0603

2008-02-06T07:00:00.000-05:00

2017-09-28T21:30:22.363-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27607 EXPLOIT-DB 5058 SQL injection vulnerability in index.php in the amazOOP Awesom! (com_awesom) 0.3.2component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter in a viewlist task.

cpe:/a:xlight_ftp_server:xlight_ftp_server:2.82

CVE-2008-0604

2008-02-06T07:00:00.000-05:00

2008-09-05T17:35:31.290-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2008-02-06T09:15:00.000-05:00

ALLOWS_OTHER_ACCESS

BID 27602 CONFIRM http://www.xlightftpd.com/whatsnew.htm The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions.

cpe:/a:astrosoft:astrosoft_helpdesk:1.95.227

CVE-2008-0605

2008-02-06T07:00:00.000-05:00

2018-10-15T18:02:10.647-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3612 BUGTRAQ 20080204 [DSECRG-08-011] Astrosoft HelpDesk Multiple XSS BUGTRAQ 20080214 [DSECRG-08-011 | FIX INFORMATION] Astrosoft HelpDesk Multiple XSS BID 27610 Multiple cross-site scripting (XSS) vulnerabilities in AstroSoft HelpDesk before 1.95.228 allow remote attackers to inject arbitrary web script or HTML via the (1) txtSearch parameter to operator/article/article_search_results.asp and the (2) Attach_Id parameter to operator/article/article_attachment.asp. NOTE: for vector 2, the XSS occurs in a forced SQL error message.

cpe:/a:joomla:com_shambo2 cpe:/a:mambo:com_shambo2 cpe:/a:phil_taylor:shambo2

CVE-2008-0606

2008-02-06T07:00:00.000-05:00

2017-09-28T21:30:22.427-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27609 XF shambo2-index-sql-injection(40238) EXPLOIT-DB 5059 SQL injection vulnerability in index.php in the Shambo2 (com_shambo2) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter.

cpe:/a:joomla:com_sobi2 cpe:/a:mambo:com_sobi2 cpe:/a:sigsiu.net:sobi2:2.5.3

CVE-2008-0607

2008-02-06T07:00:00.000-05:00

2017-09-28T21:30:22.487-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27617 EXPLOIT-DB 5038 SQL injection vulnerability in index.php in the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) 2.5.3 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:ipswitch:ws_ftp:6.1

CVE-2008-0608

2008-02-06T07:00:00.000-05:00

2018-10-15T18:02:11.057-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/ftplogsrvz-adv.txt BUGTRAQ 20080204 Socket termination in FTP Log Server 7.9.14.0 BID 27612 VUPEN ADV-2008-0408 The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denial of service (loss of responsiveness) via a large number of large packets to port 5151/udp, which causes the listening socket to terminate and prevents log commands from being recorded, a different vulnerability than CVE-2007-3823.

cpe:/a:divideconcept:vhd_web_pack:2.0

CVE-2008-0609

2008-02-06T07:00:00.000-05:00

2018-10-15T18:02:11.430-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3613 BUGTRAQ 20080204 [DSECRG-08-010] VHD Web Pack 2.0 Local File Include BID 27621 EXPLOIT-DB 5060 Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.

cpe:/a:ultravnc:ultravnc:1.0.2 cpe:/a:ultravnc:ultravnc:1.0.4 cpe:/a:ultravnc:ultravnc:1.0.4_rc6 cpe:/a:ultravnc:ultravnc:1.0.4_rc7 cpe:/a:ultravnc:ultravnc:1.0.4_rc8

CVE-2008-0610

2008-02-06T07:00:00.000-05:00

2012-08-13T22:37:00.877-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://forum.ultravnc.info/viewtopic.php?t=11850 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=571174&group_id=63887 CONFIRM http://ultravnc.svn.sourceforge.net/viewvc/ultravnc/UltraVNC%20Project%20Root/UltraVNC/vncviewer/ClientConnection.cpp?sortby=date&r1=169&r2=168&pathrev=169 EXPLOIT-DB 18666 CERT-VN VU#721460 BID 27561 SECTRACK 1019293 VUPEN ADV-2008-0392 Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a modified size value.

cpe:/a:rmsoft:gallery_system:2.0 cpe:/a:xoops:xoops

CVE-2008-0611

2008-02-06T07:00:00.000-05:00

2017-09-28T21:30:22.597-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27623 EXPLOIT-DB 5062 SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:xoops:xoops:2.0.18

CVE-2008-0612

2008-02-06T07:00:00.000-05:00

2018-10-15T18:02:11.883-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3614 BUGTRAQ 20080204 [DSECRG-08-009] xoops 2.0.18 Local File Include BID 27622 CONFIRM http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/branches/2.0.x/2.0.18.1/docs/changelog.txt?r1=1283&r2=1282&pathrev=1283 CONFIRM http://xoops.svn.sourceforge.net/viewvc/xoops?view=rev&revision=1283 EXPLOIT-DB 5057 Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.

cpe:/a:xoops:xoops:2.0.18

CVE-2008-0613

2008-02-06T07:00:00.000-05:00

2018-10-15T18:02:12.383-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3614 CONFIRM http://sourceforge.net/tracker/index.php?func=detail&atid=430840&aid=1881236&group_id=41586 BUGTRAQ 20080204 [DSECRG-08-009] xoops 2.0.18 Local File Include CONFIRM http://xoops.svn.sourceforge.net/viewvc/xoops?view=rev&revision=1282 EXPLOIT-DB 5057 Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the xoops_redirect parameter.

cpe:/a:photokorn:gallery:1.543

CVE-2008-0614

2008-02-06T07:00:00.000-05:00

2017-09-28T21:30:22.753-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27627 EXPLOIT-DB 5065 SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL commands via the pic parameter in a showpic action.

cpe:/a:dmsguestbook:dmsguestbook:1.7 cpe:/a:dmsguestbook:dmsguestbook:1.8 cpe:/a:wordpress:wordpress

CVE-2008-0615

2008-02-06T07:00:00.000-05:00

2018-10-15T18:02:12.820-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3615 BUGTRAQ 20080202 Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities BID 27575 EXPLOIT-DB 5035 Directory traversal vulnerability in wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allows remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) folder and (2) file parameters.

cpe:/a:dmsguestbook:dmsguestbook:1.7 cpe:/a:wordpress:wordpress

CVE-2008-0616

2008-02-06T07:00:00.000-05:00

2018-10-15T18:02:13.273-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3615 BUGTRAQ 20080202 Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities XF dmsguestbook-unspecified-sql-injection(40196) EXPLOIT-DB 5035 SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.

cpe:/a:daniel_m._schurter:dmsguestbook:1.7.0 cpe:/a:wordpress:wordpress

CVE-2008-0617

2008-02-06T07:00:00.000-05:00

2018-10-15T18:02:13.697-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3615 BUGTRAQ 20080202 Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities BID 27575 EXPLOIT-DB 5035 Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.7.0 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter to wp-admin/admin.php, or the (2) messagefield parameter in the guestbook page, and the (3) title parameter in the messagearea.

cpe:/a:daniel_m._schurter:dmsguestbook:1.7.0 cpe:/a:daniel_m._schurter:dmsguestbook:1.8.0 cpe:/a:wordpress:wordpress

CVE-2008-0618

2008-02-06T07:00:00.000-05:00

2008-09-05T17:35:33.430-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-06T10:13:00.000-05:00

Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) gbname, (2) gbemail, (3) gburl, and (4) gbmsg parameters to unspecified programs. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:nero:mediaplayer:1.4.0.35

CVE-2008-0619

2008-02-06T07:00:00.000-05:00

2018-10-15T18:02:14.087-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SREASON 3616 BUGTRAQ 20080205 NERO Media Player <= 1.4.0.35b Remote Buffer Overflow( .M3U) BID 27615 VUPEN ADV-2008-0405 EXPLOIT-DB 5063 Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (persistent crash) via a long URI in a .M3U file.

cpe:/a:sap:sapgui:7.10 cpe:/a:sap:saplpd:6.28 cpe:/a:sap:sapsprint

CVE-2008-0620

2008-02-06T07:00:00.000-05:00

2018-10-15T18:02:14.603-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SREASON 3619 BUGTRAQ 20080204 Multiple vulnerabilities in SAPlpd 6.28 BUGTRAQ 20080205 Re: Multiple vulnerabilities in SAPlpd 6.28 BID 27613 SECTRACK 1019300 VUPEN ADV-2008-0409 VUPEN ADV-2008-0438 SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command, which causes the server to terminate.

cpe:/a:sap:sapgui:7.10 cpe:/a:sap:saplpd:6.28 cpe:/a:sap:sapsprint

CVE-2008-0621

2008-02-06T07:00:00.000-05:00

2018-10-15T18:02:15.367-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3619 BUGTRAQ 20080204 Multiple vulnerabilities in SAPlpd 6.28 BUGTRAQ 20080205 Re: Multiple vulnerabilities in SAPlpd 6.28 BID 27613 SECTRACK 1019300 VUPEN ADV-2008-0409 VUPEN ADV-2008-0438 EXPLOIT-DB 5079 Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.

cpe:/a:raidenhttpd:raidenhttpd:2.0.19

CVE-2008-0622

2008-02-06T07:00:00.000-05:00

2011-03-07T22:05:00.643-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov JVN JVN#91868305 CONFIRM http://www.raidenhttpd.com/jp/security.html BID 27628 VUPEN ADV-2008-0411 Cross-site scripting (XSS) vulnerability in RaidenHTTPD 2.0.19 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the ulang parameter.

cpe:/a:yahoo:music_jukebox:2.2.2.056

CVE-2008-0623

2008-02-06T16:00:00.000-05:00

2017-09-28T21:30:23.143-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CERT-VN VU#101676 BID 27590 SECTRACK 1019301 VUPEN ADV-2008-0396 EXPLOIT-DB 5043 EXPLOIT-DB 5046 EXPLOIT-DB 5048 Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method.

cpe:/a:yahoo:music_jukebox:2.2.2.56

CVE-2008-0624

2008-02-06T16:00:00.000-05:00

2017-09-28T21:30:23.207-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CERT-VN VU#101676 BID 27579 VUPEN ADV-2008-0396 EXPLOIT-DB 5051 Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623.

cpe:/a:yahoo:music_jukebox:2.2.2.56

CVE-2008-0625

2008-02-06T16:00:00.000-05:00

2017-09-28T21:30:23.270-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CERT-VN VU#340860 BID 27578 SECTRACK 1019298 VUPEN ADV-2008-0396 EXPLOIT-DB 5052 Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method.

CVE-2008-0626

2008-02-06T16:00:00.000-05:00

2008-02-07T00:00:00.000-05:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6303. Reason: This candidate is a duplicate of CVE-2007-6303. Notes: All CVE users should reference CVE-2007-6303 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2008-0627

2008-02-06T16:00:00.000-05:00

2008-02-07T00:00:00.000-05:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6304. Reason: This candidate is a duplicate of CVE-2007-6304. Notes: All CVE users should reference CVE-2007-6304 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:sun:jdk:1.6 cpe:/a:sun:jre:1.6.0:update3

CVE-2008-0628

2008-02-06T16:00:00.000-05:00

2018-10-15T18:02:16.353-04:00

7.8

NETWORK

MEDIUM

NONE

PARTIAL

COMPLETE

http://nvd.nist.gov BEA BEA08-201.00 MISC http://scary.beasts.org/security/CESA-2007-002.html GENTOO GLSA-200804-28 SREASON 3621 SUNALERT 231246 GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 REDHAT RHSA-2008:0245 BUGTRAQ 20080202 Sun JRE / JDK bug introduces XXE possibilities BID 27553 SECTRACK 1019292 VUPEN ADV-2008-0371 VUPEN ADV-2008-1252 The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity (XXE) attacks and cause a denial of service or access restricted resources.

cpe:/a:mplayer:mplayer:1.02rc2

CVE-2008-0629

2008-02-06T16:00:00.000-05:00

2008-09-05T17:35:35.040-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-07T08:51:00.000-05:00

GENTOO GLSA-200803-16 DEBIAN DSA-1496 MANDRIVA MDVSA-2008:045 CONFIRM http://www.mplayerhq.hu/design7/news.html BID 27765 Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title.

cpe:/a:mplayer:mplayer:1.02rc2

CVE-2008-0630

2008-02-06T16:00:00.000-05:00

2008-09-05T17:35:35.180-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2008-02-07T08:53:00.000-05:00

ALLOWS_USER_ACCESS

GENTOO GLSA-200803-16 DEBIAN DSA-1496 MANDRIVA MDVSA-2008:045 CONFIRM http://www.mplayerhq.hu/design7/news.html BID 27766 Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code.

cpe:/a:afterlogic:mailbee_objects:5.5

CVE-2008-0631

2008-02-06T16:00:00.000-05:00

2017-09-28T21:30:23.393-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27481 XF mailbee-mailbee-file-overwrite(40011) EXPLOIT-DB 4999 Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files via the SaveToDisk method, or (2) modify files via the AddStringToFile method.

cpe:/a:lightblog:lightblog:9.5

CVE-2008-0632

2008-02-06T16:00:00.000-05:00

2018-10-15T18:02:17.993-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MISC http://omni.netsons.org/blog/?p=11 SREASON 3617 BUGTRAQ 20080201 LightBlog Remote File Upload Vulnerability BID 27562 EXPLOIT-DB 5033 Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the blog's root directory.

cpe:/a:anon_proxy_server:anon_proxy_server:0.102

CVE-2008-0633

2008-02-06T16:00:00.000-05:00

2018-10-15T18:02:18.523-04:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov SREASON 3618 BUGTRAQ 20080203 Anon Proxy Server <= 0.102 remote buffer overflow BID 27593 CONFIRM https://sourceforge.net/project/shownotes.php?group_id=138780&release_id=571924 Buffer overflow in Anon Proxy Server 0.102 and earlier, when user authentication is enabled, allows remote attackers to cause a denial of service (exception) via a user name with a large number of quotes, which triggers the overflow during escaping.

cpe:/a:sejoong_namo:activesquare:6 cpe:/a:sejoong_namo:namoinstall.1_activex_control:3.0.0.1

CVE-2008-0634

2008-02-06T16:00:00.000-05:00

2017-09-28T21:30:23.550-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov XF namo-activesquare-bo(40199) EXPLOIT-DB 5045 Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6, allows remote attackers to execute arbitrary code via a long argument to the Install method, a different vulnerability than CVE-2008-0551.

cpe:/a:openads:openads:2.4 cpe:/a:openads:openads:2.4.2

CVE-2008-0635

2008-02-06T16:00:00.000-05:00

2018-10-15T18:02:18.837-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3620 BUGTRAQ 20080204 [OPENADS-SA-2008-001] Openads 2.4.2 vulnerability fixed BID 27603 Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via unknown vectors.

cpe:/a:level_platforms:managed_workplace_service_center:4 cpe:/a:level_platforms:managed_workplace_service_center:5 cpe:/a:level_platforms:managed_workplace_service_center:6

CVE-2008-0636

2008-02-12T15:00:00.000-05:00

2018-10-15T18:02:19.163-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3659 BUGTRAQ 20080208 SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability BUGTRAQ 20080214 Re: SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability BUGTRAQ 20080908 Re: Re: SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability BID 27702 Level Platforms, Inc. (LPI) Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensitive information via a direct request to About/SC_About.htm, which provides version and patch information.

cpe:/a:symantec:veritas_storage_foundation:5.0::aix cpe:/a:symantec:veritas_storage_foundation:5.0::hp_ux cpe:/a:symantec:veritas_storage_foundation:5.0::linux cpe:/a:symantec:veritas_storage_foundation:5.0::solaris cpe:/a:symantec:veritas_storage_foundation:5.0::windows_2000 cpe:/a:symantec:veritas_storage_foundation:5.0:32bit:windows_2003 cpe:/a:symantec:veritas_storage_foundation:5.0:64bit:windows_2003

CVE-2008-0638

2008-02-21T15:44:00.000-05:00

2018-10-15T18:02:19.697-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1019459 BUGTRAQ 20080220 ZDI-08-007: Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability BID 25778 CONFIRM http://www.symantec.com/avcenter/security/Content/2008.02.20a.html MISC http://www.zerodayinitiative.com/advisories/ZDI-08-007.html Heap-based buffer overflow in the Veritas Enterprise Administrator (VEA) service (aka vxsvc.exe) in Symantec Veritas Storage Foundation 5.0 allows remote attackers to execute arbitrary code via a packet with a crafted value of a certain size field, which is not checked for consistency with the actual buffer size.

cpe:/a:novell:client:4.91:sp2 cpe:/a:novell:client:4.91:sp3 cpe:/a:novell:client:4.91:sp4

CVE-2008-0639

2008-02-13T16:00:00.000-05:00

2018-10-15T18:02:20.180-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://download.novell.com/Download?buildid=SszG22IIugM~ FULLDISC 20080211 ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability CONFIRM http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5008300.html BUGTRAQ 20080211 ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability BID 27741 SECTRACK 1019366 VUPEN ADV-2008-0496 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-005.html Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to execute arbitrary code via a crafted RPC request, aka Novell bug 353138, a different vulnerability than CVE-2006-5854. NOTE: this issue exists because of an incomplete fix for CVE-2007-6701.

cpe:/a:symantec:ghost_solutions_suite:1.1 cpe:/a:symantec:ghost_solutions_suite:2.0.0 cpe:/a:symantec:ghost_solutions_suite:2.0.1

CVE-2008-0640

2008-02-07T21:00:00.000-05:00

2011-07-25T00:00:00.000-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2008-02-08T13:12:00.000-05:00

ALLOWS_ADMIN_ACCESS

BID 27644 SECTRACK 1019356 CONFIRM http://www.symantec.com/avcenter/security/Content/2008.02.07.html VUPEN ADV-2008-0474 Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing.

cpe:/a:adobe:robohelp:6 cpe:/a:adobe:robohelp:7

CVE-2008-0642

2008-02-14T20:00:00.000-05:00

2011-03-07T22:05:02.097-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1019397 CONFIRM http://www.adobe.com/support/security/bulletins/apsb08-05.html BID 27763 VUPEN ADV-2008-0537 Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) WildFire (WildFireExt) extension, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-1280.

cpe:/a:adobe:coldfusion:7.0 cpe:/a:adobe:coldfusion:7.0.1 cpe:/a:adobe:coldfusion:7.0.2 cpe:/a:adobe:coldfusion:8.0

CVE-2008-0643

2008-03-11T20:44:00.000-04:00

2017-08-07T21:29:41.040-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.adobe.com/support/security/bulletins/apsb08-06.html BID 28205 SECTRACK 1019589 VUPEN ADV-2008-0862 XF adobe-coldfusion-useragent-xss(41144) Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:adobe:coldfusion:7.0 cpe:/a:adobe:coldfusion:7.0.1 cpe:/a:adobe:coldfusion:7.0.2 cpe:/a:adobe:coldfusion:8.0

CVE-2008-0644

2008-03-11T20:44:00.000-04:00

2017-08-07T21:29:41.103-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.adobe.com/support/security/bulletins/apsb08-07.html BID 28205 SECTRACK 1019590 VUPEN ADV-2008-0862 XF coldfusion-setencoding-xss(41145) Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism for applications via unspecified vectors related to the setEncoding function.

cpe:/a:portail_web_php:portail_web_php:2.5.1.1

CVE-2008-0645

2008-02-07T16:00:00.000-05:00

2008-09-05T17:35:37.180-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2008-02-08T11:44:00.000-05:00

ALLOWS_USER_ACCESS

BID 27616 Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) config/conf-activation.php, (2) menu/item.php, and (3) modules/conf_modules.php in admin/system/; and (4) system/login.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:deluge_team:deluge:0.5.8.2 cpe:/a:rasterbar_software:libtorrent:0.12

CVE-2008-0646

2008-02-07T16:00:00.000-05:00

2011-03-07T22:05:02.453-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://deluge-torrent.org/Changelog.php CONFIRM http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_12/include/libtorrent/bencode.hpp?r1=956&r2=1968&pathrev=1968 CONFIRM http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_12/include/libtorrent/bencode.hpp?view=log&pathrev=1968#rev1968 CONFIRM http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_13/include/libtorrent/bencode.hpp?view=log&pathrev=1968 CONFIRM http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/trunk/include/libtorrent/bencode.hpp?view=log&pathrev=1968 BID 27597 VUPEN ADV-2008-0383 VUPEN ADV-2008-0384 FEDORA FEDORA-2008-1198 The bdecode_recursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before 0.5.8.3 and other products, allows context-dependent attackers to cause a denial of service (stack exhaustion and crash) via a crafted bencoded message.

cpe:/a:ourgame.com:glworld:2.6.1.29 cpe:/a:ourgame.com:hangameplugincn18_activex_control

CVE-2008-0647

2008-02-07T16:00:00.000-05:00

2017-09-28T21:30:23.613-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27626 MISC http://www.symantec.com/enterprise/security_response/weblog/2008/02/zeroday_exploit_for_lianzong_g.html VUPEN ADV-2008-0427 EXPLOIT-DB 5153 Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 (aka Lianzong Game Platform) allow remote attackers to execute arbitrary code via long arguments to the (1) hgs_startGame and (2) hgs_startNotify methods, as exploited in the wild as of February 2008. NOTE: some of these details are obtained from third party information.

cpe:/a:opensiteadmin:opensiteadmin:0.9.1.1

CVE-2008-0648

2008-02-07T16:00:00.000-05:00

2017-09-28T21:30:23.660-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 27640 EXPLOIT-DB 5068 Multiple PHP remote file inclusion vulnerabilities in OpenSiteAdmin 0.9.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) indexFooter.php; and (2) DatabaseManager.php, (3) FieldManager.php, (4) Filter.php, (5) Form.php, (6) FormManager.php, (7) LoginManager.php, and (8) Filters/SingleFilter.php in scripts/classes/.

cpe:/a:adp:astanda_directory_project:1.2 cpe:/a:adp:astanda_directory_project:1.3

CVE-2008-0649

2008-02-07T16:00:00.000-05:00

2017-09-28T21:30:23.723-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27646 EXPLOIT-DB 5071 SQL injection vulnerability in detail.php in Astanda Directory Project (ADP) 1.2 and 1.3 allows remote attackers to execute arbitrary SQL commands via the link_id parameter.

cpe:/a:simple_os_cms:simple_os_cms:0.1c_beta

CVE-2008-0650

2008-02-07T16:00:00.000-05:00

2008-09-05T17:35:37.947-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2008-02-08T12:03:00.000-05:00

ALLOWS_OTHER_ACCESS

BID 27589 SQL injection vulnerability in login.php in Simple OS CMS 0.1c beta allows remote attackers to execute arbitrary SQL commands via the username field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:pedro_santana_codice:cms

CVE-2008-0651

2008-02-07T16:00:00.000-05:00

2008-09-05T17:35:38.087-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2008-02-08T12:04:00.000-05:00

ALLOWS_OTHER_ACCESS

BID 27592 SQL injection vulnerability in login.php in Pedro Santana Codice CMS allows remote attackers to execute arbitrary SQL commands via the username field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:joomla:com_downloads cpe:/a:mambo:com_downloads

CVE-2008-0652

2008-02-07T16:00:00.000-05:00

2017-09-28T21:30:23.787-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27648 EXPLOIT-DB 5073 SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action.

cpe:/a:joomla:com_ynews:1.0.0

CVE-2008-0653

2008-02-07T16:00:00.000-05:00

2017-09-28T21:30:23.847-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27649 EXPLOIT-DB 5072 SQL injection vulnerability in index.php in the Ynews (com_ynews) 1.0.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showYNews action.

cpe:/a:azucar_cms:azucar_cms:1.3

CVE-2008-0654

2008-02-07T16:00:00.000-05:00

2018-10-15T18:02:20.900-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3622 BUGTRAQ 20080205 [DSECRG-08-012] Multiple LFI in Azucar CMS 1.3 Multiple directory traversal vulnerabilities in Azucar CMS 1.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _VIEW (view) parameter to (1) index.php, (2) html/sitio/index.php, or (3) src/sistema/vistas/template/tpl_inicio.php.

cpe:/a:adobe:acrobat:3.0 cpe:/a:adobe:acrobat:3.1 cpe:/a:adobe:acrobat:4.0 cpe:/a:adobe:acrobat:4.0.5 cpe:/a:adobe:acrobat:4.0.5a cpe:/a:adobe:acrobat:4.0.5c cpe:/a:adobe:acrobat:5.0 cpe:/a:adobe:acrobat:5.0.5 cpe:/a:adobe:acrobat:5.0.6 cpe:/a:adobe:acrobat:5.0.10 cpe:/a:adobe:acrobat:6.0 cpe:/a:adobe:acrobat:6.0.1 cpe:/a:adobe:acrobat:6.0.2 cpe:/a:adobe:acrobat:6.0.3 cpe:/a:adobe:acrobat:6.0.4 cpe:/a:adobe:acrobat:6.0.5 cpe:/a:adobe:acrobat:6.0.6 cpe:/a:adobe:acrobat:7.0 cpe:/a:adobe:acrobat:7.0.1 cpe:/a:adobe:acrobat:7.0.2 cpe:/a:adobe:acrobat:7.0.3 cpe:/a:adobe:acrobat:7.0.4 cpe:/a:adobe:acrobat:7.0.5 cpe:/a:adobe:acrobat:7.0.6 cpe:/a:adobe:acrobat:7.0.7 cpe:/a:adobe:acrobat:7.0.8 cpe:/a:adobe:acrobat:7.0.9 cpe:/a:adobe:acrobat:7.1.0 cpe:/a:adobe:acrobat:7.1.1 cpe:/a:adobe:acrobat:7.1.2 cpe:/a:adobe:acrobat:7.1.3 cpe:/a:adobe:acrobat:7.1.4 cpe:/a:adobe:acrobat:8.0 cpe:/a:adobe:acrobat:8.1 cpe:/a:adobe:acrobat:8.1.1 cpe:/a:adobe:acrobat_reader:3.0 cpe:/a:adobe:acrobat_reader:3.01 cpe:/a:adobe:acrobat_reader:3.02 cpe:/a:adobe:acrobat_reader:4.0 cpe:/a:adobe:acrobat_reader:4.0.5 cpe:/a:adobe:acrobat_reader:4.0.5a cpe:/a:adobe:acrobat_reader:4.0.5c cpe:/a:adobe:acrobat_reader:4.5 cpe:/a:adobe:acrobat_reader:5.0 cpe:/a:adobe:acrobat_reader:5.0.5 cpe:/a:adobe:acrobat_reader:5.0.6 cpe:/a:adobe:acrobat_reader:5.0.7 cpe:/a:adobe:acrobat_reader:5.0.9 cpe:/a:adobe:acrobat_reader:5.0.10 cpe:/a:adobe:acrobat_reader:5.0.11 cpe:/a:adobe:acrobat_reader:5.1 cpe:/a:adobe:acrobat_reader:6.0 cpe:/a:adobe:acrobat_reader:6.0.1 cpe:/a:adobe:acrobat_reader:6.0.2 cpe:/a:adobe:acrobat_reader:6.0.3 cpe:/a:adobe:acrobat_reader:6.0.4 cpe:/a:adobe:acrobat_reader:6.0.5 cpe:/a:adobe:acrobat_reader:6.0.6 cpe:/a:adobe:acrobat_reader:7.0 cpe:/a:adobe:acrobat_reader:7.0.1 cpe:/a:adobe:acrobat_reader:7.0.2 cpe:/a:adobe:acrobat_reader:7.0.3 cpe:/a:adobe:acrobat_reader:7.0.4 cpe:/a:adobe:acrobat_reader:7.0.5 cpe:/a:adobe:acrobat_reader:7.0.6 cpe:/a:adobe:acrobat_reader:7.0.7 cpe:/a:adobe:acrobat_reader:7.0.8 cpe:/a:adobe:acrobat_reader:7.0.9 cpe:/a:adobe:acrobat_reader:7.1.0 cpe:/a:adobe:acrobat_reader:7.1.1 cpe:/a:adobe:acrobat_reader:7.1.2 cpe:/a:adobe:acrobat_reader:7.1.3 cpe:/a:adobe:acrobat_reader:7.1.4 cpe:/a:adobe:acrobat_reader:8.0 cpe:/a:adobe:acrobat_reader:8.1 cpe:/a:adobe:acrobat_reader:8.1.1

CVE-2008-0655

2008-02-07T16:00:00.000-05:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://blogs.adobe.com/acroread/2008/02/adobe_reader_812_for_linux_and.html CONFIRM http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1 SUSE SUSE-SA:2008:009 GENTOO GLSA-200803-01 SECTRACK 1019346 SUNALERT 239286 CONFIRM http://www.adobe.com/support/security/advisories/apsa08-01.html CONFIRM http://www.adobe.com/support/security/bulletins/apsb08-13.html REDHAT RHSA-2008:0144 BID 27641 CERT TA08-043A VUPEN ADV-2008-0425 VUPEN ADV-2008-1966 Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

cpe:/a:emc:documentum_administrator:4.2.8 cpe:/a:emc:documentum_administrator:5.2.5 cpe:/a:emc:documentum_administrator:5.2.5_sp2 cpe:/a:emc:documentum_administrator:5.3.0.313 cpe:/a:emc:documentum_webtop:5.2.5 cpe:/a:emc:documentum_webtop:5.2.5_sp2 cpe:/a:emc:documentum_webtop:5.3.0.317

CVE-2008-0656

2008-02-07T16:00:00.000-05:00

2018-10-15T18:02:21.103-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SREASON 3626 MISC http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_Documentum_dmclTrace_Arbitrary_file_overwrite.pdf BUGTRAQ 20080205 CYBSEC Security Advisory: Arbitrary file overwrite in Documentum Administrator / Documentum Webtop BID 27632 SECTRACK 1019305 VUPEN ADV-2008-0439 Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute.

cpe:/a:sun:jdk:5.0_update13 cpe:/a:sun:jre:1.5.0:update13 cpe:/a:sun:jre:1.6.0:update1

CVE-2008-0657

2008-02-07T16:00:00.000-05:00

2017-09-28T21:30:24.020-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BEA BEA08-201.00 SUSE SUSE-SA:2008:025 GENTOO GLSA-200804-28 SUNALERT 231261 GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 REDHAT RHSA-2008:0123 REDHAT RHSA-2008:0156 REDHAT RHSA-2008:0210 BID 27650 SECTRACK 1019308 CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0010.html VUPEN ADV-2008-0429 VUPEN ADV-2008-1252 VUPEN ADV-2008-1856 Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.

cpe:/a:openldap:openldap:2.3.39

CVE-2008-0658

2008-02-13T16:00:00.000-05:00

2018-10-15T18:02:21.667-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2009-11-09-1 SUSE SUSE-SR:2008:010 GENTOO GLSA-200803-28 CONFIRM http://support.apple.com/kb/HT3937 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0059 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0059 DEBIAN DSA-1541 MANDRIVA MDVSA-2008:058 CONFIRM http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-bdb/modrdn.c.diff?r1=1.197&r2=1.198&f=h CONFIRM http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5358 REDHAT RHSA-2008:0110 BUGTRAQ 20080212 rPSA-2008-0059-1 openldap openldap-clients openldap-servers BID 27778 SECTRACK 1019481 UBUNTU USN-584-1 VUPEN ADV-2008-0536 VUPEN ADV-2009-3184 XF openldap-modrdn-dos(40479) slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.

cpe:/a:aurigma:image_uploader_activex_control:4.5.70 cpe:/a:myspace:myspaceuploader:1.0.0.4

CVE-2008-0659

2008-02-07T21:00:00.000-05:00

2017-09-28T21:30:24.160-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://blogs.aurigma.com/post/2008/01/Another-security-problem---oh%2c-not-again.aspx FULLDISC 20080131 MySpace Uploader ActiveX Control Buffer Overflow MISC http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483 CERT-VN VU#776931 BID 27533 VUPEN ADV-2008-0344 VUPEN ADV-2008-0345 XF myspace-myspaceuploader-bo(40118) EXPLOIT-DB 5025 Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property.

cpe:/a:aurigma:image_uploader_activex_control:4.5.70.0 cpe:/a:aurigma:image_uploader_activex_control:4.5.126.0 cpe:/a:aurigma:image_uploader_activex_control:4.6.17.0 cpe:/a:aurigma:image_uploader_activex_control:5.0.10.0 cpe:/a:facebook:facebook cpe:/a:facebook:photouploader:4.5.57.0

CVE-2008-0660

2008-02-07T21:00:00.000-05:00

2017-09-28T21:30:24.223-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20080203 FaceBook/Aurigma Image/PhotoUploader Buffer Overflow MISC http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483 CERT-VN VU#776931 BID 27576 BID 27577 SECTRACK 1019297 VUPEN ADV-2008-0391 VUPEN ADV-2008-0394 EXPLOIT-DB 5049 Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties.

cpe:/a:illustrate:dbpoweramp_audio_player:2.0

CVE-2008-0661

2008-02-07T21:00:00.000-05:00

2018-10-15T18:02:24.650-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3623 BUGTRAQ 20080205 dBpowerAMP Audio Player Release 2 Remote Buffer Overflow BID 27635 BID 27639 EXPLOIT-DB 5067 EXPLOIT-DB 5069 Buffer overflow in dBpowerAMP Audio Player Release 2 allows remote attackers to execute arbitrary code via a .M3U file with a long URI. NOTE: this might be the same issue as CVE-2004-1569.

cpe:/a:checkpoint:vpn-1_secureclient:ngai_r56 cpe:/a:checkpoint:vpn-1_secureclient:ngx_r60

CVE-2008-0662

2008-02-07T21:00:00.000-05:00

2018-10-15T18:02:25.243-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://digihax.com/ SREASON 3627 BUGTRAQ 20080207 Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability BID 27675 SECTRACK 1019317 VUPEN ADV-2008-0475 CONFIRM https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials.

cpe:/a:novell:challenge_response_client:2.7.5 cpe:/a:novell:novell_client_for_windows:4.91_sp4

CVE-2008-0663

2008-02-07T21:00:00.000-05:00

2011-03-07T22:05:04.313-05:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27631 SECTRACK 1019304 VUPEN ADV-2008-0423 CONFIRM https://secure-support.novell.com/KanisaPlatform/Publishing/686/3726376_f.SAL_Public.html Novell Challenge Response Client (LCM) 2.7.5 and earlier, as used with Novell Client for Windows 4.91 SP4, allows users with physical access to a locked system to obtain contents of the clipboard by pasting the contents into the Challenge Question field.

cpe:/a:wordpress:wordpress:0.7 cpe:/a:wordpress:wordpress:0.71 cpe:/a:wordpress:wordpress:1.2 cpe:/a:wordpress:wordpress:1.2.1 cpe:/a:wordpress:wordpress:1.2.2 cpe:/a:wordpress:wordpress:1.3.1 cpe:/a:wordpress:wordpress:1.5 cpe:/a:wordpress:wordpress:1.5.1 cpe:/a:wordpress:wordpress:1.5.1.2 cpe:/a:wordpress:wordpress:1.5.1.3 cpe:/a:wordpress:wordpress:1.5.2 cpe:/a:wordpress:wordpress:2.0 cpe:/a:wordpress:wordpress:2.0.1 cpe:/a:wordpress:wordpress:2.0.2 cpe:/a:wordpress:wordpress:2.0.3 cpe:/a:wordpress:wordpress:2.0.4 cpe:/a:wordpress:wordpress:2.0.5 cpe:/a:wordpress:wordpress:2.0.6 cpe:/a:wordpress:wordpress:2.0.7 cpe:/a:wordpress:wordpress:2.0.10 cpe:/a:wordpress:wordpress:2.0.10_rc1 cpe:/a:wordpress:wordpress:2.0.10_rc2 cpe:/a:wordpress:wordpress:2.0.11 cpe:/a:wordpress:wordpress:2.1 cpe:/a:wordpress:wordpress:2.1.1 cpe:/a:wordpress:wordpress:2.1.2 cpe:/a:wordpress:wordpress:2.1.3 cpe:/a:wordpress:wordpress:2.1.3_rc1 cpe:/a:wordpress:wordpress:2.1.3_rc2 cpe:/a:wordpress:wordpress:2.2 cpe:/a:wordpress:wordpress:2.2.1 cpe:/a:wordpress:wordpress:2.2.2 cpe:/a:wordpress:wordpress:2.2.3 cpe:/a:wordpress:wordpress:2.2_revision5002 cpe:/a:wordpress:wordpress:2.2_revision5003 cpe:/a:wordpress:wordpress:2.3 cpe:/a:wordpress:wordpress:2.3.1 cpe:/a:wordpress:wordpress:2.3.2

CVE-2008-0664

2008-02-07T21:00:00.000-05:00

2011-03-07T22:05:04.393-05:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://wordpress.org/development/2008/02/wordpress-233/ DEBIAN DSA-1601 BID 27669 SECTRACK 1019316 MISC http://www.village-idiot.org/archives/2008/02/02/wordpress-232-exploit-confirmed/ VUPEN ADV-2008-0448 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=431547 FEDORA FEDORA-2008-1512 FEDORA FEDORA-2008-1559 The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors.

cpe:/a:website_meta_language:website_meta_language:2.0.11

CVE-2008-0665

2008-02-11T16:00:00.000-05:00

2008-09-05T17:35:40.337-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2008-02-12T09:32:00.000-05:00

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463907 GENTOO GLSA-200803-23 DEBIAN DSA-1492 MANDRIVA MDVSA-2008:076 BID 27685 wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file.

cpe:/a:website_meta_language:website_meta_language:2.0.11

CVE-2008-0666

2008-02-11T16:00:00.000-05:00

2008-09-05T17:35:40.477-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2008-02-12T09:40:00.000-05:00

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463907 GENTOO GLSA-200803-23 DEBIAN DSA-1492 MANDRIVA MDVSA-2008:076 BID 27685 Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on (1) the /tmp/pe.tmp.$$ temporary file used by wml_contrib/wmg.cgi and (2) temporary files used by wml_backend/p3_eperl/eperl_sys.c.

cpe:/a:adobe:acrobat_reader:8.1.1

CVE-2008-0667

2008-02-11T16:00:00.000-05:00

2018-10-15T18:02:25.883-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MISC http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1 SUSE SUSE-SA:2008:009 GENTOO GLSA-200803-01 SREASON 3625 SUNALERT 239286 CONFIRM http://www.adobe.com/support/security/advisories/apsa08-01.html CONFIRM http://www.adobe.com/support/security/bulletins/apsb08-13.html MISC http://www.fortiguardcenter.com/advisory/FGA-2008-04.html REDHAT RHSA-2008:0144 BUGTRAQ 20080208 Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability BID 27641 CERT TA08-043A VUPEN ADV-2008-0425 VUPEN ADV-2008-1966 The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document. NOTE: this issue might be subsumed by CVE-2008-0655.

cpe:/a:gnome:gnumeric:1.7.91

CVE-2008-0668

2008-02-11T16:00:00.000-05:00

2011-03-07T22:05:04.750-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=208356 CONFIRM http://bugzilla.gnome.org/show_bug.cgi?id=505330 SUSE SUSE-SR:2008:016 GENTOO GLSA-200802-05 DEBIAN DSA-1546 CONFIRM http://www.gnome.org/projects/gnumeric/announcements/1.8/gnumeric-1.8.1.shtml MANDRIVA MDVSA-2008:056 BID 27536 UBUNTU USN-604-1 VUPEN ADV-2008-0462 FEDORA FEDORA-2008-1313 FEDORA FEDORA-2008-1403 The excel_read_HLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow. NOTE: some of these details are obtained from third party information.

cpe:/a:sift:unity

CVE-2008-0669

2008-02-11T20:00:00.000-05:00

2008-09-05T17:35:40.947-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-12T10:14:00.000-05:00

BID 27684 Cross-site scripting (XSS) vulnerability in search.cgi in Sift Unity allows remote attackers to inject arbitrary web script or HTML via the qt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:joomla:com_noticias:1.0

CVE-2008-0670

2008-02-11T20:00:00.000-05:00

2017-09-28T21:30:24.427-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27691 EXPLOIT-DB 5081 SQL injection vulnerability in index.php in the Noticias (com_noticias) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detalhe action.

cpe:/a:tintin:tintin%2b%2b:1.97.9 cpe:/a:tintin:wintin%2b%2b:1.97.9

CVE-2008-0671

2008-02-11T20:00:00.000-05:00

2018-10-15T18:02:27.807-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://aluigi.altervista.org/adv/rintintin-adv.txt GENTOO GLSA-201111-07 SREASON 3632 BUGTRAQ 20080206 Chat vulnerabilities in TinTin++ 1.97.9 BID 27660 VUPEN ADV-2008-0449 Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF.

cpe:/a:tintin:tintin%2b%2b:1.97.9 cpe:/a:tintin:wintin%2b%2b:1.97.9

CVE-2008-0672

2008-02-11T20:00:00.000-05:00

2018-10-15T18:02:28.337-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/rintintin-adv.txt GENTOO GLSA-201111-07 SREASON 3632 BUGTRAQ 20080206 Chat vulnerabilities in TinTin++ 1.97.9 BID 27660 VUPEN ADV-2008-0449 The process_chat_input function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service (application crash) via a YES message without a newline character, which triggers a NULL dereference.

cpe:/a:tintin:tintin%2b%2b:1.97.9 cpe:/a:tintin:wintin%2b%2b:1.97.9

CVE-2008-0673

2008-02-11T20:00:00.000-05:00

2018-10-15T18:02:28.853-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://aluigi.altervista.org/adv/rintintin-adv.txt GENTOO GLSA-201111-07 SREASON 3632 BUGTRAQ 20080206 Chat vulnerabilities in TinTin++ 1.97.9 BID 27660 VUPEN ADV-2008-0449 TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory.

cpe:/a:pcre:pcre:7.5

CVE-2008-0674

2008-02-18T18:00:00.000-05:00

2018-10-15T18:02:29.477-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://ftp.gnome.org/pub/gnome/sources/glib/2.14/glib-2.14.6.news APPLE APPLE-SA-2008-07-31 APPLE APPLE-SA-2008-10-09 APPLE APPLE-SA-2009-08-05-1 SUSE SUSE-SR:2008:004 CONFIRM http://pcre.org/changelog.txt GENTOO GLSA-200803-24 GENTOO GLSA-200811-05 CONFIRM http://support.apple.com/kb/HT3216 CONFIRM http://support.apple.com/kb/HT3757 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0086 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0086 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176 DEBIAN DSA-1499 MANDRIVA MDVSA-2008:053 MLIST [oss-security] 20080502 CVE Request (PHP) CONFIRM http://www.php.net/ChangeLog-5.php BUGTRAQ 20080228 rPSA-2008-0086-1 pcre BUGTRAQ 20080523 rPSA-2008-0176-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl BID 27786 BID 29009 BID 31681 SECTRACK 1022674 CERT TA09-218A VUPEN ADV-2008-0570 VUPEN ADV-2008-0592 VUPEN ADV-2008-1412 VUPEN ADV-2008-2268 VUPEN ADV-2008-2780 VUPEN ADV-2009-2172 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=431660 XF pcre-characterclass-bo(40505) CONFIRM https://issues.rpath.com/browse/RPL-2223 CONFIRM https://issues.rpath.com/browse/RPL-2503 UBUNTU USN-581-1 FEDORA FEDORA-2008-1533 FEDORA FEDORA-2008-1783 FEDORA FEDORA-2008-1842 Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255.

cpe:/a:the_everything_development_company:the_everything_development_engine:pre-1.0

CVE-2008-0675

2008-02-11T20:00:00.000-05:00

2018-10-15T18:02:37.430-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3631 BUGTRAQ 20080201 The Everything Development System - SQL Injection BID 27569 EXPLOIT-DB 5037 SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System Pre-1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the node_id parameter.

cpe:/a:a-blog:a-blog:2

CVE-2008-0676

2008-02-11T20:00:00.000-05:00

2017-09-28T21:30:24.550-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27594 EXPLOIT-DB 5050 Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web script or HTML via the words parameter.

cpe:/a:a-blog:a-blog:2

CVE-2008-0677

2008-02-11T20:00:00.000-05:00

2017-09-28T21:30:24.707-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27594 EXPLOIT-DB 5050 SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a news action.

cpe:/a:blogphp:blogphp:2.0

CVE-2008-0678

2008-02-11T20:00:00.000-05:00

2017-09-28T21:30:24.770-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27591 EXPLOIT-DB 5042 SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action.

cpe:/a:blogphp:blogphp:2.0

CVE-2008-0679

2008-02-11T20:00:00.000-05:00

2017-09-28T21:30:24.830-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27591 EXPLOIT-DB 5042 Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

cpe:/h:microtik:routeros:3.2

CVE-2008-0680

2008-02-11T20:00:00.000-05:00

2017-10-03T21:29:00.340-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://hellknights.void.ru/shados/snmp_sploit.c BID 27599 VUPEN ADV-2008-0399 EXPLOIT-DB 5054 SNMPd in MikroTik RouterOS 3.2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP SET request.

cpe:/a:phpshop:phpshop:0.8.1

CVE-2008-0681

2008-02-11T20:00:00.000-05:00

2018-10-15T18:02:37.790-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3628 BUGTRAQ 20080202 phpShop <= v 0.8.1 Remote SQL injection / Filter Bypass BID 27570 EXPLOIT-DB 5041 SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via the product_id parameter, as demonstrated by a shop/flypage action.

cpe:/a:wordpress:wordspew:1.6 cpe:/a:wordpress:wordspew:1.7 cpe:/a:wordpress:wordspew:1.8 cpe:/a:wordpress:wordspew:2.0 cpe:/a:wordpress:wordspew:2.1 cpe:/a:wordpress:wordspew:2.2 cpe:/a:wordpress:wordspew:2.3 cpe:/a:wordpress:wordspew:2.5 cpe:/a:wordpress:wordspew:2.6 cpe:/a:wordpress:wordspew:2.7 cpe:/a:wordpress:wordspew:2.8 cpe:/a:wordpress:wordspew:2.9 cpe:/a:wordpress:wordspew:2.31 cpe:/a:wordpress:wordspew:2.32 cpe:/a:wordpress:wordspew:2.85 cpe:/a:wordpress:wordspew:2.91 cpe:/a:wordpress:wordspew:2.92 cpe:/a:wordpress:wordspew:2.93 cpe:/a:wordpress:wordspew:2.94 cpe:/a:wordpress:wordspew:2.95 cpe:/a:wordpress:wordspew:3.0 cpe:/a:wordpress:wordspew:3.1 cpe:/a:wordpress:wordspew:3.2 cpe:/a:wordpress:wordspew:3.3 cpe:/a:wordpress:wordspew:3.6 cpe:/a:wordpress:wordspew:3.7 cpe:/a:wordpress:wordspew:3.15 cpe:/a:wordpress:wordspew:3.16 cpe:/a:wordpress:wordspew:3.021 cpe:/a:wordpress:wordspew:3.022 cpe:/a:wordpress:wordspew:3.31 cpe:/a:wordpress:wordspew:3.32 cpe:/a:wordpress:wordspew:3.33 cpe:/a:wordpress:wordspew:3.34 cpe:/a:wordpress:wordspew:3.51 cpe:/a:wordpress:wordspew:3.52 cpe:/a:wordpress:wordspew:3.71

CVE-2008-0682

2008-02-11T20:00:00.000-05:00

2017-09-28T21:30:25.160-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://pierre.sudarovich.free.fr/index.php/2006/02/28/ajax-shoutbox/ BID 27583 EXPLOIT-DB 5039 SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:wordpress:st_newsletter_plugin

CVE-2008-0683

2008-02-11T20:00:00.000-05:00

2017-09-28T21:30:25.223-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27586 EXPLOIT-DB 5053 SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter.

cpe:/a:itechscripts:itechclassifieds:3.0

CVE-2008-0684

2008-02-11T20:00:00.000-05:00

2008-09-05T17:35:43.213-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-12T11:22:00.000-05:00

BUGTRAQ 20080201 ITech Classifieds Multiple Remote Vulnerabilities BID 27574 Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HTML via the CatID parameter.

cpe:/a:itechscripts:itechclassifieds:3.0

CVE-2008-0685

2008-02-11T20:00:00.000-05:00

2008-09-05T17:35:43.367-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2008-02-12T11:29:00.000-05:00

ALLOWS_OTHER_ACCESS

BUGTRAQ 20080201 ITech Classifieds Multiple Remote Vulnerabilities BID 27574 SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter.

cpe:/a:joomla:com_neoreferences:1.3.1 cpe:/a:joomla:com_neoreferences:1.3.3 cpe:/a:mambo:com_neoreferences:1.3.1 cpe:/a:mambo:com_neoreferences:1.3.3

CVE-2008-0686

2008-02-11T20:00:00.000-05:00

2017-09-28T21:30:25.270-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27564 XF neoreferences-index-sql-injection(40167) EXPLOIT-DB 5034 SQL injection vulnerability in index.php in the NeoReferences (com_neoreferences) 1.3.1 and 1.3.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter.

cpe:/a:youtube:clone_script

CVE-2008-0687

2008-02-11T20:00:00.000-05:00

2018-10-15T18:02:38.167-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3635 BUGTRAQ 20080201 Youtube Clone Xross Site Scripting (load_message.php) BID 27598 Cross-site scripting (XSS) vulnerability in siteadmin/editor_files/includes/load_message.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the lang[please_wait] parameter.

cpe:/a:smartscript:domain_trader:2.0

CVE-2008-0688

2008-02-11T20:00:00.000-05:00

2018-10-15T18:02:38.477-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3633 BUGTRAQ 20080202 Domain Trader v2.0 Xss Vulnerable BID 27571 Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action.

cpe:/a:joomla:com_marketplace:1.1.1 cpe:/a:joomla:com_marketplace:1.1.1-pl1

CVE-2008-0689

2008-02-11T20:00:00.000-05:00

2017-09-28T21:30:25.330-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27600 EXPLOIT-DB 5055 SQL injection vulnerability in index.php in the Marketplace (com_marketplace) 1.1.1 and 1.1.1-pl1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_category action.

cpe:/a:joomla:com_directory:2.3.2

CVE-2008-0690

2008-02-11T20:00:00.000-05:00

2017-09-28T21:30:25.393-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27585 EXPLOIT-DB 5047 SQL injection vulnerability in index.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a viewcat action.

cpe:/a:simon_elvery:wp-footnotes:2.2 cpe:/a:wordpress:wp-footnotes:2.2

CVE-2008-0691

2008-02-11T20:00:00.000-05:00

2018-10-15T18:02:38.807-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3634 BUGTRAQ 20080201 Wordpress Pluging wp-footnotes 2.2 (admin_panel.php) Multiple Vulnerabilites BID 27572 XF wpfootnotes-adminpanel-security-bypass(40218) Multiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) wp_footnotes_current_settings[priority], (2) wp_footnotes_current_settings[style_rules], (3) wp_footnotes_current_settings[pre_footnotes], and (4) wp_footnotes_current_settings[post_footnotes] parameters.

cpe:/a:itechscripts:itechbids:3_gold cpe:/a:itechscripts:itechbids:5.0

CVE-2008-0692

2008-02-11T20:00:00.000-05:00

2017-09-28T21:30:25.440-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27601 EXPLOIT-DB 5056 SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.

cpe:/a:print_manager_plus:client_billing_and_authentication:7.0.127.16

CVE-2008-0693

2008-02-11T20:00:00.000-05:00

2011-03-07T22:05:06.860-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/pqcorez-adv.txt BID 27604 VUPEN ADV-2008-0407 Stack-based buffer overflow in PQCore.exe in Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 allows remote attackers to cause a denial of service (service outage) via a series of long packets to TCP port 48101.

cpe:/o:ibm:os_400:v5r3m0 cpe:/o:ibm:os_400:v5r4m0

CVE-2008-0694

2008-02-11T20:00:00.000-05:00

2011-03-07T22:05:06.937-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27595 VUPEN ADV-2008-0397 AIXAPAR SE31823 Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.

cpe:/a:bookmarkx:script:2007

CVE-2008-0695

2008-02-11T20:00:00.000-05:00

2017-09-28T21:30:25.503-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

EXPLOIT-DB 5040 SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a showtopic action.

cpe:/a:ibm:db2:8.2_fixpack15

CVE-2008-0696

2008-02-11T20:00:00.000-05:00

2011-03-07T22:05:07.127-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT VUPEN ADV-2008-0401 IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown impact and attack vectors.

cpe:/a:ibm:db2:8.2_fixpack15

CVE-2008-0697

2008-02-11T20:00:00.000-05:00

2011-03-07T22:05:07.203-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT VUPEN ADV-2008-0401 Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via unspecified vectors.

cpe:/a:ibm:db2:8.2_fixpack15

CVE-2008-0698

2008-02-11T20:00:00.000-05:00

2011-03-07T22:05:07.297-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT BID 27681 VUPEN ADV-2008-0401 Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probably involving "invalid memory access."

cpe:/a:ibm:db2:8.2:fp1 cpe:/a:ibm:db2:8.2:fp10 cpe:/a:ibm:db2:8.2:fp11 cpe:/a:ibm:db2:8.2:fp12 cpe:/a:ibm:db2:8.2:fp13 cpe:/a:ibm:db2:8.2:fp14 cpe:/a:ibm:db2:8.2:fp15 cpe:/a:ibm:db2:8.2:fp16 cpe:/a:ibm:db2:8.2:fp2 cpe:/a:ibm:db2:8.2:fp3 cpe:/a:ibm:db2:8.2:fp4 cpe:/a:ibm:db2:8.2:fp5 cpe:/a:ibm:db2:8.2:fp6 cpe:/a:ibm:db2:8.2:fp7 cpe:/a:ibm:db2:8.2:fp8 cpe:/a:ibm:db2:8.2:fp9 cpe:/a:ibm:db2:9.1 cpe:/a:ibm:db2:9.1:fp1 cpe:/a:ibm:db2:9.1:fp2 cpe:/a:ibm:db2:9.1:fp2a cpe:/a:ibm:db2:9.1:fp3 cpe:/a:ibm:db2:9.1:fp3a cpe:/a:ibm:db2:9.1:fp4 cpe:/a:ibm:db2:9.5

CVE-2008-0699

2008-02-11T20:00:00.000-05:00

2018-11-01T11:01:56.313-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

2018-10-26T10:17:47.240-04:00

ALLOWS_ADMIN_ACCESS

CONFIRM ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT MISC http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml BUGTRAQ 20080418 Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary code execution in ADMIN_SP_C/ADMIN_SP_C2 procedures VUPEN ADV-2008-0401 AIXAPAR IZ06972 AIXAPAR IZ06973 AIXAPAR IZ10917 Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors.

cpe:/a:crux_software:cruxcms:3.0

CVE-2008-0700

2008-02-11T20:00:00.000-05:00

2008-09-05T17:35:45.697-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-12T12:20:00.000-05:00

BID 27588 Cross-site scripting (XSS) vulnerability in search.php in Crux Software CruxCMS 3.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:magnolia:ce:3.5.1 cpe:/a:magnolia:ce:3.5.2 cpe:/a:magnolia:ce:3.5.3

CVE-2008-0701

2008-02-11T20:00:00.000-05:00

2008-12-17T01:24:20.407-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://jira.magnolia.info/browse/MAGNOLIA-2021 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=573088 BID 27608 ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content.

cpe:/a:south_river_technologies:titan_ftp_server:6.0.5.549 cpe:/a:south_river_technologies:titan_ftp_server:6.03

CVE-2008-0702

2008-02-11T20:00:00.000-05:00

2018-10-15T18:02:40.180-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SREASON 3639 BUGTRAQ 20080201 Titan FTP Server Remote Heap Overflow (USER/PASS) BID 27568 VUPEN ADV-2008-0393 EXPLOIT-DB 5036 Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of service (daemon crash or hang) and possibly execute arbitrary code via a long argument to the (1) USER or (2) PASS command, different vectors than CVE-2004-1641.

cpe:/a:sflog:sflog:0.96

CVE-2008-0703

2008-02-11T20:00:00.000-05:00

2018-10-15T18:02:40.727-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3629 BUGTRAQ 20080131 sflog! 0.96 remote file disclosure vulnerabilities BID 27541 XF sflog-blog-index-directory-traversal(40115) EXPLOIT-DB 5027 Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) permalink or (2) section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php.

cpe:/a:hp:open_vms_tcp-ip_services:5.4:eco_6 cpe:/a:hp:open_vms_tcp-ip_services:5.5:eco_2 cpe:/a:hp:open_vms_tcp-ip_services:5.6:eco_1

CVE-2008-0704

2008-03-28T19:44:00.000-04:00

2017-08-07T21:29:41.573-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 28486 SECTRACK 1019727 VUPEN ADV-2008-1009 HP SSRT071479 XF openvms-sshserver-unauthorized-access(41519) Unspecified vulnerability in the SSH server in HP OpenVMS TCP/IP Services on OpenVMS on the Alpha platform with 5.4 before ECO 7, and on the Integrity and Alpha platforms with 5.5 before ECO 3 and 5.6 before ECO 2, allows remote attackers to obtain unspecified access via unknown vectors.

CVE-2008-0705

2017-05-11T10:29:06.497-04:00

2017-05-11T10:29:06.510-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none.

cpe:/h:compaq:presario_a900 cpe:/h:compaq:presario_c700 cpe:/h:hp:g7000 cpe:/h:hp:hpqflash_for_hp_notebook_system_bios:f.2a cpe:/h:hp:hpqflash_for_hp_notebook_system_bios:f.2b cpe:/h:hp:hpqflash_for_hp_notebook_system_bios:f.2e cpe:/h:hp:hpqflash_for_hp_notebook_system_bios:f.2f cpe:/h:hp:hpqflash_for_hp_notebook_system_bios:f.18 cpe:/h:hp:hpqflash_for_hp_notebook_system_bios:f.21 cpe:/h:hp:hpqflash_for_hp_notebook_system_bios:f.26 cpe:/h:hp:hpqflash_for_hp_notebook_system_bios:f.28 cpe:/h:hp:hpqflash_for_hp_notebook_system_bios:f.30

CVE-2008-0706

2008-03-31T19:44:00.000-04:00

2017-08-07T21:29:41.620-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBGN02319 SECTRACK 1019730 BID 28495 VUPEN ADV-2008-1043 XF compaq-pcbios-security-bypass(41521) Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privileged access via unspecified vectors, possibly involving an authentication bypass of the power-on password.

cpe:/a:hp:storageworks_library_and_tape_tools:4.5_sr1

CVE-2008-0707

2008-03-19T20:44:00.000-04:00

2017-08-07T21:29:41.680-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1019651 BID 28314 VUPEN ADV-2008-0926 XF hp-storageworks-unspecified-priv-escalation(41337) HP SSRT080029 HP StorageWorks Library and Tape Tools (LTT) before 4.5 SR1 on HP-UX B.11.11 and B.11.23 allows local users to gain privileges via unspecified vectors.

cpe:/h:hp:442084-b21 cpe:/h:hp:442085-b21 cpe:/h:hp:proliant:bl20pg4 cpe:/h:hp:proliant:bl25pg2 cpe:/h:hp:proliant:bl45pg2 cpe:/h:hp:proliant:bl260c cpe:/h:hp:proliant:bl460c cpe:/h:hp:proliant:bl465c cpe:/h:hp:proliant:bl465cg5 cpe:/h:hp:proliant:bl480c cpe:/h:hp:proliant:bl680cg5 cpe:/h:hp:proliant:bl685c cpe:/h:hp:proliant:bl685cg5 cpe:/h:hp:proliant:dl120g5 cpe:/h:hp:proliant:dl140g3 cpe:/h:hp:proliant:dl145g3 cpe:/h:hp:proliant:dl160g5 cpe:/h:hp:proliant:dl165g5 cpe:/h:hp:proliant:dl180 cpe:/h:hp:proliant:dl180g5 cpe:/h:hp:proliant:dl185g5 cpe:/h:hp:proliant:dl320g5 cpe:/h:hp:proliant:dl365g5 cpe:/h:hp:proliant:dl380g5 cpe:/h:hp:proliant:dl385g2 cpe:/h:hp:proliant:dl385g5 cpe:/h:hp:proliant:dl580g4 cpe:/h:hp:proliant:ml110g5 cpe:/h:hp:proliant:ml115 cpe:/h:hp:proliant:ml115g5 cpe:/h:hp:proliant:ml150g3 cpe:/h:hp:proliant:ml150g5 cpe:/h:hp:proliant:ml310g4 cpe:/h:hp:proliant:ml310g5 cpe:/h:hp:proliant:ml350g5 cpe:/h:hp:proliant:ml370g5 cpe:/h:hp:proliant:ml570g4

CVE-2008-0708

2008-04-06T19:44:00.000-04:00

2017-08-07T21:29:41.743-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

HP SSRT080032 SECTRACK 1019785 XF hp-usbfloppydrivekey-weak-security(41648) HP USB 2.0 Floppy Drive Key product options (1) 442084-B21 and (2) 442085-B21 for certain HP ProLiant servers contain the (a) W32.Fakerecy and (b) W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection.

cpe:/a:hp:select_identity:4.00 cpe:/a:hp:select_identity:4.01 cpe:/a:hp:select_identity:4.11 cpe:/a:hp:select_identity:4.12 cpe:/a:hp:select_identity:4.13 cpe:/a:hp:select_identity:4.20

CVE-2008-0709

2008-04-07T13:44:00.000-04:00

2017-08-07T21:29:41.807-04:00

5.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov HP HPSBMA02317 SECTRACK 1019746 BID 28558 VUPEN ADV-2008-1072 XF hpselectidentity-useraccount-unauth-access(41583) Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13, and 4.20 allow remote authenticated users to access other user accounts via unknown vectors, a different issue than CVE-2008-0214.

CVE-2008-0710

2017-05-11T10:29:06.527-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none.

cpe:/h:hp:bl860c cpe:/h:hp:rx2660 cpe:/h:hp:rx3600 cpe:/h:hp:rx6600

CVE-2008-0711

2008-04-08T14:05:00.000-04:00

2017-08-07T21:29:41.870-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov HP SSRT071455 SREASON 3804 BID 28673 SECTRACK 1019795 VUPEN ADV-2008-1132 XF hp-integrityserver-ilo2mp-console-dos(41696) Unspecified vulnerability in the embedded management console in HP iLO-2 Management Processors (iLO-2 MP), as used in Integrity Servers rx2660, rx3600, and rx6600, and Integrity Blade Server model bl860c, allows remote attackers to cause a denial of service via unknown vectors.

cpe:/a:hp:software_update:4.000.009.002

CVE-2008-0712

2008-04-25T15:05:00.000-04:00

2017-08-07T21:29:41.917-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

HP HPSBGN02333 BID 28929 SECTRACK 1019922 VUPEN ADV-2008-1356 XF hpsoftware-hpediag-code-execution(42003) Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors. NOTE: this might overlap CVE-2007-6513.

cpe:/o:hp:hp-ux:11.11 cpe:/o:hp:hp-ux:11.23 cpe:/o:hp:hp-ux:11.31

CVE-2008-0713

2008-05-13T16:20:00.000-04:00

2017-09-28T21:30:25.690-04:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov HP SSRT071403 BID 29160 SECTRACK 1020005 VUPEN ADV-2008-1475 XF hpux-ftp-dos(42357) Unspecified vulnerability in the FTP server for HP-UX B.11.11, B.11.23, and B.11.31 allows remote authenticated users to cause a denial of service (FTP server outage) via unknown attack vectors.

cpe:/a:mihalism:multi_host:3.0

CVE-2008-0714

2008-02-11T21:00:00.000-05:00

2017-09-28T21:30:25.753-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27651 XF mihalism-users-sql-injection(40289) EXPLOIT-DB 5074 SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lost_password_go action.

cpe:/a:acdsee:photo_manager:8.1 cpe:/a:acdsee:photo_manager:9.0 cpe:/a:acdsee:photo_manager:10.0

CVE-2008-0715

2008-02-11T21:00:00.000-05:00

2011-03-07T22:05:08.970-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+AcdSee+Photo+Manager VUPEN ADV-2008-0443 Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file. NOTE: this might be the same as CVE-2007-6009.

cpe:/a:symantec:altiris_notification_server:6.0_sp3

CVE-2008-0716

2008-02-11T21:00:00.000-05:00

2011-03-07T22:05:09.080-05:00

6.8

LOCAL

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://securityresponse.symantec.com/avcenter/security/Content/2008.02.06.html BID 27645 SECTRACK 1019313 VUPEN ADV-2008-0444 The agent in Symantec Altiris Notification Server before 6.0 SP3 R7 allows local users to gain privileges via a "Shatter" style attack.

cpe:/a:ibm:websphere_edge_server:5.1 cpe:/a:ibm:websphere_edge_server:5.1.1 cpe:/a:ibm:websphere_edge_server:6.0 cpe:/a:ibm:websphere_edge_server:6.0.1 cpe:/a:ibm:websphere_edge_server:6.0.2 cpe:/a:ibm:websphere_edge_server:6.1

CVE-2008-0717

2008-02-11T21:00:00.000-05:00

2011-03-07T22:05:09.157-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27665 SECTRACK 1019315 VUPEN ADV-2008-0446 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg21294776 Cross-site scripting (XSS) vulnerability in Caching Proxy (CP) 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI mapping rules are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger injection into an error response.

cpe:/o:sun:solaris:9::sparc cpe:/o:sun:solaris:9::x86 cpe:/o:sun:solaris:10::sparc cpe:/o:sun:solaris:10::x86

CVE-2008-0718

2008-02-11T21:00:00.000-05:00

2017-09-28T21:30:25.800-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUNALERT 201316 BID 27773 VUPEN ADV-2008-0451 Unspecified vulnerability in the USB Mouse STREAMS module (usbms) in Sun Solaris 9 and 10, when 64-bit mode is enabled, allows local users to cause a denial of service (panic) via unspecified vectors.

cpe:/a:oscommerce:customer_testimonials:3.1 cpe:/a:oscommerce:oscommerce:2.2

CVE-2008-0719

2008-02-11T21:00:00.000-05:00

2017-09-28T21:30:25.863-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27664 EXPLOIT-DB 5075 SQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonial_id parameter.

cpe:/a:webmin:usermin:1.3 cpe:/a:webmin:usermin:1.32 cpe:/a:webmin:webmin:1.370 cpe:/a:webmin:webmin:1.390

CVE-2008-0720

2008-02-11T21:00:00.000-05:00

2018-10-15T18:02:41.227-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://forum.aria-security.net/showthread.php?t=511 BUGTRAQ 20080206 Tested on Webmin 1.390 BUGTRAQ 20080206 Re: Tested on Webmin 1.390 BID 27662 VUPEN ADV-2008-0450 Cross-site scripting (XSS) vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webmin_search.cgi (aka the search section), and possibly other components accessed through a "search box" or "open file box." NOTE: some of these details are obtained from third party information.

cpe:/a:mambo:com_sermon:0.2

CVE-2008-0721

2008-02-11T21:00:00.000-05:00

2017-09-28T21:30:25.910-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27673 EXPLOIT-DB 5076 SQL injection vulnerability in index.php in the Sermon (com_sermon) 0.2 component for Mambo allows remote attackers to execute arbitrary SQL commands via the gid parameter.

cpe:/a:pagetool:pagetool:1.07

CVE-2008-0722

2008-02-11T21:00:00.000-05:00

2017-09-28T21:30:25.957-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27653 EXPLOIT-DB 4983 Cross-site scripting (XSS) vulnerability in index.php in Pagetool 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the search_term parameter in a pagetool_search action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:planetluc:mynews:1.6.4

CVE-2008-0723

2008-02-11T21:00:00.000-05:00

2008-09-05T17:35:49.167-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-12T13:40:00.000-05:00

FULLDISC 20080206 MyNews 1.6.X HTML/JS Injection Vulnerability FULLDISC 20080207 Re: MyNews 1.6.X HTML/JS Injection Vulnerability BID 27652 Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other earlier 1.6.x versions, allows remote attackers to inject arbitrary web script or HTML via the hash parameter in an admin action to index.php, a different vulnerability than CVE-2006-2208.1.

cpe:/a:the_everything_development_company:the_everything_development_engine:pre-1.0

CVE-2008-0724

2008-02-11T21:00:00.000-05:00

2018-10-15T18:02:41.727-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3631 BUGTRAQ 20080201 The Everything Development System - SQL Injection EXPLOIT-DB 5037 The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartext in a database, which makes it easier for context-dependent attackers to obtain access to user accounts.

cpe:/a:titan:ftp_server:6.0.5.549

CVE-2008-0725

2008-02-11T21:00:00.000-05:00

2008-09-05T17:35:49.477-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2008-02-12T13:45:00.000-05:00

Multiple heap-based buffer overflows in the (1) FTP service and (2) administration service in Titan FTP Server 6.0.5.549 allow remote attackers to cause a denial of service (daemon hang) and possibly execute arbitrary code via a long command. NOTE: the USER and PASS commands for the FTP service are covered by CVE-2008-0702.

cpe:/a:adobe:acrobat:8.1.1 cpe:/a:adobe:acrobat_reader:8.1.1

CVE-2008-0726

2008-02-12T15:00:00.000-05:00

2018-10-15T18:02:42.040-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SA:2008:009 GENTOO GLSA-200803-01 SUNALERT 239286 CONFIRM http://www.adobe.com/support/security/advisories/apsa08-01.html CONFIRM http://www.adobe.com/support/security/bulletins/apsb08-13.html REDHAT RHSA-2008:0144 BUGTRAQ 20080211 ZDI-08-004: Adobe AcrobatReader Javascript for PDF Integer Overflow Vulnerability VUPEN ADV-2008-1966 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-004.html Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.

cpe:/a:ibm:informix_dynamic_server:7.3 cpe:/a:ibm:informix_dynamic_server:7.31.xd8 cpe:/a:ibm:informix_dynamic_server:7.31.xd9 cpe:/a:ibm:informix_dynamic_server:9.3 cpe:/a:ibm:informix_dynamic_server:9.4 cpe:/a:ibm:informix_dynamic_server:9.40.tc5 cpe:/a:ibm:informix_dynamic_server:9.40.uc1 cpe:/a:ibm:informix_dynamic_server:9.40.uc2 cpe:/a:ibm:informix_dynamic_server:9.40.uc3 cpe:/a:ibm:informix_dynamic_server:9.40.uc5 cpe:/a:ibm:informix_dynamic_server:9.40.xd8 cpe:/a:ibm:informix_dynamic_server:9.40_xc7 cpe:/a:ibm:informix_dynamic_server:10.0 cpe:/a:ibm:informix_dynamic_server:10.0.xc3 cpe:/a:ibm:informix_dynamic_server:10.0.xc4 cpe:/a:ibm:informix_dynamic_server:10.00.xc7w1 cpe:/a:ibm:informix_dynamic_server:11.10.xc2

CVE-2008-0727

2008-03-17T20:44:00.000-04:00

2018-10-15T18:02:43.243-04:00

8.5

NETWORK

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov SREASON 3749 BUGTRAQ 20080313 ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability BUGTRAQ 20080313 ZDI-08-012: IBM Informix Dynamic Server Authentication Password Stack Overflow Vulnerability BID 28198 VUPEN ADV-2008-0860 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-011/ MISC http://www.zerodayinitiative.com/advisories/ZDI-08-012/ AIXAPAR IC55207 AIXAPAR IC55208 AIXAPAR IC55209 AIXAPAR IC55210 XF ibm-informix-oninit-dbpath-bo(41202) XF ibm-informix-oninit-bo(41203) Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long password and (2) remote authenticated users to execute arbitrary code via a long DBPATH value.

cpe:/a:clamav:clamav:0.01 cpe:/a:clamav:clamav:0.02 cpe:/a:clamav:clamav:0.3 cpe:/a:clamav:clamav:0.05 cpe:/a:clamav:clamav:0.8:rc3 cpe:/a:clamav:clamav:0.9:rc1 cpe:/a:clamav:clamav:0.10 cpe:/a:clamav:clamav:0.12 cpe:/a:clamav:clamav:0.13 cpe:/a:clamav:clamav:0.14 cpe:/a:clamav:clamav:0.14:pre cpe:/a:clamav:clamav:0.15 cpe:/a:clamav:clamav:0.20 cpe:/a:clamav:clamav:0.21 cpe:/a:clamav:clamav:0.22 cpe:/a:clamav:clamav:0.23 cpe:/a:clamav:clamav:0.24 cpe:/a:clamav:clamav:0.51 cpe:/a:clamav:clamav:0.52 cpe:/a:clamav:clamav:0.53 cpe:/a:clamav:clamav:0.54 cpe:/a:clamav:clamav:0.60 cpe:/a:clamav:clamav:0.60p cpe:/a:clamav:clamav:0.65 cpe:/a:clamav:clamav:0.66 cpe:/a:clamav:clamav:0.67 cpe:/a:clamav:clamav:0.67-1 cpe:/a:clamav:clamav:0.68 cpe:/a:clamav:clamav:0.68.1 cpe:/a:clamav:clamav:0.70 cpe:/a:clamav:clamav:0.70:rc cpe:/a:clamav:clamav:0.71 cpe:/a:clamav:clamav:0.72 cpe:/a:clamav:clamav:0.73 cpe:/a:clamav:clamav:0.74 cpe:/a:clamav:clamav:0.75 cpe:/a:clamav:clamav:0.75.1 cpe:/a:clamav:clamav:0.80 cpe:/a:clamav:clamav:0.80:rc cpe:/a:clamav:clamav:0.80:rc1 cpe:/a:clamav:clamav:0.80:rc2 cpe:/a:clamav:clamav:0.80:rc3 cpe:/a:clamav:clamav:0.80:rc4 cpe:/a:clamav:clamav:0.80_rc cpe:/a:clamav:clamav:0.81 cpe:/a:clamav:clamav:0.81:rc1 cpe:/a:clamav:clamav:0.82 cpe:/a:clamav:clamav:0.83 cpe:/a:clamav:clamav:0.84 cpe:/a:clamav:clamav:0.84:rc1 cpe:/a:clamav:clamav:0.84:rc2 cpe:/a:clamav:clamav:0.85 cpe:/a:clamav:clamav:0.85.1 cpe:/a:clamav:clamav:0.86 cpe:/a:clamav:clamav:0.86:rc1 cpe:/a:clamav:clamav:0.86.1 cpe:/a:clamav:clamav:0.86.2 cpe:/a:clamav:clamav:0.87 cpe:/a:clamav:clamav:0.87.1 cpe:/a:clamav:clamav:0.88 cpe:/a:clamav:clamav:0.88.1 cpe:/a:clamav:clamav:0.88.2 cpe:/a:clamav:clamav:0.88.3 cpe:/a:clamav:clamav:0.88.4 cpe:/a:clamav:clamav:0.88.5 cpe:/a:clamav:clamav:0.88.6 cpe:/a:clamav:clamav:0.88.7 cpe:/a:clamav:clamav:0.88.7_p0 cpe:/a:clamav:clamav:0.88.7_p1 cpe:/a:clamav:clamav:0.90 cpe:/a:clamav:clamav:0.90:rc1 cpe:/a:clamav:clamav:0.90:rc1.1 cpe:/a:clamav:clamav:0.90:rc2 cpe:/a:clamav:clamav:0.90:rc3 cpe:/a:clamav:clamav:0.90.1 cpe:/a:clamav:clamav:0.90.1_p0 cpe:/a:clamav:clamav:0.90.2 cpe:/a:clamav:clamav:0.90.2_p0 cpe:/a:clamav:clamav:0.90.3 cpe:/a:clamav:clamav:0.90.3_p0 cpe:/a:clamav:clamav:0.90.3_p1 cpe:/a:clamav:clamav:0.91 cpe:/a:clamav:clamav:0.91:rc1 cpe:/a:clamav:clamav:0.91:rc2 cpe:/a:clamav:clamav:0.91.1 cpe:/a:clamav:clamav:0.91.2 cpe:/a:clamav:clamav:0.91.2_p0 cpe:/a:clamav:clamav:0.92 cpe:/a:clamav:clamav:0.92_p0

CVE-2008-0728

2008-02-12T15:00:00.000-05:00

2017-08-07T21:29:42.180-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=209915 CONFIRM http://docs.info.apple.com/article.html?artnum=307562 CONFIRM http://kolab.org/security/kolab-vendor-notice-19.txt APPLE APPLE-SA-2008-03-18 SUSE SUSE-SR:2008:004 GENTOO GLSA-200802-09 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=575703 CONFIRM http://support.novell.com/techcenter/psdb/512985d2cd3090bfb93dcb7b551179cf.html MANDRIVA MDVSA-2008:088 VUPEN ADV-2008-0503 VUPEN ADV-2008-0606 VUPEN ADV-2008-0924 XF clamav-mewc-heap-corruption(40474) The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."

cpe:/a:apple:mobile_safari

CVE-2008-0729

2008-02-12T16:00:00.000-05:00

2018-10-15T18:02:44.650-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SREASON 3630 BUGTRAQ 20080205 Apple iPhone 1.1.3 remote DoS exploit BUGTRAQ 20080519 Re: Apple iPhone 1.1.3 remote DoS exploit BID 27442 XF iphone-mobilesafari-dos(39998) EXPLOIT-DB 4978 Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion and device crash) via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677. NOTE: some of these details are obtained from third party information.

cpe:/o:sun:solaris:10::~~~~sparc~:ko cpe:/o:sun:solaris:10::~~~~x86~:ko cpe:/o:sun:solaris:10::~~~~sparc~:th cpe:/o:sun:solaris:10::~~~~x86~:th cpe:/o:sun:solaris:10::~~~~sparc~:zh cpe:/o:sun:solaris:10::~~~~x86~:zh

CVE-2008-0730

2008-02-12T16:00:00.000-05:00

2017-11-21T10:42:18.117-05:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-11-21T10:15:38.507-05:00

SUNALERT 201315 BID 27770 VUPEN ADV-2008-0452 The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of other users.

cpe:/a:novell:apparmor

CVE-2008-0731

2008-02-12T16:00:00.000-05:00

2008-09-05T17:35:50.447-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2008-02-12T18:16:00.000-05:00

SUSE SUSE-SA:2008:006 The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not properly handle failure of an AppArmor change_hat system call, which might allow attackers to trigger the unconfining of an apparmored task.

cpe:/a:apache:geronimo

CVE-2008-0732

2008-02-12T16:00:00.000-05:00

2008-09-05T17:35:50.617-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-12T18:20:00.000-05:00

SUSE SUSE-SR:2008:003 The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.

cpe:/a:cs_team:counter_strike_portal

CVE-2008-0733

2008-02-12T20:00:00.000-05:00

2018-10-15T18:02:45.323-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20080212 Kommentare zum Download script SQL Injection BID 27747 XF counterstrikeportals-index-sql-injection(40520) SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page.

cpe:/a:limbo_cms:limbo_cms:1.0.4.2

CVE-2008-0734

2008-02-12T20:00:00.000-05:00

2017-09-28T21:30:26.253-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27710 XF limbo-admin-sql-injection(40415) EXPLOIT-DB 5088 SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the cuid cookie parameter to admin.php.

cpe:/a:auracms:auracms:2.2

CVE-2008-0735

2008-02-12T20:00:00.000-05:00

2017-09-28T21:30:26.300-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27764 EXPLOIT-DB 5105 SQL injection vulnerability in mod/gallery/ajax/gallery_data.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter.

cpe:/a:shoppingtree:candypress_store:4.1 cpe:/a:shoppingtree:candypress_store:4.1.1.26

CVE-2008-0736

2008-02-12T20:00:00.000-05:00

2018-10-15T18:02:45.633-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3600 MISC http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1 BUGTRAQ 20080125 [CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure) BID 27454 VUPEN ADV-2008-0314 XF ecommerce-sashipfedexmeter-path-disclosure(39941) EXPLOIT-DB 4988 admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and possibly other 4.x and 3.x versions, allows remote attackers to obtain the path via a certain value of the FedExAccount parameter.

cpe:/a:shoppingtree:candypress_store:4.1 cpe:/a:shoppingtree:candypress_store:4.1.1.26

CVE-2008-0737

2008-02-12T20:00:00.000-05:00

2018-10-15T18:02:46.290-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3600 CONFIRM http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1 BUGTRAQ 20080125 [CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure) BID 27454 VUPEN ADV-2008-0314 EXPLOIT-DB 4988 SQL injection vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and other 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the helpfield parameter.

cpe:/a:shoppingtree:candypress_store:4.1 cpe:/a:shoppingtree:candypress_store:4.1.1.26

CVE-2008-0738

2008-02-12T20:00:00.000-05:00

2009-08-20T01:13:16.230-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1 VUPEN ADV-2008-0314 Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the (1) idcust parameter to (a) ajax_getTiers.asp and (b) ajax_getCust.asp in ajax/, and the (2) tableName parameter to (c) ajax/ajax_tableFields.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:shoppingtree:candypress_store:4.1 cpe:/a:shoppingtree:candypress_store:4.1.1.26

CVE-2008-0739

2008-02-12T20:00:00.000-05:00

2009-08-20T01:13:16.353-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1 VUPEN ADV-2008-0314 SQL injection vulnerability in admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and earlier 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the FedExAccount parameter.

cpe:/a:ibm:websphere_application_server:6.0.2.24

CVE-2008-0740

2008-02-12T20:00:00.000-05:00

2011-03-07T22:05:23.080-05:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27400 VUPEN ADV-2008-0241 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg27006876 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg27007951 IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartext information to http_plugin.log, which might allow local users to obtain sensitive information by reading this file.

cpe:/a:ibm:websphere_application_server:6.0.2.24

CVE-2008-0741

2008-02-12T20:00:00.000-05:00

2011-03-07T22:05:23.173-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1019254 BID 27400 VUPEN ADV-2008-0241 AIXAPAR PK52709 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg27006876 Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) has unknown impact and attack vectors.

cpe:/a:powerscripts:powernews:2.5.6

CVE-2008-0742

2008-02-12T21:00:00.000-05:00

2018-10-15T18:02:46.870-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3647 BUGTRAQ 20080208 [DSECRG-08-014] Multiple LFI in PowerNews (Newsscript) 2.5.6 BID 27688 EXPLOIT-DB 5082 Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. (dot dot) in the (1) subpage parameter in (a) categories.inc.php, (b) news.inc.php, (c) other.inc.php, (d) permissions.inc.php, (e) templates.inc.php, and (f) users.inc.php in pnadmin/; and (2) the page parameter to (g) pnadmin/index.php. NOTE: vector 2 is only exploitable by administrators.

cpe:/a:joovili:joovili:2.1

CVE-2008-0743

2008-02-12T21:00:00.000-05:00

2018-10-15T18:02:47.260-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SREASON 3640 BUGTRAQ 20080207 Joovili <= v.2.1 (members_help.php) Remote File İnclude Vulnerability BID 27693 PHP remote file inclusion vulnerability in members_help.php in Joovili 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hlp parameter.

cpe:/a:preprojects.com:pre_hotels_%26_resorts_management_system

CVE-2008-0744

2008-02-12T21:00:00.000-05:00

2018-10-15T18:02:47.510-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3644 BUGTRAQ 20080124 Pre Hotel and Resorts reservation portal login bypass BID 27450 XF prehotel-login-sql-injection(39935) SQL injection vulnerability in user_login.asp in PreProjects.com Pre Hotels & Resorts Management System allows remote attackers to execute arbitrary SQL commands via the login page.

cpe:/a:domphp:domphp:0.82

CVE-2008-0745

2008-02-13T15:00:00.000-05:00

2017-09-28T21:30:26.520-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27712 EXPLOIT-DB 5089 Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.

cpe:/a:joomla:com_gallery cpe:/a:mambo:com_gallery

CVE-2008-0746

2008-02-13T15:00:00.000-05:00

2017-09-28T21:30:26.580-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

VIM 20080208 Mambo Component com_gallery Remote SQL Injection Vulnerability VIM 20080208 Mambo Component com_gallery Remote SQL Injection Vulnerability BID 27695 EXPLOIT-DB 5084 SQL injection vulnerability in index.php in the Gallery (com_gallery) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.

cpe:/a:cowon_america:jetaudio_basic:7.0.5

CVE-2008-0747

2008-02-13T15:00:00.000-05:00

2018-10-15T18:02:47.993-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SREASON 3642 BUGTRAQ 20080208 jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow BID 27698 VUPEN ADV-2008-0502 EXPLOIT-DB 5085 Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute arbitrary code via a long URL in a .asx file, a different vulnerability than CVE-2007-5487.

cpe:/a:sony:axruploadserver_activex_control:1.0.0.38 cpe:/a:sony:imagestation

CVE-2008-0748

2008-02-13T15:00:00.000-05:00

2018-10-15T18:02:48.527-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SREASON 3648 BUGTRAQ 20080208 Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging) BUGTRAQ 20080208 Re: Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging) BID 27715 VUPEN ADV-2008-0483 EXPLOIT-DB 5086 EXPLOIT-DB 5100 Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a long argument to the SetLogging method. NOTE: some of these details are obtained from third party information.

cpe:/a:calimero.cms:calimero.cms:3.3

CVE-2008-0749

2008-02-13T15:00:00.000-05:00

2009-08-25T01:09:12.920-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://downloads.securityfocus.com/vulnerabilities/exploits/27690.html BID 27690 Cross-site scripting (XSS) vulnerability in index.php in Calimero.CMS 3.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a calimero_webpage action.

cpe:/a:husrev:blackboard:2.0.2

CVE-2008-0750

2008-02-13T15:00:00.000-05:00

2018-10-15T18:02:49.337-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3641 BUGTRAQ 20080207 Husrev Forums v2.0.1:PoWerBoard (tr) (id) Remote SQL Injection BUGTRAQ 20080207 Blackboard (id) Remote SQL Injection BID 27714 XF blackboard-philboardforum-sql-injection(40368) SQL injection vulnerability in philboard_forum.asp in Husrev BlackBoard 2.0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.

cpe:/a:microsoft:ie:6 cpe:/a:microsoft:ie:7 cpe:/a:s9y:serendipity_freetag-plugin:2.95

CVE-2008-0751

2008-02-13T15:00:00.000-05:00

2017-08-07T21:29:42.573-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://blog.s9y.org/archives/190-Freetag-plugin-updated-to-prevent-XSS.html FULLDISC 20080208 Serendipity Freetag-plugin XSS vulnerability MISC http://www.bitsploit.de/uploads/Code/200802080000/ BID 27697 XF serendipity-freetag-xss(40376) Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to plugin/tag/.

cpe:/a:joomla:com_neogallery:1.1 cpe:/a:mambo:com_neogallery:1.1

CVE-2008-0752

2008-02-13T15:00:00.000-05:00

2017-09-28T21:30:26.787-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27692 XF neogallery-index-sql-injection(40357) EXPLOIT-DB 5083 SQL injection vulnerability in index.php in the Neogallery (com_neogallery) 1.1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show action.

cpe:/a:vwar:virtual_war:1.5

CVE-2008-0753

2008-02-13T15:00:00.000-05:00

2018-10-15T18:02:49.900-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3643 BUGTRAQ 20080210 Vwar 1.5.0 BID 27722 SQL injection vulnerability in calendar.php in Virtual War (VWar) 1.5 allows remote attackers to execute arbitrary SQL commands via the month parameter.

cpe:/a:joomla:com_rapidrecipe:1.6.5

CVE-2008-0754

2008-02-13T15:00:00.000-05:00

2018-10-15T18:02:50.167-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3649 BUGTRAQ 20080210 Default Multiple Joomla! Component com_rapidrecipe "user_id=" Remote SQL Inj. BID 27724 Multiple SQL injection vulnerabilities in index.php in the Rapid Recipe (com_rapidrecipe) 1.6.5 component for Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the user_id parameter in a showuser action or (2) the category_id parameter in a viewcategorysrecipes action.

cpe:/a:cyan_soft:cyanprintip_basic:4.10.1030 cpe:/a:cyan_soft:cyanprintip_easy_opi:4.10.1030 cpe:/a:cyan_soft:cyanprintip_professional:4.10.1030 cpe:/a:cyan_soft:cyanprintip_standard:4.10.940 cpe:/a:cyan_soft:cyanprintip_workstation:4.10.836 cpe:/a:cyan_soft:opium4_opi_server:4.10.1028

CVE-2008-0755

2008-02-13T15:00:00.000-05:00

2018-10-15T18:02:50.493-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://aluigi.altervista.org/adv/cyanuro-adv.txt BUGTRAQ 20080211 Format string and DoS in Opium OPI and cyanPrintIP servers 4.10.x BID 27728 BID 27734 VUPEN ADV-2008-0498 Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; might allow remote attackers to execute arbitrary code via format string specifiers in the queue name in a request.

CVE-2008-0756

2008-02-13T15:00:00.000-05:00

2018-10-15T18:02:50.963-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/cyanuro-adv.txt BUGTRAQ 20080211 Format string and DoS in Opium OPI and cyanPrintIP servers 4.10.x BID 27728 BID 27734 VUPEN ADV-2008-0498 The LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; allows remote attackers to cause a denial of service (daemon crash) via a connection that begins with (1) a "Send queue state" LPD command 3 or (2) a "Send queue state" LPD command 4.

cpe:/a:mercuryboard:mercuryboard_message_board:1.1.5

CVE-2008-0757

2008-02-13T16:00:00.000-05:00

2018-10-15T18:02:51.417-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://forum.aria-security.net/showthread.php?t=522 BUGTRAQ 20080210 Mercury v1.1.5 Send Message Cross-Site Scripting BID 27730 SECTRACK 1019371 Cross-site scripting (XSS) vulnerability in index.php in MercuryBoard 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter (aka the message text area), which leads to an injection in the messenger during private message (PM) preview. NOTE: some of these details are obtained from third party information.

cpe:/a:group_logic:extremez-ip_file_server:5.1.2 cpe:/a:group_logic:extremez-ip_print_server:5.1.2

CVE-2008-0758

2008-02-13T16:00:00.000-05:00

2018-10-15T18:02:51.790-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/ezipirla-adv.txt MISC http://aluigi.org/poc/ezipirla.zip CONFIRM http://www.grouplogic.com/files/ez/hot/hotFix51.cfm BUGTRAQ 20080211 Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15 BID 27718 VUPEN ADV-2008-0485 Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary (1) gif, (2) png, (3) jpg, (4) xml, (5) ico, (6) zip, and (7) html files via a "..\" (dot dot backslash) sequence in the filename.

cpe:/a:group_logic:extremez-ip_file_server:5.1.2 cpe:/a:group_logic:extremez-ip_print_server:5.1.2

CVE-2008-0759

2008-02-13T16:00:00.000-05:00

2018-10-15T18:02:52.307-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/ezipirla-adv.txt MISC http://aluigi.org/poc/ezipirla.zip CONFIRM http://www.grouplogic.com/files/ez/hot/hotFix51.cfm BUGTRAQ 20080211 Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15 BID 27718 VUPEN ADV-2008-0485 ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service (daemon crash) via an invalid UAM field in a request to the Apple Filing Protocol (AFP) service on TCP port 548.

cpe:/a:safenet:sentinel_keys_server:1.0.4.0 cpe:/a:safenet:sentinel_protection_server:7.4.1

CVE-2008-0760

2008-02-13T16:00:00.000-05:00

2018-10-15T18:02:52.837-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/sentinella-adv.txt SREASON 3646 BUGTRAQ 20080211 Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 BID 27735 VUPEN ADV-2008-0499 Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1.0.4.0 and earlier, allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URI. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-6483.

cpe:/a:joomla:com_pcchess:0.8

CVE-2008-0761

2008-02-13T16:00:00.000-05:00

2017-09-28T21:30:26.847-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27761 XF pcchessclub-index-sql-injection(40436) EXPLOIT-DB 5104 SQL injection vulnerability in index.php in the Prince Clan Chess Club (com_pcchess) 0.8 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a players action.

cpe:/a:joomla:com_iomezun

CVE-2008-0762

2008-02-13T16:00:00.000-05:00

2018-10-15T18:02:53.290-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20080212 joomla (k12.tr)(com_iomezun)SQL Injection BID 27748 XF iomezun-index-sql-injection(40447) SQL injection vulnerability in index.php in the com_iomezun component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action.

cpe:/a:larson_software_technology:network_print_server:9.4.2:build_105

CVE-2008-0763

2008-02-13T16:00:00.000-05:00

2018-10-15T18:02:53.603-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://aluigi.altervista.org/adv/lstnpsx-adv.txt BUGTRAQ 20080211 Format string and buffer-overflow in Lst Network Print Server 9.4.2 build 105 BID 27732 VUPEN ADV-2008-0500 XF networkprintserver-npspcsvr-bo(40421) Stack-based buffer overflow in NPSpcSVR.exe in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier allows remote attackers to execute arbitrary code via a long argument in a LICENSE command on TCP port 3114.

cpe:/a:larson_software_technology:network_print_server:9.4.2:build_105

CVE-2008-0764

2008-02-13T16:00:00.000-05:00

2018-10-15T18:02:54.120-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/lstnpsx-adv.txt BUGTRAQ 20080211 Format string and buffer-overflow in Lst Network Print Server 9.4.2 build 105 BID 27732 VUPEN ADV-2008-0500 XF networkprintserver-logging-format-string(40420) Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114.

cpe:/a:artmedic_webdesign:artmedic_weblog

CVE-2008-0765

2008-02-13T16:00:00.000-05:00

2018-10-15T18:02:54.620-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20080212 artmedic weblog multiple xss vulnerabilities BUGTRAQ 20080215 artmedic_weblog Cross Site Scriptting Vulnerbility BUGTRAQ 20080215 Re: artmedic_weblog Cross Site Scriptting Vulnerbility BID 27745 Multiple cross-site scripting (XSS) vulnerabilities in artmedic webdesign weblog allow remote attackers to inject arbitrary web script or HTML via the (1) date parameter to artmedic_print.php and the (2) jahrneu parameter to index.php.

cpe:/a:brooks_internet_software:rpm_remote_print_manager_elite:4.5.1.11 cpe:/a:brooks_internet_software:rpm_remote_print_manager_select:4.5.1.11

CVE-2008-0766

2008-02-13T16:00:00.000-05:00

2018-10-15T18:02:55.073-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://aluigi.altervista.org/adv/rpmlpdbof-adv.txt BUGTRAQ 20080212 Unicode buffer-overflow in RPM Remote Print Manager 4.5.1.11 BID 27742 VUPEN ADV-2008-0501 XF rpm-receivedatafile-bo(40432) Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager (RPM) 4.5.1.11 and earlier (Elite and Select) for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party information.

cpe:/a:extremez:print_server:5.1.2 cpe:/a:extremez-ip:file_server:5.1.2

CVE-2008-0767

2008-02-13T16:00:00.000-05:00

2018-10-15T18:02:55.620-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/ezipirla-adv.txt MISC http://aluigi.org/poc/ezipirla.zip CONFIRM http://www.grouplogic.com/files/ez/hot/hotFix51.cfm BUGTRAQ 20080211 Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15 BID 27718 VUPEN ADV-2008-0485 ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service (daemon crash) via a large integer in this field in a packet to the Service Location Protocol (SLP) service on UDP port 427, triggering an out-of-bounds read.

cpe:/a:ibm:informix_dynamic_server:10.00 cpe:/a:ibm:informix_dynamic_server:10.0.tc1 cpe:/a:ibm:informix_dynamic_server:10.00.tc3tl cpe:/a:ibm:informix_dynamic_server:10.0.xc1 cpe:/a:ibm:informix_dynamic_server:10.0.xc3 cpe:/a:ibm:informix_dynamic_server:10.00.xc4 cpe:/a:ibm:informix_dynamic_server:10.00.xc5 cpe:/a:ibm:informix_dynamic_server:10.00.xc6 cpe:/a:ibm:informix_dynamic_server:10.00.xc7 cpe:/a:ibm:informix_dynamic_server:10.00.xc8 cpe:/a:ibm:informix_dynamic_server:11.10 cpe:/a:ibm:informix_dynamic_server:11.10.tb4tl cpe:/a:ibm:informix_dynamic_server:11.10.xc1 cpe:/a:ibm:informix_dynamic_server:11.10.xc2 cpe:/a:ibm:informix_storage_manager:-

CVE-2008-0768

2008-02-13T17:00:00.000-05:00

2019-08-01T08:12:54.997-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2019-07-30T08:30:45.550-04:00

BID 27485 SECTRACK 1019281 VUPEN ADV-2008-0317 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21294211 AIXAPAR IC55040 AIXAPAR IC55041 XF ibm-ids-xdr-bo(40018) Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests.

cpe:/a:opentext:livelink_ecm:9.0 cpe:/a:opentext:livelink_ecm:9.1 cpe:/a:opentext:livelink_ecm:9.2 cpe:/a:opentext:livelink_ecm:9.3 cpe:/a:opentext:livelink_ecm:9.4 cpe:/a:opentext:livelink_ecm:9.5 cpe:/a:opentext:livelink_ecm:9.6 cpe:/a:opentext:livelink_ecm:9.7

CVE-2008-0769

2008-02-13T19:00:00.000-05:00

2017-08-07T21:29:43.010-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080131 Livelink UTF-7 XSS Vulnerability MISC http://withdk.com/archives/livelink-utf7-xss-advisory.pdf BID 27537 XF livelink-utf7-security-bypass(40123) Cross-site scripting (XSS) vulnerability in Livelink ECM 9.0.0 through 9.7.0 and possibly earlier does not set the charset, which allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input.

cpe:/a:ibproarcade:ibproarcade:3.3.0

CVE-2008-0770

2008-02-13T19:00:00.000-05:00

2017-09-28T21:30:26.893-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

VUPEN ADV-2008-0366 EXPLOIT-DB 5018 SQL injection vulnerability in arcade.php in ibProArcade 3.3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the g_display_order cookie parameter.

cpe:/a:site2nite:real_estate_web

CVE-2008-0771

2008-02-13T19:00:00.000-05:00

2018-10-15T18:02:56.137-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3650 BUGTRAQ 20080116 [Aria-Security.Net] Real Estate Web SQL Injection BID 27330 XF realestatewebsite-default-sql-injection(39734) Multiple SQL injection vulnerabilities in default.asp in Site2Nite allow remote attackers to execute arbitrary SQL commands via the (1) txtUserName and (2) txtPassword parameters. NOTE: some of these details are obtained from third party information.

cpe:/a:joomla:com_doc cpe:/a:mambo:com_doc

CVE-2008-0772

2008-02-13T19:00:00.000-05:00

2017-09-28T21:30:26.940-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27679 EXPLOIT-DB 5080 SQL injection vulnerability in index.php in the com_doc component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the sid parameter in a view task.

cpe:/a:joomla:com_comments:0.5.8.5g cpe:/a:mambo:com_comments:0.5.8.5g cpe:/a:phil_taylor:comments:0.5.8.5g cpe:/a:phil_taylor:review_script:0.5.8.5g

CVE-2008-0773

2008-02-13T19:00:00.000-05:00

2017-09-28T21:30:27.003-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27731 EXPLOIT-DB 5094 SQL injection vulnerability in Phil Taylor Comments (com_comments, aka Review Script) 0.5.8.5g and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:loris:hotel_reservation_system:3.01

CVE-2008-0774

2008-02-13T19:00:00.000-05:00

2008-09-05T17:35:57.103-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-14T13:56:00.000-05:00

BID 27729 Cross-site scripting (XSS) vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the hotel_name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:simple_machines:smf_shoutbox:1.14 cpe:/a:simple_machines:smf_shoutbox:1.15 cpe:/a:simple_machines:smf_shoutbox:1.16b

CVE-2008-0775

2008-02-13T19:00:00.000-05:00

2018-10-15T18:02:56.573-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3651 BUGTRAQ 20080210 Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS BUGTRAQ 20080321 Re: Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS BUGTRAQ 20080422 Re: Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS BID 27727 Cross-site scripting (XSS) vulnerability in sboxDB.php in Simple Machines Forum (SMF) Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&#", contain the desired script, and end with ";".

cpe:/a:itechscripts:itechbids:6.0

CVE-2008-0776

2008-02-13T19:00:00.000-05:00

2017-09-28T21:30:27.050-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27717 EXPLOIT-DB 5096 SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.

cpe:/o:freebsd:freebsd:5.5 cpe:/o:freebsd:freebsd:6.2 cpe:/o:freebsd:freebsd:6.3 cpe:/o:freebsd:freebsd:7.0

CVE-2008-0777

2008-02-14T21:00:00.000-05:00

2008-09-05T17:35:57.557-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov

2008-02-15T12:40:00.000-05:00

FREEBSD FreeBSD-SA-08:03 SECTRACK 1019416 BID 27789 The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents of write-only files.

cpe:/a:apple:quicktime:7.4.1

CVE-2008-0778

2008-02-14T07:00:00.000-05:00

2018-10-15T18:02:57.150-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3652 BUGTRAQ 20080212 QuickTime <= 7.4.1 QTPlugin.ocx Multiple Remote Stack Overflow BID 27769 XF apple-quicktime-qtplugin-bo(40475) EXPLOIT-DB 5110 Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the (1) SetBgColor, (2) SetHREF, (3) SetMovieName, (4) SetTarget, and (5) SetMatrix methods.

cpe:/h:fortinet:forticlient_host_security:3.0:mr5_patch_3

CVE-2008-0779

2008-02-14T07:00:00.000-05:00

2018-10-15T18:02:57.667-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://kc.forticare.com/default.asp?id=3618 SREASON 3660 MISC http://www.reversemode.com/index.php?option=com_mamblog&Itemid=15&task=show&action=view&id=47&Itemid=15 BUGTRAQ 20080213 [Reversemode Advisory] February Advisories : Microsoft Word 2003 + Fortinet Forticlient BID 27776 SECTRACK 1019415 VUPEN ADV-2008-0541 XF forticlient-fortimon-privilege-escalation(40512) The fortimon.sys device driver in Fortinet FortiClient Host Security 3.0 MR5 Patch 3 and earlier does not properly initialize its DeviceExtension, which allows local users to access kernel memory and execute arbitrary code via a crafted request.

cpe:/a:moinmoin:moinmoin:1.5.0 cpe:/a:moinmoin:moinmoin:1.5.1 cpe:/a:moinmoin:moinmoin:1.5.2 cpe:/a:moinmoin:moinmoin:1.5.3 cpe:/a:moinmoin:moinmoin:1.5.3_rc1 cpe:/a:moinmoin:moinmoin:1.5.3_rc2 cpe:/a:moinmoin:moinmoin:1.5.4 cpe:/a:moinmoin:moinmoin:1.5.5 cpe:/a:moinmoin:moinmoin:1.5.5_rc1 cpe:/a:moinmoin:moinmoin:1.5.5a cpe:/a:moinmoin:moinmoin:1.5.6 cpe:/a:moinmoin:moinmoin:1.5.7 cpe:/a:moinmoin:moinmoin:1.5.8 cpe:/a:moinmoin:moinmoin:1.6.0

CVE-2008-0780

2008-02-14T16:00:00.000-05:00

2018-10-03T17:53:16.527-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://hg.moinmo.in/moin/1.5/rev/2f952fa361c7 CONFIRM http://hg.moinmo.in/moin/1.6/rev/9f4bdc7ef80d DEBIAN DSA-1514 GENTOO GLSA-200803-27 BID 27904 VUPEN ADV-2008-0569 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=432747 UBUNTU USN-716-1 FEDORA FEDORA-2008-1880 FEDORA FEDORA-2008-1905 Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action.

cpe:/a:moinmoin:moinmoin:0.1 cpe:/a:moinmoin:moinmoin:0.2 cpe:/a:moinmoin:moinmoin:0.3 cpe:/a:moinmoin:moinmoin:0.7 cpe:/a:moinmoin:moinmoin:0.8 cpe:/a:moinmoin:moinmoin:0.9 cpe:/a:moinmoin:moinmoin:0.10 cpe:/a:moinmoin:moinmoin:0.11 cpe:/a:moinmoin:moinmoin:1.0 cpe:/a:moinmoin:moinmoin:1.1 cpe:/a:moinmoin:moinmoin:1.2 cpe:/a:moinmoin:moinmoin:1.2.1 cpe:/a:moinmoin:moinmoin:1.2.2 cpe:/a:moinmoin:moinmoin:1.5.0 cpe:/a:moinmoin:moinmoin:1.5.1 cpe:/a:moinmoin:moinmoin:1.5.2 cpe:/a:moinmoin:moinmoin:1.5.3 cpe:/a:moinmoin:moinmoin:1.5.3_rc1 cpe:/a:moinmoin:moinmoin:1.5.3_rc2 cpe:/a:moinmoin:moinmoin:1.5.4 cpe:/a:moinmoin:moinmoin:1.5.5 cpe:/a:moinmoin:moinmoin:1.5.5_rc1 cpe:/a:moinmoin:moinmoin:1.5.5a cpe:/a:moinmoin:moinmoin:1.5.6 cpe:/a:moinmoin:moinmoin:1.5.7 cpe:/a:moinmoin:moinmoin:1.5.8

CVE-2008-0781

2008-02-14T16:00:00.000-05:00

2018-10-03T17:53:17.917-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef DEBIAN DSA-1514 GENTOO GLSA-200803-27 BID 27904 VUPEN ADV-2008-0569 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=432748 UBUNTU USN-716-1 FEDORA FEDORA-2008-1880 FEDORA FEDORA-2008-1905 Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames.

CVE-2008-0782

2008-02-14T16:00:00.000-05:00

2018-10-03T17:53:19.183-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630 VIM 20080124 MoinMoin 1.5.x MOIND_ID cookie Bug Remote Exploit DEBIAN DSA-1514 GENTOO GLSA-200803-27 BID 27404 VUPEN ADV-2008-0569 XF moinmoin-readme-file-overwrite(39837) UBUNTU USN-716-1 EXPLOIT-DB 4957 Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter.

cpe:/a:cacti:cacti:0.6.7 cpe:/a:cacti:cacti:0.8 cpe:/a:cacti:cacti:0.8.1 cpe:/a:cacti:cacti:0.8.2 cpe:/a:cacti:cacti:0.8.2a cpe:/a:cacti:cacti:0.8.3 cpe:/a:cacti:cacti:0.8.3a cpe:/a:cacti:cacti:0.8.4 cpe:/a:cacti:cacti:0.8.5 cpe:/a:cacti:cacti:0.8.5a cpe:/a:cacti:cacti:0.8.6c cpe:/a:cacti:cacti:0.8.6f cpe:/a:cacti:cacti:0.8.6i cpe:/a:cacti:cacti:0.8.6j cpe:/a:cacti:cacti:0.8.7 cpe:/a:cacti:cacti:0.8.7a

CVE-2008-0783

2008-02-14T18:00:00.000-05:00

2018-10-15T18:02:58.480-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.cacti.net/view.php?id=1245 SUSE SUSE-SR:2008:005 GENTOO GLSA-200803-18 SREASON 3657 CONFIRM http://www.cacti.net/release_notes_0_8_7b.php DEBIAN DSA-1569 MANDRIVA MDVSA-2008:052 BUGTRAQ 20080212 cacti -- Multiple security vulnerabilities have been discovered BUGTRAQ 20080212 Cacti 0.8.7a Multiple Vulnerabilities BID 27749 BID 34991 SECTRACK 1019414 VUPEN ADV-2008-0540 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=432758 XF cacti-datainput-xss(50575) FEDORA FEDORA-2008-1699 FEDORA FEDORA-2008-1737 Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via (1) the view_type parameter to graph.php; (2) the filter parameter to graph_view.php; (3) the action parameter to the draw_navigation_text function in lib/functions.php, reachable through index.php (aka the login page) or data_input.php; or (4) the login_username parameter to index.php.

CVE-2008-0784

2008-02-14T18:00:00.000-05:00

2018-10-15T18:03:00.900-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE SUSE-SR:2008:005 GENTOO GLSA-200803-18 SREASON 3657 CONFIRM http://www.cacti.net/release_notes_0_8_7b.php MANDRIVA MDVSA-2008:052 BUGTRAQ 20080212 cacti -- Multiple security vulnerabilities have been discovered BUGTRAQ 20080212 Cacti 0.8.7a Multiple Vulnerabilities BID 27749 SECTRACK 1019414 VUPEN ADV-2008-0540 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=432758 FEDORA FEDORA-2008-1699 FEDORA FEDORA-2008-1737 graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an invalid local_graph_id parameter and other unspecified vectors.

CVE-2008-0785

2008-02-14T18:00:00.000-05:00

2018-10-15T18:03:02.697-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SUSE SUSE-SR:2008:005 GENTOO GLSA-200803-18 SREASON 3657 CONFIRM http://www.cacti.net/release_notes_0_8_7b.php DEBIAN DSA-1569 MANDRIVA MDVSA-2008:052 BUGTRAQ 20080212 cacti -- Multiple security vulnerabilities have been discovered BUGTRAQ 20080212 Cacti 0.8.7a Multiple Vulnerabilities BID 27749 SECTRACK 1019414 VUPEN ADV-2008-0540 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=432758 FEDORA FEDORA-2008-1699 FEDORA FEDORA-2008-1737 Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the (1) graph_list parameter to graph_view.php, (2) leaf_id and id parameters to tree.php, (3) local_graph_id parameter to graph_xport.php, and (4) login_username parameter to index.php/login.

CVE-2008-0786

2008-02-14T18:00:00.000-05:00

2018-10-15T18:03:04.697-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE SUSE-SR:2008:005 GENTOO GLSA-200803-18 SREASON 3657 CONFIRM http://www.cacti.net/release_notes_0_8_7b.php MANDRIVA MDVSA-2008:052 BUGTRAQ 20080212 cacti -- Multiple security vulnerabilities have been discovered BUGTRAQ 20080212 Cacti 0.8.7a Multiple Vulnerabilities BID 27749 SECTRACK 1019414 VUPEN ADV-2008-0540 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=432758 FEDORA FEDORA-2008-1699 FEDORA FEDORA-2008-1737 CRLF injection vulnerability in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k, when running on older PHP interpreters, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

cpe:/a:mybulletinboard:mybulletinboard:1.0 cpe:/a:mybulletinboard:mybulletinboard:1.0.1 cpe:/a:mybulletinboard:mybulletinboard:1.0.2 cpe:/a:mybulletinboard:mybulletinboard:1.0.3 cpe:/a:mybulletinboard:mybulletinboard:1.0.4 cpe:/a:mybulletinboard:mybulletinboard:1.0_pr2 cpe:/a:mybulletinboard:mybulletinboard:1.1 cpe:/a:mybulletinboard:mybulletinboard:1.1.1 cpe:/a:mybulletinboard:mybulletinboard:1.1.2 cpe:/a:mybulletinboard:mybulletinboard:1.1.3 cpe:/a:mybulletinboard:mybulletinboard:1.1.4 cpe:/a:mybulletinboard:mybulletinboard:1.1.5 cpe:/a:mybulletinboard:mybulletinboard:1.1.6 cpe:/a:mybulletinboard:mybulletinboard:1.1.7 cpe:/a:mybulletinboard:mybulletinboard:1.1.8 cpe:/a:mybulletinboard:mybulletinboard:1.2 cpe:/a:mybulletinboard:mybulletinboard:1.2.3 cpe:/a:mybulletinboard:mybulletinboard:1.2.5 cpe:/a:mybulletinboard:mybulletinboard:1.2.10 cpe:/a:mybulletinboard:mybulletinboard:1.2.11 cpe:/a:mybulletinboard:mybulletinboard:1.10 cpe:/a:mybulletinboard:mybulletinboard:rc1 cpe:/a:mybulletinboard:mybulletinboard:rc2 cpe:/a:mybulletinboard:mybulletinboard:rc3 cpe:/a:mybulletinboard:mybulletinboard:rc4

CVE-2008-0787

2008-02-14T20:00:00.000-05:00

2018-10-15T18:03:06.527-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://community.mybboard.net/showthread.php?tid=27675 BUGTRAQ 20080121 [waraxe-2008-SA#064] - Sql Injection in MyBB 1.2.11 BID 27378 SECTRACK 1019257 VUPEN ADV-2008-0238 MISC http://www.waraxe.us/advisory-64.html EXPLOIT-DB 5070 SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the options[disablesmilies] parameter to private.php.

cpe:/a:mybb:mybb:1.2.11

CVE-2008-0788

2008-02-14T20:00:00.000-05:00

2009-08-20T00:00:00.000-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2008-02-15T11:47:00.000-05:00

MISC http://community.mybboard.net/showthread.php?tid=27675 SREASON 3656 BUGTRAQ 20080118 MyBB 1.2.11 Multiple XSRF Vulnerabilities VUPEN ADV-2008-0238 Multiple cross-site request forgery (CSRF) vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to (1) hijack the authentication of moderators or administrators for requests that delete threads via a do_multideletethreads action to moderation.php and (2) hijack the authentication of arbitrary users for requests that delete private messages (PM) via a delete action to private.php.

cpe:/a:li-scripts:li-countdown

CVE-2008-0789

2008-02-14T21:00:00.000-05:00

2018-10-15T18:03:07.277-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3655 BUGTRAQ 20080212 LI-countdown SQL Injection Vulnerability BID 27753 SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter.

cpe:/a:intermate:winipds:3.3revg52-33-021

CVE-2008-0790

2008-02-14T21:00:00.000-05:00

2018-10-15T18:03:07.527-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/winipds-adv.txt SREASON 3658 BUGTRAQ 20080212 Directory traversal and DoS in WinIPDS G52-33-021 BUGTRAQ 20080313 Re: Directory traversal and DoS in WinIPDS G52-33-021 BID 27757 Directory traversal vulnerability in ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

cpe:/a:intermate:winipds:3.3revg52-33-021

CVE-2008-0791

2008-02-14T21:00:00.000-05:00

2018-10-15T18:03:08.040-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/winipds-adv.txt SREASON 3658 BUGTRAQ 20080212 Directory traversal and DoS in WinIPDS G52-33-021 BUGTRAQ 20080313 Re: Directory traversal and DoS in WinIPDS G52-33-021 BID 27757 ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to cause a denial of service (CPU consumption) via short packets on TCP port 5001 with the 3, 5, 7, 13, 14, or 15 packet types.

cpe:/a:f-secure:f-secure_anti-virus:2006 cpe:/a:f-secure:f-secure_anti-virus:2007 cpe:/a:f-secure:f-secure_anti-virus:2007:second_edition cpe:/a:f-secure:f-secure_anti-virus:2008 cpe:/a:f-secure:f-secure_anti-virus_client_security:6.03 cpe:/a:f-secure:f-secure_anti-virus_client_security:6.04 cpe:/a:f-secure:f-secure_anti-virus_client_security:7.01 cpe:/a:f-secure:f-secure_anti-virus_client_security:7.10 cpe:/a:f-secure:f-secure_anti-virus_for_linux:4.65 cpe:/a:f-secure:f-secure_anti-virus_for_workstations:5.44 cpe:/a:f-secure:f-secure_anti-virus_for_workstations:7.00 cpe:/a:f-secure:f-secure_anti-virus_for_workstations:7.10 cpe:/a:f-secure:f-secure_anti-virus_linux_client_security:5.52 cpe:/a:f-secure:f-secure_anti-virus_linux_client_security:5.53 cpe:/a:f-secure:f-secure_internet_security:2006 cpe:/a:f-secure:f-secure_internet_security:2007 cpe:/a:f-secure:f-secure_internet_security:2007:second_edition cpe:/a:f-secure:f-secure_internet_security:2008 cpe:/a:f-secure:f-secure_protection_service_for_business:3.00 cpe:/a:f-secure:f-secure_protection_service_for_consumers:7.00

CVE-2008-0792

2008-02-14T21:00:00.000-05:00

2017-08-07T21:29:43.400-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.f-secure.com/security/fsc-2008-1.shtml SECTRACK 1019405 SECTRACK 1019412 SECTRACK 1019413 VUPEN ADV-2008-0544 XF fsecure-cab-rar-security-bypass(40480) Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted CAB archive.

cpe:/a:tendenci:cms

CVE-2008-0793

2008-02-14T21:00:00.000-05:00

2017-08-07T21:29:43.447-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://blog.tendenci.com/2008/02/cross-site-scri.html MISC http://holisticinfosec.blogspot.com/2008/02/fastest-fix-in-west-vendors-excellent.html BID 27782 XF tendencicms-search-xss(40477) Multiple cross-site scripting (XSS) vulnerabilities in search.asp in Tendenci CMS allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) searchtext, (3) jobcategoryid, (4) contactcompany, and unspecified other parameters. NOTE: some of these details are obtained from third party information. NOTE: it is not clear whether this affects Tendenci Enterprise Edition in addition to the product's deployment on Tendenci's own server farm. If only the latter was affected, then this issue should not be included in CVE.

cpe:/a:affiliate_market:affiliate_market:0.1_beta

CVE-2008-0794

2008-02-14T21:00:00.000-05:00

2017-09-28T21:30:27.300-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27777 XF affiliatemarket-header-file-include(40472) EXPLOIT-DB 5108 Directory traversal vulnerability in user/header.php in Affiliate Market 0.1 BETA allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.

cpe:/a:joomla:joomla:1.0 cpe:/a:mambo:mambo:4.5 cpe:/a:mgfi:xfaq:1.2

CVE-2008-0795

2008-02-15T17:00:00.000-05:00

2017-09-28T21:30:27.363-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27784 XF xfaq-index-sql-injection(40494) EXPLOIT-DB 5109 SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action.

cpe:/a:nuboard:nuboard:0.5

CVE-2008-0796

2008-02-15T17:00:00.000-05:00

2017-09-28T21:30:27.427-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

EXPLOIT-DB 5115 SQL injection vulnerability in threads.php in Nuboard 0.5 allows remote attackers to execute arbitrary SQL commands via the ssid parameter.

cpe:/a:itheora:itheora:1.0:rc1

CVE-2008-0797

2008-02-15T17:00:00.000-05:00

2017-08-07T21:29:43.620-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://en.wikipedia.org/wiki/Talk:Itheora CONFIRM http://menguy.aymeric.free.fr/theora/news.php BID 27788 XF itheora-download-directory-traversal(40506) Directory traversal vulnerability in lib/download.php in iTheora 1.0 rc1 allows remote attackers to read arbitrary files via directory traversal sequences in the url parameter.

cpe:/a:artmedic_webdesign:artmedic_weblog:1.0

CVE-2008-0798

2008-02-15T17:00:00.000-05:00

2018-10-15T18:03:08.557-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20080213 artmedic weblog multiple local file inclusion vulnerabilities BID 27797 XF artmedicweblog-artmedicprint-file-include(40522) EXPLOIT-DB 5116 Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magic_quotes_gpc is disabled, allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) ta parameter to artmedic_index.php, reached through index.php; and the (2) date parameter to artmedic_print.php.

cpe:/a:joomla:com_quiz:0.81 cpe:/a:mambo:com_quiz:0.81

CVE-2008-0799

2008-02-15T17:00:00.000-05:00

2017-09-28T21:30:27.537-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27808 EXPLOIT-DB 5119 SQL injection vulnerability in index.php in the Quiz (com_quiz) 0.81 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a user_tst_shw action.

cpe:/a:joomla:com_mcquiz:0.9

CVE-2008-0800

2008-02-15T17:00:00.000-05:00

2017-09-28T21:30:27.597-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27809 EXPLOIT-DB 5118 SQL injection vulnerability in index.php in the McQuiz (com_mcquiz) 0.9 Final component for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a user_tst_shw action.

cpe:/a:paxxgallery:com_paxxgallery:0.2

CVE-2008-0801

2008-02-15T17:00:00.000-05:00

2017-09-28T21:30:27.660-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27811 XF paxxgallery-index-sql-injection(40497) EXPLOIT-DB 5117 SQL injection vulnerability in index.php in the PAXXGallery (com_paxxgallery) 0.2 component for Mambo and Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the iid parameter in a view action, and possibly (2) the userid parameter.

cpe:/a:joomla:com_mediaslide cpe:/a:mediaslide:com_mediaslide

CVE-2008-0802

2008-02-15T17:00:00.000-05:00

2017-09-28T21:30:27.707-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27805 XF mediaslide-index-sql-injection(40517) EXPLOIT-DB 5120 SQL injection vulnerability in index.php in the MediaSlide (com_mediaslide) 0.5 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the albumnum parameter in a contact action.

cpe:/a:lookstrike:lan_manager:0.9

CVE-2008-0803

2008-02-15T17:00:00.000-05:00

2017-09-28T21:30:27.770-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

XF lookstrikelanmanager-sysconf-file-include(40519) EXPLOIT-DB 5121 Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the sys_conf[path][real] parameter to (1) modules\class\Table.php; (2) db_admins.php, (3) db_alert.php, (4) db_double.php, (5) db_games.php, (6) db_matches.php, (7) db_match_teams.php, (8) db_news.php, (9) db_platform.php, (10) db_players.php, (11) db_server_group.php, (12) db_server_ip.php, (13) db_teams.php, (14) db_team_players.php, (15) db_tournaments.php, (16) db_tournament_teams.php, and (17) db_trees.php in modules\class\db\; and (18) Match.php, (19) MatchTeam.php, (20) Rule.php, (21) RuleBuilder.php, (22) RulePool.php, (23) RuleSingle.php, (24) RuleTree.php, (25) Tournament.php, (26) TournamentTeam.php, (27) Tree.php, and (28) TreeSingle.php in modules\class\tournament\. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences.

cpe:/a:thecus:n5200pro_nas_server_control_panel

CVE-2008-0804

2008-02-18T19:00:00.000-05:00

2017-09-28T21:30:27.833-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27865 EXPLOIT-DB 5150 PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to execute arbitrary PHP code via a URL in the name parameter.

cpe:/a:reality:medias_phpizabi:0.848b

CVE-2008-0805

2008-02-18T19:00:00.000-05:00

2017-09-28T21:30:27.877-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27847 VUPEN ADV-2008-0585 EXPLOIT-DB 5136 Unrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension from the event page, then accessing it via a direct request to the file in system/cache/pictures.

cpe:/a:paul_pelzl:wyrd:1.4.3b_3

CVE-2008-0806

2008-02-18T19:00:00.000-05:00

2008-09-05T17:36:02.413-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-19T11:15:00.000-05:00

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466382 BID 27848 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=433719 FEDORA FEDORA-2008-1963 FEDORA FEDORA-2008-1986 wyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp.[USERID] temporary file.

cpe:/a:horde:groupware:1.0.3 cpe:/a:horde:groupware_webmail_edition:1.0.4 cpe:/a:horde:turba_contact_manager:2.1.6

CVE-2008-0807

2008-02-18T20:00:00.000-05:00

2011-03-07T22:05:29.033-05:00

4.9

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464058 MLIST [announce] 20080215 Turba H3 (2.1.7) (final) MLIST [announce] 20080215 Turba H3 (2.2-RC3) MLIST [announce] 20080215 Horde Groupware 1.0.4 (final) MLIST [announce] 20080215 Horde Groupware Webmail Edition 1.0.5 (final) DEBIAN DSA-1507 BID 27844 SECTRACK 1019433 VUPEN ADV-2008-0593 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=432027 FEDORA FEDORA-2008-2040 FEDORA FEDORA-2008-2087 lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde Groupware before 1.0.4 and Horde Groupware Webmail Edition before 1.0.5, does not properly check access rights, which allows remote authenticated users to modify address data via a modified object_id parameter to edit.php, as demonstrated by modifying a personal address book entry when there is write access to a shared address book.

cpe:/a:ikiwiki:ikiwiki:1.33.3 cpe:/a:ikiwiki:ikiwiki:1.46 cpe:/a:ikiwiki:ikiwiki:2.31

CVE-2008-0808

2008-02-18T20:00:00.000-05:00

2008-09-05T17:36:02.773-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-19T11:22:00.000-05:00

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=465110 CONFIRM http://ikiwiki.info/security/#index30h2 DEBIAN DSA-1523 BID 27760 Cross-site scripting (XSS) vulnerability in the meta plugin in Ikiwiki before 1.1.47 allows remote attackers to inject arbitrary web script or HTML via meta tags.

cpe:/a:ikiwiki:ikiwiki:1.45

CVE-2008-0809

2008-02-18T20:00:00.000-05:00

2008-09-05T17:36:02.930-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-19T11:39:00.000-05:00

CONFIRM http://ikiwiki.info/security/#index27h2 DEBIAN DSA-1523 BID 27760 Cross-site scripting (XSS) vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title contents.

cpe:/a:joomla:com_scheduling_component cpe:/a:mambo:com_scheduling_component

CVE-2008-0810

2008-02-18T21:00:00.000-05:00

2018-10-15T18:03:09.057-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3662 BUGTRAQ 20080216 joomla SQL Injection( com_scheduling) BID 27830 SQL injection vulnerability in the com_scheduling module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:auracms:auracms:1.62

CVE-2008-0811

2008-02-18T21:00:00.000-05:00

2017-09-28T21:30:27.940-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27841 SECTRACK 1019430 EXPLOIT-DB 5130 Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via (1) the kid parameter to (a) mod/dl.php or (b) mod/links.php, and (2) the query parameter to search.php.

cpe:/a:banpro:net_banpro_dms:1.0

CVE-2008-0812

2008-02-18T21:00:00.000-05:00

2018-10-15T18:03:09.307-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3666 BUGTRAQ 20080216 banpro-dms 1.0 local file inclusion vulnerability BID 27831 Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the action parameter.

cpe:/a:xpweb:xpweb:3.0.1 cpe:/a:xpweb:xpweb:3.3.2

CVE-2008-0813

2008-02-18T21:00:00.000-05:00

2017-09-28T21:30:28.003-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27838 VUPEN ADV-2008-0584 EXPLOIT-DB 5137 Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter.

cpe:/a:truc:truc:0.11

CVE-2008-0814

2008-02-18T21:00:00.000-05:00

2017-09-28T21:30:28.067-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27839 EXPLOIT-DB 5129 Directory traversal vulnerability in download.php in Tracking Requirements & Use Cases (TRUC) 0.11.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the upload_filename parameter.

cpe:/a:egitimhost:com_mezun cpe:/a:joomla:com_mezun

CVE-2008-0815

2008-02-18T21:00:00.000-05:00

2018-10-15T18:03:09.603-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3663 BUGTRAQ 20080212 joomll(k12.tr)(com_mezun)SQL Injection BID 27755 XF mezun-index-sql-injection(40448) SQL injection vulnerability in the com_mezun component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task.

cpe:/a:com_sg:com_sg

CVE-2008-0816

2008-02-18T21:00:00.000-05:00

2018-10-15T18:03:09.963-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3664 BUGTRAQ 20080215 joomla SQL Injection(com_sg) BID 27821 SQL injection vulnerability in the com_sg component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the pid parameter in an order task.

cpe:/a:joomla:com_filebase_component cpe:/a:mambo:com_filebase_component

CVE-2008-0817

2008-02-18T21:00:00.000-05:00

2018-10-15T18:03:10.230-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3665 BUGTRAQ 20080215 joomla SQL Injection(com_filebase) BUGTRAQ 20080216 joomla SQL Injection(com_filebase) BID 27829 XF filebase-index-sql-injection(40616) SQL injection vulnerability in the com_filebase component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action.

cpe:/a:freephpgallery:freephpgallery:0.6

CVE-2008-0818

2008-02-19T15:44:00.000-05:00

2017-09-28T21:30:28.127-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://sourceforge.net/forum/forum.php?forum_id=785794 BID 27806 VUPEN ADV-2008-0589 EXPLOIT-DB 5124 Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie to (1) comment.php, (2) index.php, and (3) show.php.

cpe:/a:plutostatus:plutostatus_locator:1.0pre_alpha

CVE-2008-0819

2008-02-19T15:44:00.000-05:00

2018-10-15T18:03:10.747-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3667 BUGTRAQ 20080214 PlutoStatus Locator v1.0pre (alpha) local file inclusion vulnerability BID 27802 Directory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.

cpe:/a:etomite:etomite:0.6.1.4

CVE-2008-0820

2008-02-19T15:44:00.000-05:00

2018-10-15T18:03:10.997-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3669 MISC http://www.etomite.com/forums/index.php?showtopic=7647 BUGTRAQ 20080214 etomite xss BUGTRAQ 20080218 Re: etomite xss BID 27794 XF etomite-index-xss(40525) ** DISPUTED ** Cross-site scripting (XSS) vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitrary web script or HTML via $_SERVER['PHP_INFO']. NOTE: the vendor disputes this issue in a followup, stating that the affected variable is $_SERVER['PHP_SELF'], and "This is not an Etomite specific exploit and I would like the report rescinded."

cpe:/a:osi_codes_inc.:phplive:3.2.2

CVE-2008-0821

2008-02-19T15:44:00.000-05:00

2017-09-28T21:30:28.207-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27807 EXPLOIT-DB 5125 SQL injection vulnerability in admin/traffic/knowledge_searchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote attackers to execute arbitrary SQL commands via the questid parameter in an expand_question action.

cpe:/a:scribe:scribe:0.2

CVE-2008-0822

2008-02-19T15:44:00.000-05:00

2018-10-15T18:03:11.650-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3668 BUGTRAQ 20080214 scribe 0.2 local file inclusion vulnerability BID 27803 EXPLOIT-DB 5123 Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. (dot dot) in the page parameter.

cpe:/a:drupal:header_image:5.x-1.0

CVE-2008-0823

2008-02-19T15:44:00.000-05:00

2017-08-07T21:29:44.400-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://drupal.org/node/221359 BID 27787 VUPEN ADV-2008-0571 XF drupal-headerimage-security-bypass(40510) Unspecified vulnerability in the Header Image Module before 5.x-1.1 for Drupal allows remote attackers to access the administration pages via unknown attack vectors.

cpe:/a:caroline:caroline:1.5 cpe:/a:caroline:caroline:1.6.0 cpe:/a:caroline:caroline:1.6.1 cpe:/a:caroline:caroline:1.6.2 cpe:/a:caroline:caroline:1.6.3 cpe:/a:caroline:caroline:1.7 cpe:/a:caroline:caroline:1.7.9 cpe:/a:caroline:caroline:1.8

CVE-2008-0824

2008-02-19T15:44:00.000-05:00

2008-09-05T17:36:05.243-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2008-02-20T10:49:00.000-05:00

ALLOWS_ADMIN_ACCESS

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=575934 Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors.

CVE-2008-0825

2008-02-19T15:44:00.000-05:00

2011-03-07T22:05:30.703-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=575934 BID 27846 VUPEN ADV-2008-0596 SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVE-2008-0826

2008-02-19T15:44:00.000-05:00

2011-03-07T22:05:30.797-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://sourceforge.net/project/shownotes.php?release_id=575934 BID 27846 VUPEN ADV-2008-0596 Cross-site scripting (XSS) vulnerability in Claroline before 1.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:phpnuke:book

CVE-2008-0827

2008-02-19T16:44:00.000-05:00

2017-09-28T21:30:28.317-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27863 XF books-cid-sql-injection(40857) EXPLOIT-DB 5147 SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter.

cpe:/a:atutor:atutor:0.9.6 cpe:/a:atutor:atutor:0.9.7 cpe:/a:atutor:atutor:1.0 cpe:/a:atutor:atutor:1.2.1 cpe:/a:atutor:atutor:1.2.2 cpe:/a:atutor:atutor:1.3 cpe:/a:atutor:atutor:1.3.1 cpe:/a:atutor:atutor:1.3.2 cpe:/a:atutor:atutor:1.3.3 cpe:/a:atutor:atutor:1.4 cpe:/a:atutor:atutor:1.4.1 cpe:/a:atutor:atutor:1.4.2 cpe:/a:atutor:atutor:1.4.3 cpe:/a:atutor:atutor:1.5.1 cpe:/a:atutor:atutor:1.5.1:pl1 cpe:/a:atutor:atutor:1.5.1:pl2 cpe:/a:atutor:atutor:1.5.2 cpe:/a:atutor:atutor:1.5.3 cpe:/a:atutor:atutor:1.5.3:rc2 cpe:/a:atutor:atutor:1.5.3.1 cpe:/a:atutor:atutor:1.5.3.2 cpe:/a:atutor:atutor:1.5.4 cpe:/a:atutor:atutor:1.5.5

CVE-2008-0828

2008-02-19T16:44:00.000-05:00

2018-10-15T18:03:12.073-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3670 BUGTRAQ 20080217 ATutor <= 1.5.5 Cross Site Scripting BID 27855 Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in (a) forum post or (b) mail; or (2) the website field of the profile.

cpe:/a:joomla:joomla cpe:/a:joomlapixel:jooget:2.6.8 cpe:/a:mambo:mambo

CVE-2008-0829

2008-02-19T16:44:00.000-05:00

2017-09-28T21:30:28.363-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://forum.joomlaitalia.com/index.php?topic=388.0 CONFIRM http://members.joomlapixel.eu/download/componenti/patch-jooget-2.6.8-sql-injection/details.html BID 27836 EXPLOIT-DB 5132 SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail task.

cpe:/a:apple:iphoto:4.0.3

CVE-2008-0830

2008-02-19T17:44:00.000-05:00

2017-09-28T21:30:28.427-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27867 SECTRACK 1019488 EXPLOIT-DB 5151 The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (crash) via a malformed dpap: URI, a different vulnerability than CVE-2008-0043.

cpe:/a:joomla:rapid_recipe:1.6.5

CVE-2008-0831

2008-02-20T14:44:00.000-05:00

2017-09-28T21:30:28.487-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

EXPLOIT-DB 5103 Multiple SQL injection vulnerabilities in the Rapid Recipe (com_rapidrecipe) 1.6.5 and earlier component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) user_id or (2) category_id parameter. NOTE: this might overlap CVE-2008-0754.

cpe:/a:joomla:kemas_antonius_com_quran:1.1 cpe:/a:mambo:kemas_antonius_com_quran:1.1

CVE-2008-0832

2008-02-20T14:44:00.000-05:00

2017-09-28T21:30:28.550-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20080223 php-nuke Quran SQL Injection(surano) BID 27842 XF quran-index-sql-injection(40573) EXPLOIT-DB 5128 SQL injection vulnerability in index.php in the Kemas Antonius com_quran 1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the surano parameter in a viewayat action.

cpe:/a:joomla:com_galeria

CVE-2008-0833

2008-02-20T14:44:00.000-05:00

2017-09-28T21:30:28.613-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20080216 joomla SQL Injection(com_galeria) BID 27833 EXPLOIT-DB 5134 SQL injection vulnerability in index.php in the com_galeria component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.

cpe:/a:ibm:lotus_quickr:8.0 cpe:/a:ibm:lotus_quickr:8.0.2

CVE-2008-0834

2008-02-20T16:44:00.000-05:00

2011-03-07T22:05:31.737-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27840 SECTRACK 1019431 VUPEN ADV-2008-0590 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg24016411 Cross-site scripting (XSS) vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:simple_cms:simple_cms:1.0.3

CVE-2008-0835

2008-02-20T16:44:00.000-05:00

2018-10-15T18:03:12.433-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20080217 Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit BID 27843 EXPLOIT-DB 5131 SQL injection vulnerability in indexen.php in Simple CMS 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the area parameter.

cpe:/o:sun:solaris:9::x86 cpe:/o:sun:solaris:10::x86

CVE-2008-0836

2008-02-20T16:44:00.000-05:00

2011-03-07T22:05:31.893-05:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov SUNALERT 200635 SECTRACK 1019429 VUPEN ADV-2008-0582 Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 9 and 10 on x86 architectures allows local users to cause a denial of service (panic) via unspecified vectors that trigger a NULL pointer dereference in the vuid3ps2 module, a different issue than CVE-2007-5319.

cpe:/a:john_godley:search_unleashed:0.2.10 cpe:/a:wordpress:search_unleashed_plugin:0.2.10

CVE-2008-0837

2008-02-20T16:44:00.000-05:00

2018-10-15T18:03:12.760-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3674 CONFIRM http://urbangiraffe.com/tracker/issues/show/60 BUGTRAQ 20080213 Search Unleashed 0.2.10 JavaScript injection (Wordpress plugin) BID 27791 XF searchunleashed-log-xss(40513) Cross-site scripting (XSS) vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not properly handled when the administrator views the log file.

cpe:/a:sophos:es1000:2.1.0.0 cpe:/a:sophos:es4000:2.1.0.0

CVE-2008-0838

2008-02-20T16:44:00.000-05:00

2018-10-15T18:03:13.260-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3673 MISC http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-02-13 BUGTRAQ 20080215 [INFIGO-2008-02-13]: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability BID 27813 SECTRACK 1019427 CONFIRM http://www.sophos.com/support/knowledgebase/article/34733.html VUPEN ADV-2008-0574 Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Email Security Appliance 2.1.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) error and (2) go parameters to the login page.

cpe:/a:astats:astatspro:1.0 cpe:/a:joomla:com_astatspro:1.0

CVE-2008-0839

2008-02-20T16:44:00.000-05:00

2017-09-28T21:30:28.723-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27850 XF astatspro-refer-sql-injection(40611) EXPLOIT-DB 5138 SQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:publicwarehouse:lightblog:9.6

CVE-2008-0840

2008-02-20T16:44:00.000-05:00

2018-10-15T18:03:13.870-04:00

4.4

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20080217 lightblog 9.6 local file inclusion vulnerability BID 27837 VUPEN ADV-2008-0621 EXPLOIT-DB 5140 Directory traversal vulnerability in view_member.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the username parameter.

cpe:/a:joomla:com_ricette_component:1.0 cpe:/a:mambo:com_ricette_component:1.0

CVE-2008-0841

2008-02-20T16:44:00.000-05:00

2017-09-28T21:30:28.833-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27834 EXPLOIT-DB 5133 SQL injection vulnerability in index.php in the Giorgio Nordo Ricette (com_ricette) 1.0 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:joomla:com_clasifier

CVE-2008-0842

2008-02-20T16:44:00.000-05:00

2017-09-28T21:30:28.880-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27917 VUPEN ADV-2008-0620 XF clasifier-index-sql-injection(40629) EXPLOIT-DB 5146 SQL injection vulnerability in index.php in the Classifier (com_clasifier) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

cpe:/a:statcountex:statcountex:3.0 cpe:/a:statcountex:statcountex:3.1

CVE-2008-0843

2008-02-20T16:44:00.000-05:00

2018-10-15T18:03:14.307-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/statcountex-disclose.txt SREASON 3675 EXPLOIT-DB 11434 BUGTRAQ 20080214 StatCounteX 3.0 & 3.1 Admin Vulnerability BID 27814 StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp.

cpe:/a:joomla:com_pccookbook

CVE-2008-0844

2008-02-20T16:44:00.000-05:00

2017-09-28T21:30:28.940-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27864 XF pccookbook-index-sql-injection(40620) EXPLOIT-DB 5145 SQL injection vulnerability in index.php in the PccookBook (com_pccookbook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter.

cpe:/a:wordpress:dean_logan_wp-people_plugin:1.6.1

CVE-2008-0845

2008-02-20T16:44:00.000-05:00

2018-10-15T18:03:14.777-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3672 BUGTRAQ 20080216 Wordpress Plugin (wp-people) SQL Injection BID 27858 XF wppeople-wppeoplepopup-sql-injection(40860) SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter.

cpe:/a:joomla:com_profile cpe:/a:mambo:com_profile

CVE-2008-0846

2008-02-20T16:44:00.000-05:00

2008-09-05T17:36:08.697-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2008-02-21T11:22:00.000-05:00

ALLOWS_OTHER_ACCESS

BUGTRAQ 20080216 joomla SQL Injection(com_profile) BID 27851 SQL injection vulnerability in index.php in the com_profile component for Joomla! allows remote attackers to execute arbitrary SQL commands via the oid parameter.

cpe:/a:xoops:mytopics

CVE-2008-0847

2008-02-20T19:44:00.000-05:00

2018-10-15T18:03:15.137-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20080218 XOOPS Module myTopics-print SQL Injection(articleid) BID 27861 XF mytopics-print-sql-injection(40627) EXPLOIT-DB 5148 SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter.

cpe:/a:crafty_syntax_live_help:crafty_syntax_live_help:2.4.15

CVE-2008-0848

2008-02-20T19:44:00.000-05:00

2018-10-15T18:03:15.590-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3688 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=580994 BUGTRAQ 20080218 Crafty Syntax Xss Vulnerability BUGTRAQ 20080302 Re: Crafty Syntax Xss Vulnerability BID 27859 XF cslh-lostsheep-xss(40636) Cross-site scripting (XSS) vulnerability in lostsheep.php in Crafty Syntax Live Help (CSLH) before 2.14.16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the versions claimed by the original researcher are probably incorrect.

cpe:/a:joomla:com_downloads cpe:/a:mambo:com_downloads

CVE-2008-0849

2008-02-20T19:44:00.000-05:00

2018-10-15T18:03:16.277-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3676 BUGTRAQ 20080216 joomla SQL Injection (cat)(com_downloads) BID 27860 XF downloads-indexphp-sql-injection(40621) SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652.

cpe:/a:dokeos:dokeos:1.8.4

CVE-2008-0850

2008-02-20T19:44:00.000-05:00

2018-10-15T18:03:16.650-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://projects.dokeos.com/index.php?do=details&task_id=2218 SREASON 3687 BUGTRAQ 20080219 [DSECRG-08-015] Multiple Security Vulnerabilities in Dokeos 1.8.4 BID 27792 SECTRACK 1019425 VUPEN ADV-2008-0587 Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to whoisonline.php, (2) tracking_list_coaches_column parameter to main/mySpace/index.php, (3) tutor_name parameter to main/create_course/add_course.php, the (4) Referer HTTP header to index.php, and the (5) X-Fowarded-For HTTP header to main/admin/class_list.php.

cpe:/a:dokeos:e-learning_system:1.8.4

CVE-2008-0851

2008-02-20T19:44:00.000-05:00

2018-10-15T18:03:17.183-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://projects.dokeos.com/index.php?do=details&task_id=2218 SREASON 3687 BUGTRAQ 20080219 [DSECRG-08-015] Multiple Security Vulnerabilities in Dokeos 1.8.4 BID 27792 SECTRACK 1019425 VUPEN ADV-2008-0587 Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to inscription.php, (2) courseCode parameter to main/calendar/myagenda.php, (3) category parameter to main/admin/course_category.php, (4) message parameter to main/admin/session_list.php in a show_message action, and (5) an avatar image to main/auth/profile.php.

cpe:/a:freesshd:freesshd:1.2

CVE-2008-0852

2008-02-20T19:44:00.000-05:00

2018-10-15T18:03:17.713-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/freesshdnull-adv.txt BUGTRAQ 20080219 NULL pointer crash in freeSSHd 1.20 BID 27845 VUPEN ADV-2008-0591 freeSSHd 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a SSH2_MSG_NEWKEYS packet to TCP port 22, which triggers a NULL pointer dereference.

cpe:/a:joomla:com_detail cpe:/a:mambo:com_detail

CVE-2008-0853

2008-02-20T19:44:00.000-05:00

2018-10-15T18:03:18.090-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3677 BUGTRAQ 20080216 joomla SQL Injection(com_detail) BUGTRAQ 20080218 joomla SQL Injection(com_detail) BID 27853 SQL injection vulnerability in the com_detail component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: this issue might be site-specific. If so, it should not be included in CVE.

cpe:/a:joomla:com_salesrep cpe:/a:mambo:com_salesrep

CVE-2008-0854

2008-02-20T19:44:00.000-05:00

2018-10-15T18:03:18.480-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3678 BUGTRAQ 20080215 joomla SQL Injection(com_salesrep) BID 27827 XF salesrep-index-sql-injection(40619) SQL injection vulnerability in the com_salesrep component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the rid parameter in a showrep action to index.php.

cpe:/a:joomla:com_facileforms cpe:/a:mambo:com_facileforms

CVE-2008-0855

2008-02-20T19:44:00.000-05:00

2018-10-15T18:03:18.840-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3679 BUGTRAQ 20080218 joomla SQL Injection(com_facileforms) BID 27880 SQL injection vulnerability in the Facile Forms (com_facileforms) component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.

cpe:/a:e-vision:e-vision_cms:2.02

CVE-2008-0856

2008-02-20T19:44:00.000-05:00

2017-08-07T21:29:45.323-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27816 XF evisioncms-iframe-print-sql-injection(40859) Multiple SQL injection vulnerabilities in e-Vision CMS 2.02 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) iframe.php and (2) print.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:woltlab:burning_board:3.0.3_pl1

CVE-2008-0857

2008-02-20T19:44:00.000-05:00

2018-10-15T18:03:19.090-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3680 BUGTRAQ 20080219 WoltLab Burning Board 3.0.3 PL1 SQL-Injection Vulnerability BID 27885 EXPLOIT-DB 5164 SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrary SQL commands via the sortOrder parameter to the PMList page.

cpe:/a:kerio:kerio_mailserver:6.4.2 cpe:/a:visnetic:visnetic_antivirus_plug-in_for_mail_server

CVE-2008-0858

2008-02-20T19:44:00.000-05:00

2011-03-07T22:05:33.797-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://www.kerio.com/kms_history.html BID 27868 SECTRACK 1019428 VUPEN ADV-2008-0594 Buffer overflow in the Visnetic anti-virus plugin in Kerio MailServer before 6.5.0 might allow remote attackers to execute arbitrary code via unspecified vectors.

cpe:/a:kerio:kerio_mailserver:5.0 cpe:/a:kerio:kerio_mailserver:5.1 cpe:/a:kerio:kerio_mailserver:5.1.1 cpe:/a:kerio:kerio_mailserver:5.6.3 cpe:/a:kerio:kerio_mailserver:5.6.4 cpe:/a:kerio:kerio_mailserver:5.6.5 cpe:/a:kerio:kerio_mailserver:5.7.0 cpe:/a:kerio:kerio_mailserver:5.7.1 cpe:/a:kerio:kerio_mailserver:5.7.2 cpe:/a:kerio:kerio_mailserver:5.7.3 cpe:/a:kerio:kerio_mailserver:5.7.4 cpe:/a:kerio:kerio_mailserver:5.7.5 cpe:/a:kerio:kerio_mailserver:5.7.6 cpe:/a:kerio:kerio_mailserver:5.7.7 cpe:/a:kerio:kerio_mailserver:5.7.8 cpe:/a:kerio:kerio_mailserver:5.7.9 cpe:/a:kerio:kerio_mailserver:5.7.10 cpe:/a:kerio:kerio_mailserver:6.0 cpe:/a:kerio:kerio_mailserver:6.0.1 cpe:/a:kerio:kerio_mailserver:6.0.2 cpe:/a:kerio:kerio_mailserver:6.0.3 cpe:/a:kerio:kerio_mailserver:6.0.4 cpe:/a:kerio:kerio_mailserver:6.0.9 cpe:/a:kerio:kerio_mailserver:6.0.10 cpe:/a:kerio:kerio_mailserver:6.1.3 cpe:/a:kerio:kerio_mailserver:6.2.2 cpe:/a:kerio:kerio_mailserver:6.3.1 cpe:/a:kerio:kerio_mailserver:6.4.0 cpe:/a:kerio:kerio_mailserver:6.4.1 cpe:/a:kerio:kerio_mailserver:6.4.2

CVE-2008-0859

2008-02-20T19:44:00.000-05:00

2011-03-07T22:05:33.877-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.kerio.com/kms_history.html BID 27868 SECTRACK 1019428 VUPEN ADV-2008-0594 Unspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to decoding of uuencoded input, which triggers memory corruption.

cpe:/a:kerio:avg_plugin cpe:/a:kerio:kerio_mailserver:6.4.2

CVE-2008-0860

2008-02-20T19:44:00.000-05:00

2011-03-07T22:05:34.143-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://www.kerio.com/kms_history.html BID 27868 SECTRACK 1019428 VUPEN ADV-2008-0594 Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors related to null DACLs.

cpe:/a:ibm:lotus_quickplace:7.0

CVE-2008-0861

2008-02-20T20:44:00.000-05:00

2011-03-07T22:05:34.237-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.securiteam.com/securitynews/5AP0B2KNFM.html BID 27871 SECTRACK 1019432 VUPEN ADV-2008-0841 Cross-site scripting (XSS) vulnerability in leg/Main.nsf in IBM Lotus Quickplace 7.0 allows remote attackers to inject arbitrary web script or HTML via an h_SearchString sub-parameter in the PreSetFields parameter of an EditDocument action.

cpe:/a:ibm:lotus_notes:6.0 cpe:/a:ibm:lotus_notes:6.5 cpe:/a:ibm:lotus_notes:7.0 cpe:/a:ibm:lotus_notes:8.0

CVE-2008-0862

2008-02-20T20:44:00.000-05:00

2011-03-07T22:05:34.313-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov VUPEN ADV-2008-0600 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg21257250 IBM Lotus Notes 6.0, 6.5, 7.0, and 8.0 signs an unsigned applet when a user forwards an email message to another user, which allows user-assisted remote attackers to bypass Execution Control List (ECL) protection.

cpe:/a:bea:weblogic_server:9.0 cpe:/a:bea:weblogic_server:9.0::express cpe:/a:bea:weblogic_server:9.1 cpe:/a:bea:weblogic_server:9.1::express

CVE-2008-0863

2008-02-20T20:44:00.000-05:00

2011-03-07T22:05:34.580-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BEA BEA08-187.00 SECTRACK 1019455 VUPEN ADV-2008-0612 BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further attacks.

cpe:/a:bea_systems:weblogic_portal:8.1_sp6 cpe:/a:oracle:weblogic_portal:8.1:sp3 cpe:/a:oracle:weblogic_portal:8.1:sp4 cpe:/a:oracle:weblogic_portal:8.1:sp5

CVE-2008-0864

2008-02-20T20:44:00.000-05:00

2018-10-30T12:25:28.887-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BEA BEA08-183.00 SECTRACK 1019454 VUPEN ADV-2008-0613 Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions.

cpe:/a:bea_systems:weblogic_portal:8.1_sp6 cpe:/a:oracle:weblogic_portal:8.1 cpe:/a:oracle:weblogic_portal:8.1:sp1 cpe:/a:oracle:weblogic_portal:8.1:sp2 cpe:/a:oracle:weblogic_portal:8.1:sp3 cpe:/a:oracle:weblogic_portal:8.1:sp4 cpe:/a:oracle:weblogic_portal:8.1:sp5

CVE-2008-0865

2008-02-20T20:44:00.000-05:00

2018-10-30T12:25:28.887-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BEA BEA08-184.00 SECTRACK 1019451 VUPEN ADV-2008-0613 Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors.

cpe:/a:bea:weblogic_workshop:8.1:sp2 cpe:/a:bea:weblogic_workshop:8.1:sp3 cpe:/a:bea:weblogic_workshop:8.1:sp4 cpe:/a:bea:weblogic_workshop:8.1:sp5

CVE-2008-0866

2008-02-20T20:44:00.000-05:00

2011-03-07T22:05:34.893-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BEA BEA08-185.00 SECTRACK 1019441 VUPEN ADV-2008-0611 Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject arbitrary web script or HTML via an invalid action URI, which is not properly handled by NetUI page flows.

cpe:/a:bea_systems:aqualogic_interaction:6.1 cpe:/a:bea_systems:aqualogic_interaction:6.1:mp1 cpe:/a:bea_systems:plumtree_foundation:6.0 cpe:/a:bea_systems:plumtree_foundation:6.0:sp1

CVE-2008-0867

2008-02-20T20:44:00.000-05:00

2018-10-15T18:03:19.527-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BEA BEA08-186.00 MISC http://www.procheckup.com/Vulnerability_PR06-12.php BUGTRAQ 20080219 PR06-12: XSS on BEA Plumtree Foundation and AquaLogic Interaction portals SECTRACK 1019440 VUPEN ADV-2008-0610 Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.

cpe:/a:bea_systems:weblogic_portal:10.0 cpe:/a:oracle:weblogic_portal:9.2

CVE-2008-0868

2008-02-20T20:44:00.000-05:00

2018-10-30T12:25:28.980-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BEA BEA08-188.00 SECTRACK 1019452 VUPEN ADV-2008-0613 Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web script or HTML via unknown vectors.

cpe:/a:bea:weblogic_server:9.0 cpe:/a:bea:weblogic_server:9.1 cpe:/a:bea:weblogic_server:9.2 cpe:/a:bea:weblogic_workshop:8.1:sp2 cpe:/a:bea:weblogic_workshop:8.1:sp3 cpe:/a:bea:weblogic_workshop:8.1:sp4 cpe:/a:bea:weblogic_workshop:8.1:sp5 cpe:/a:bea:weblogic_workshop:8.1:sp6 cpe:/a:bea_systems:weblogic:10.0

CVE-2008-0869

2008-02-20T20:44:00.000-05:00

2011-03-07T22:05:35.157-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BEA BEA08-189.00 SECTRACK 1019438 VUPEN ADV-2008-0611 VUPEN ADV-2008-0612 Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a "framework defined request parameter" when using WebLogic Workshop or Apache Beehive NetUI framework with page flows.

cpe:/a:bea_systems:weblogic_portal:9.2:mp1 cpe:/a:bea_systems:weblogic_portal:9.2:mp2 cpe:/a:bea_systems:weblogic_portal:10.0 cpe:/a:oracle:weblogic_portal:9.2

CVE-2008-0870

2008-02-20T20:44:00.000-05:00

2018-10-30T12:25:28.980-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BEA BEA08-190.00 SECTRACK 1019442 VUPEN ADV-2008-0613 BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session.

cpe:/a:now:sms_mms_gateway:2007.06.27

CVE-2008-0871

2008-02-21T14:44:00.000-05:00

2018-10-15T18:03:20.090-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/nowsmsz-adv.txt BUGTRAQ 20080219 Multiple buffer-overflow in NowSMS v2007.06.27 BID 27896 VUPEN ADV-2008-0615 EXPLOIT-DB 5695 Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a (1) long password in an Authorization header to the HTTP service or a (2) large packet to the SMPP service.

cpe:/a:smartertools:smartermail_enterprise:4.3

CVE-2008-0872

2008-02-21T14:44:00.000-05:00

2018-10-15T18:03:20.637-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://es.geocities.com/jplopezy/SmarterMailXSS.txt SREASON 3686 BUGTRAQ 20080219 SmarterMail Enterprise 4.3 - malformed mail XSS BID 27878 SECTRACK 1019461 Cross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an element in the Subject field of an e-mail message.

cpe:/a:jlmzone:classifieds:1.0

CVE-2008-0873

2008-02-21T14:44:00.000-05:00

2018-10-15T18:03:21.103-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3681 BUGTRAQ 20080219 XOOPS Module classifieds SQL Injection(cid) BID 27895 EXPLOIT-DB 5158 SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in an Adsview action.

cpe:/a:xoops:eempregos_module

CVE-2008-0874

2008-02-21T14:44:00.000-05:00

2018-10-15T18:03:21.463-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3682 BUGTRAQ 20080219 XOOPS Module eEmpregos SQL Injection(cid) BID 27905 EXPLOIT-DB 5157 SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action.

cpe:/a:hitachi:eur_print_manager:05-06 cpe:/a:hitachi:eur_print_manager:05-06-_b cpe:/a:hitachi:eur_print_manager:05-08

CVE-2008-0875

2008-02-21T14:44:00.000-05:00

2011-03-07T22:05:35.687-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.hitachi-support.com/security_e/vuls_e/HS08-001_e/index-e.html BID 27899 VUPEN ADV-2008-0616 Unspecified vulnerability in Hitachi EUR Print Manager, and related Client and Local Server products, 05-06 through 05-06-/B and 05-08 allows remote attackers to cause a denial of service (service hang or termination) via unspecified vectors related to "unexpected data."

cpe:/a:hitachi:sewb3_mi-platform:01-00::hi-ux_we2%283050_risc%29 cpe:/a:hitachi:sewb3_mi-platform:01-00::hi-ux_we2%283050_sisc%29 cpe:/a:hitachi:sewb3_mi-platform:01-00::hi-ux_we2%283050rx%29 cpe:/a:hitachi:sewb3_mi-platform:01-00::hp-ux%289.x%29 cpe:/a:hitachi:sewb3_mi-platform:01-04::solaris cpe:/a:hitachi:sewb3_mi-platform:01-06-_a::hi-ux_we2%283050_risc%29 cpe:/a:hitachi:sewb3_mi-platform:01-06-_a::hi-ux_we2%283050_sisc%29 cpe:/a:hitachi:sewb3_mi-platform:01-07::hi-ux_we2%283050rx%29 cpe:/a:hitachi:sewb3_mi-platform:01-10::aix cpe:/a:hitachi:sewb3_mi-platform:01-10-_a::hp-ux%289.x%29 cpe:/a:hitachi:sewb3_mi-platform:01-11::hp-ux%2810.x%29 cpe:/a:hitachi:sewb3_mi-platform:01-16-_b::hi-ux_we2%283050rx%29 cpe:/a:hitachi:sewb3_mi-platform:01-16-_b::hp-ux%2810.x%29 cpe:/a:hitachi:sewb3_mi-platform:01-16-_c::hp-ux%2811.x%29 cpe:/a:hitachi:sewb3_mi-platform:01-16-_f::hi-ux_we2%283050rx%29 cpe:/a:hitachi:sewb3_mi-platform:01-16-_f::hp-ux%2811.x%29 cpe:/a:hitachi:sewb3_mi-platform:01-17::hp-ux%2811.x%29 cpe:/a:hitachi:sewb3_mi-platform:01-17-_f::hp-ux%2811.x%29 cpe:/a:hitachi:sewb3_mi-platform:02-13::aix cpe:/a:hitachi:sewb3_mi-platform:02-14-_a::solaris cpe:/a:hitachi:sewb3_platform:01-00::hi-ux_we2%283050_risc%29 cpe:/a:hitachi:sewb3_platform:01-00::hi-ux_we2%283050_sisc%29 cpe:/a:hitachi:sewb3_platform:01-00::hi-ux_we2%283050rx%29 cpe:/a:hitachi:sewb3_platform:01-00::hp-ux%289.x%29 cpe:/a:hitachi:sewb3_platform:01-04::solaris cpe:/a:hitachi:sewb3_platform:01-06::hi-ux_we2%283050rx%29 cpe:/a:hitachi:sewb3_platform:01-06-_a::hi-ux_we2%283050_risc%29 cpe:/a:hitachi:sewb3_platform:01-06-_a::hi-ux_we2%283050_sisc%29 cpe:/a:hitachi:sewb3_platform:01-10::aix cpe:/a:hitachi:sewb3_platform:01-10-_a::hp-ux%289.x%29 cpe:/a:hitachi:sewb3_platform:01-11::hp-ux%2810.x%29 cpe:/a:hitachi:sewb3_platform:01-16-_b::hi-ux_we2%283050rx%29 cpe:/a:hitachi:sewb3_platform:01-16-_b::hp-ux%2810.x%29 cpe:/a:hitachi:sewb3_platform:01-16-_c::hp-ux%2811.x%29 cpe:/a:hitachi:sewb3_platform:01-16-_f::hi-ux_we2%283050rx%29 cpe:/a:hitachi:sewb3_platform:01-16-_f::hp-ux%2811.x%29 cpe:/a:hitachi:sewb3_platform:01-17::hp-ux%2811.x%29 cpe:/a:hitachi:sewb3_platform:01-17-_f::hp-ux%2811.x%29 cpe:/a:hitachi:sewb3_platform:02-13::aix cpe:/a:hitachi:sewb3_platform:02-14-_a::solaris

CVE-2008-0876

2008-02-21T14:44:00.000-05:00

2011-03-07T22:05:35.893-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.hitachi-support.com/security_e/vuls_e/HS08-002_e/index-e.html BID 27900 VUPEN ADV-2008-0617 Unspecified vulnerability in the SEWB3 messaging service in Hitachi SEWB3/PLATFORM and SEWB3/MI-PLATFORM 01-00 through 02-14-/A allows remote attackers to cause a denial of service (service outage) via "invalid data."

cpe:/a:jinzora:media_jukebox:2.7.5

CVE-2008-0877

2008-02-21T14:44:00.000-05:00

2018-10-15T18:03:21.823-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3683 BUGTRAQ 20080219 [DSECRG-08-016] Jinzora 2.7.5 Multiple XSS BID 27876 Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) frontend, (2) set_frontend, (3) jz_path, (4) theme, and (5) set_theme parameters to (a) index.php; the frontend, theme, and (6) language parameters to (b) ajax_request.php; the jz_path parameter to (c) slim.php; the frontend, theme, and jz_path parameters to (d) popup.php; the (13) PATH_INFO to index.php and (e) slim.php; and the (14) query parameter in a playlistedit action and (15) siteNewsData parameter in a sitenews action to (f) popup.php.

cpe:/a:runcms:myannonces

CVE-2008-0878

2008-02-21T14:44:00.000-05:00

2017-09-28T21:30:29.300-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27902 VUPEN ADV-2008-0619 XF myannonces-index-sql-injection(40861) EXPLOIT-DB 5156 SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action.

cpe:/a:phpnuke:web_links_module

CVE-2008-0879

2008-02-21T14:44:00.000-05:00

2018-10-15T18:03:22.137-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://packetstormsecurity.com/files/126697/PHP-Nuke-Web-Links-SQL-Injection.html SREASON 3684 BUGTRAQ 20080219 PHP-Nuke Module Web_Links SQL Injection(cid) BID 27894 BID 67463 XF weblinks-cid-sql-injection(40862) SQL injection vulnerability in modules.php in the Web_Links module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewlink action.

cpe:/a:phpnuke:easycontent_module

CVE-2008-0880

2008-02-21T14:44:00.000-05:00

2017-09-28T21:30:29.347-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27897 EXPLOIT-DB 5155 SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the page_id parameter.

cpe:/a:phpnuke:okul_module:1.0

CVE-2008-0881

2008-02-21T14:44:00.000-05:00

2017-09-28T21:30:29.410-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27909 EXPLOIT-DB 5159 SQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the okulid parameter in an okullar action.

cpe:/a:cups:cups:1.3.5

CVE-2008-0882

2008-02-21T14:44:00.000-05:00

2017-09-28T21:30:29.487-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 SUSE SUSE-SA:2008:012 GENTOO GLSA-200804-01 CONFIRM http://www.cups.org/str.php?L2656 DEBIAN DSA-1530 MANDRIVA MDVSA-2008:050 MANDRIVA MDVSA-2008:051 REDHAT RHSA-2008:0157 BID 27906 SECTRACK 1019473 UBUNTU USN-598-1 VUPEN ADV-2008-0623 VUPEN ADV-2008-0924 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=433758 FEDORA FEDORA-2008-1901 FEDORA FEDORA-2008-1976 Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation of a remote printer. NOTE: some of these details are obtained from third party information.

cpe:/a:adobe:acrobat_reader:8.1.2

CVE-2008-0883

2008-03-05T19:44:00.000-05:00

2017-08-07T21:29:45.493-04:00

3.7

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SR:2008:005 SUNALERT 240106 CONFIRM http://support.novell.com/techcenter/psdb/d8c48c63359fc807624182696d3d149c.html CONFIRM http://www.adobe.com/support/security/advisories/apsa08-02.html GENTOO GLSA-200803-26 REDHAT RHSA-2008:0641 BID 28091 SECTRACK 1019539 VUPEN ADV-2008-0765 VUPEN ADV-2008-2289 XF adobe-reader-acroread-symlink(40987) acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files related to SSL certificate handling.

cpe:/o:red_hat:enterprise_linux:5

CVE-2008-0884

2008-04-03T20:44:00.000-04:00

2017-08-07T21:29:45.557-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

REDHAT RHSA-2008:0193 SECTRACK 1019740 BID 28557 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=435442 XF redhat-lsppeal4config-insecure-permissions(41584) The Replace function in the capp-lspp-config script in the (1) lspp-eal4-config-ibm and (2) capp-lspp-eal4-config-hp packages before 0.65-2 in Red Hat Enterprise Linux (RHEL) 5 uses lstat instead of stat to determine the /etc/pam.d/system-auth file permissions, leading to a change to world-writable permissions for the /etc/pam.d/system-auth-ac file, which allows local users to gain privileges by modifying this file.

CVE-2008-0886

2008-02-29T14:44:00.000-05:00

2008-09-10T21:06:29.663-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-0882. Reason: This candidate is a duplicate of CVE-2008-0882. Notes: All CVE users should reference CVE-2008-0882 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:gnome:screensaver:2.20.0

CVE-2008-0887

2008-04-06T19:44:00.000-04:00

2017-09-28T21:30:29.550-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SR:2008:014 REDHAT RHSA-2008:0197 GENTOO GLSA-200804-12 SECTRACK 1019749 MANDRIVA MDVSA-2008:132 REDHAT RHSA-2008:0218 BID 28575 UBUNTU USN-669-1 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=435773 FEDORA FEDORA-2008-2967 FEDORA FEDORA-2008-3017 gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to the locked session, a related issue to CVE-2007-1859.

cpe:/a:info-zip:unzip

CVE-2008-0888

2008-03-17T17:44:00.000-04:00

2018-10-15T18:03:22.697-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 SUSE SUSE-SR:2008:007 GENTOO GLSA-200804-06 CONFIRM http://support.apple.com/kb/HT4077 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0116 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0116 DEBIAN DSA-1522 CONFIRM http://www.ipcop.org/index.php?name=News&file=article&sid=40 MANDRIVA MDVSA-2008:068 REDHAT RHSA-2008:0196 BUGTRAQ 20080321 rPSA-2008-0116-1 unzip BUGTRAQ 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues BID 28288 SECTRACK 1019634 UBUNTU USN-589-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0009.html VUPEN ADV-2008-0913 VUPEN ADV-2008-1744 XF unzip-inflatedynamic-code-execution(41246) CONFIRM https://issues.rpath.com/browse/RPL-2317 The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.

cpe:/a:redhat:directory_server:8.0:el4 cpe:/a:redhat:directory_server:8.0:el5

CVE-2008-0889

2008-03-19T20:44:00.000-04:00

2008-09-05T17:36:15.397-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-03-20T10:30:00.000-04:00

REDHAT RHSA-2008:0191 BID 28327 SECTRACK 1019677 Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script.

cpe:/a:redhat:directory_server:7.1:sp3

CVE-2008-0890

2008-03-11T20:44:00.000-04:00

2017-08-07T21:29:45.697-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

REDHAT RHSA-2008:0173 BID 28204 SECTRACK 1019577 XF rhds-jars-insecure-permissions(41152) Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors.

cpe:/a:openssl:openssl:0.9.8f cpe:/a:openssl:openssl:0.9.8g

CVE-2008-0891

2008-05-29T12:32:00.000-04:00

2017-08-07T21:29:45.777-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MISC http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html GENTOO GLSA-200806-08 SLACKWARE SSA:2008-210-08 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=615606 MISC http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400 CERT-VN VU#661475 MANDRIVA MDVSA-2008:107 CONFIRM http://www.openssl.org/news/secadv_20080528.txt BID 29405 SECTRACK 1020121 UBUNTU USN-620-1 VUPEN ADV-2008-1680 VUPEN ADV-2008-1937 XF openssl-servername-dos(42666) FEDORA FEDORA-2008-4723 Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service (crash) via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information.

cpe:/a:redhat:directory_server:7.1 cpe:/o:red_hat:directory_server:8:el4 cpe:/o:red_hat:directory_server:8:el5 cpe:/o:redhat:fedora_directory_server

CVE-2008-0892

2008-04-16T14:05:00.000-04:00

2018-10-30T12:26:21.217-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP HPSBUX02324 REDHAT RHSA-2008:0199 REDHAT RHSA-2008:0201 BID 28802 SECTRACK 1019856 VUPEN ADV-2008-1449 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=437301 XF rhds-replmonitor-command-execution(41840) FEDORA FEDORA-2008-3214 FEDORA FEDORA-2008-3220 The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands.

cpe:/a:redhat:directory_server:8.0:el4 cpe:/a:redhat:directory_server:8.0:el5

CVE-2008-0893

2008-04-16T14:05:00.000-04:00

2017-08-07T21:29:45.900-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov REDHAT RHSA-2008:0201 BID 28802 SECTRACK 1019857 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=437320 XF rhds-cgiscripts-security-bypass(41843) FEDORA FEDORA-2008-3214 FEDORA FEDORA-2008-3220 Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scripts, which allows remote attackers to perform administrative actions.

cpe:/a:apple:safari

CVE-2008-0894

2008-02-21T16:44:00.000-05:00

2018-10-15T18:03:26.307-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SREASON 3685 BUGTRAQ 20080216 [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service BID 27947 SECTRACK 1019487 MISC https://bugzilla.mozilla.org/show_bug.cgi?id=408076 Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service (crash) via a crafted (1) bitmap (BMP) or (2) GIF file, a related issue to CVE-2008-0420.

cpe:/a:bea:weblogic_server:6.1 cpe:/a:bea:weblogic_server:6.1:sp1 cpe:/a:bea:weblogic_server:6.1:sp2 cpe:/a:bea:weblogic_server:6.1:sp3 cpe:/a:bea:weblogic_server:6.1:sp4 cpe:/a:bea:weblogic_server:6.1:sp5 cpe:/a:bea:weblogic_server:6.1:sp6 cpe:/a:bea:weblogic_server:6.1:sp7 cpe:/a:bea:weblogic_server:7.0 cpe:/a:bea:weblogic_server:7.0:sp1 cpe:/a:bea:weblogic_server:7.0:sp2 cpe:/a:bea:weblogic_server:7.0:sp3 cpe:/a:bea:weblogic_server:7.0:sp4 cpe:/a:bea:weblogic_server:7.0:sp5 cpe:/a:bea:weblogic_server:7.0:sp6 cpe:/a:bea:weblogic_server:7.0:sp7 cpe:/a:bea:weblogic_server:8.1 cpe:/a:bea:weblogic_server:8.1:sp1 cpe:/a:bea:weblogic_server:8.1:sp2 cpe:/a:bea:weblogic_server:8.1:sp3 cpe:/a:bea:weblogic_server:8.1:sp4 cpe:/a:bea:weblogic_server:8.1:sp5 cpe:/a:bea:weblogic_server:8.1:sp6 cpe:/a:bea:weblogic_server:9.0 cpe:/a:bea:weblogic_server:9.1 cpe:/a:bea:weblogic_server:9.2 cpe:/a:bea:weblogic_server:10.0

CVE-2008-0895

2008-02-22T16:44:00.000-05:00

2011-03-07T22:05:37.703-05:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BEA BEA08-191.00 SECTRACK 1019443 VUPEN ADV-2008-0612 BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via crafted request headers.

cpe:/a:bea_systems:weblogic_portal:9.2:mp1 cpe:/a:bea_systems:weblogic_portal:10.0

CVE-2008-0896

2008-02-22T16:44:00.000-05:00

2011-03-07T22:05:37.783-05:00

4.9

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov BEA BEA08-192.00 SECTRACK 1019453 VUPEN ADV-2008-0613 BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows attackers to bypass intended access restrictions.

cpe:/a:bea:weblogic_server:9.0 cpe:/a:bea:weblogic_server:9.1 cpe:/a:bea:weblogic_server:9.2 cpe:/a:bea:weblogic_server:9.2:mp1 cpe:/a:bea:weblogic_server:10.0

CVE-2008-0897

2008-02-22T16:44:00.000-05:00

2011-03-07T22:05:37.877-05:00

7.9

NETWORK

MEDIUM

SINGLE_INSTANCE

COMPLETE

NONE

http://nvd.nist.gov BEA BEA08-193.00 SECTRACK 1019444 VUPEN ADV-2008-0612 Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended access restrictions and receive messages from a standalone JMS Topic or secured Distributed Topic member destination, related to durable subscriptions.

cpe:/a:bea:weblogic_server:9.0 cpe:/a:bea:weblogic_server:9.0:ga cpe:/a:bea:weblogic_server:9.0:sp1 cpe:/a:bea:weblogic_server:9.0:sp2 cpe:/a:bea:weblogic_server:9.0:sp3 cpe:/a:bea:weblogic_server:9.0:sp4 cpe:/a:bea:weblogic_server:9.0:sp5 cpe:/a:bea:weblogic_server:9.1 cpe:/a:bea:weblogic_server:9.1:ga cpe:/a:bea:weblogic_server:9.2 cpe:/a:bea:weblogic_server:9.2:mp1 cpe:/a:bea:weblogic_server:9.2:mp2 cpe:/a:bea:weblogic_server:10.0

CVE-2008-0898

2008-02-22T16:44:00.000-05:00

2011-03-07T22:05:37.970-05:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BEA BEA08-194.00 SECTRACK 1019447 VUPEN ADV-2008-0612 The distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain configurations, does not properly handle when a client cannot send a message to a member of a distributed queue, which allows remote authenticated users to bypass intended access restrictions for protected distributed queues.

cpe:/a:bea:weblogic_server:9.0 cpe:/a:bea:weblogic_server:9.1 cpe:/a:bea:weblogic_server:9.2 cpe:/a:bea:weblogic_server:9.2:mp1 cpe:/a:bea:weblogic_server:10.0

CVE-2008-0899

2008-02-22T16:44:00.000-05:00

2011-03-07T22:05:38.047-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BEA BEA08-195.00 SECTRACK 1019448 VUPEN ADV-2008-0612 Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page.

cpe:/a:bea:weblogic_server:8.1:sp4 cpe:/a:bea:weblogic_server:8.1:sp4:express cpe:/a:bea:weblogic_server:8.1:sp5 cpe:/a:bea:weblogic_server:8.1:sp5:express cpe:/a:bea:weblogic_server:8.1:sp6 cpe:/a:bea:weblogic_server:8.1:sp6:express cpe:/a:bea:weblogic_server:9.2 cpe:/a:bea:weblogic_server:9.2:mp1 cpe:/a:bea:weblogic_server:10.0 cpe:/a:bea_systems:weblogic_express:9.2:mp1 cpe:/a:bea_systems:weblogic_express:10.0

CVE-2008-0900

2008-02-22T16:44:00.000-05:00

2011-03-07T22:05:38.143-05:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BEA BEA08-196.00 SECTRACK 1019439 VUPEN ADV-2008-0612 Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors.

cpe:/a:bea:weblogic_server:7.0 cpe:/a:bea:weblogic_server:7.0:sp1 cpe:/a:bea:weblogic_server:7.0:sp2 cpe:/a:bea:weblogic_server:7.0:sp3 cpe:/a:bea:weblogic_server:7.0:sp4 cpe:/a:bea:weblogic_server:7.0:sp5 cpe:/a:bea:weblogic_server:7.0:sp6 cpe:/a:bea:weblogic_server:7.0:sp7 cpe:/a:bea:weblogic_server:8.1 cpe:/a:bea:weblogic_server:8.1:sp1 cpe:/a:bea:weblogic_server:8.1:sp2 cpe:/a:bea:weblogic_server:8.1:sp3 cpe:/a:bea:weblogic_server:8.1:sp4 cpe:/a:bea:weblogic_server:8.1:sp5 cpe:/a:bea:weblogic_server:8.1:sp6 cpe:/a:bea:weblogic_server:9.0 cpe:/a:bea:weblogic_server:9.1 cpe:/a:bea:weblogic_server:9.2 cpe:/a:bea:weblogic_server:9.2:mp1 cpe:/a:bea:weblogic_server:9.2:mp2 cpe:/a:bea:weblogic_server:10.0 cpe:/a:bea_systems:weblogic_server:10.0_mp1

CVE-2008-0901

2008-02-22T16:44:00.000-05:00

2018-10-15T18:03:26.683-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

NONE

http://nvd.nist.gov BEA BEA08-197.00 MISC http://www.s21sec.com/avisos/s21sec-040-en.txt BUGTRAQ 20080225 S21SEC-040-en: Infinite invalid authentication attempts possible in BEA WebLogic Server SECTRACK 1019449 VUPEN ADV-2008-0612 BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not.

cpe:/a:bea:weblogic_server:6.1 cpe:/a:bea:weblogic_server:6.1:sp1 cpe:/a:bea:weblogic_server:6.1:sp2 cpe:/a:bea:weblogic_server:6.1:sp3 cpe:/a:bea:weblogic_server:6.1:sp4 cpe:/a:bea:weblogic_server:6.1:sp5 cpe:/a:bea:weblogic_server:6.1:sp6 cpe:/a:bea:weblogic_server:6.1:sp7 cpe:/a:bea:weblogic_server:7.0 cpe:/a:bea:weblogic_server:7.0:sp1 cpe:/a:bea:weblogic_server:7.0:sp2 cpe:/a:bea:weblogic_server:7.0:sp3 cpe:/a:bea:weblogic_server:7.0:sp4 cpe:/a:bea:weblogic_server:7.0:sp5 cpe:/a:bea:weblogic_server:7.0:sp6 cpe:/a:bea:weblogic_server:7.0:sp7 cpe:/a:bea:weblogic_server:8.1 cpe:/a:bea:weblogic_server:8.1:sp1 cpe:/a:bea:weblogic_server:8.1:sp2 cpe:/a:bea:weblogic_server:8.1:sp3 cpe:/a:bea:weblogic_server:8.1:sp4 cpe:/a:bea:weblogic_server:8.1:sp5 cpe:/a:bea:weblogic_server:8.1:sp6 cpe:/a:bea:weblogic_server:9.0:ga cpe:/a:bea:weblogic_server:9.1:ga cpe:/a:bea:weblogic_server:10.0 cpe:/a:bea_systems:weblogic_server:10.0_mp1

CVE-2008-0902

2008-02-22T16:44:00.000-05:00

2011-03-07T22:05:38.330-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BEA BEA08-80.04 VUPEN ADV-2008-0612 Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via unspecified samples. NOTE: this might be the same issue as CVE-2007-2694.

cpe:/a:bea_systems:weblogic_express:10.0:mp2 cpe:/a:bea_systems:weblogic_server:10.0:mp2

CVE-2008-0903

2008-02-22T16:44:00.000-05:00

2011-03-07T22:05:38.423-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BEA BEA08-199.00 SECTRACK 1019450 VUPEN ADV-2008-0608 Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service (web server crash) via a crafted URL.

cpe:/a:bea_systems:aqualogic_interaction:4.2 cpe:/a:bea_systems:aqualogic_interaction:4.2_mp1 cpe:/a:bea_systems:plumtree_collaboration:4.1 cpe:/a:bea_systems:plumtree_collaboration:4.1_sp1 cpe:/a:bea_systems:plumtree_collaboration:4.1_sp2

CVE-2008-0904

2008-02-22T16:44:00.000-05:00

2011-03-07T22:05:38.533-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov BEA BEA08-200.00 SECTRACK 1019437 VUPEN ADV-2008-0607 Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary files via a crafted URL.

cpe:/a:meo:globsy:1.0

CVE-2008-0905

2008-02-22T16:44:00.000-05:00

2017-09-28T21:30:29.737-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 27910 EXPLOIT-DB 5162 Directory traversal vulnerability in globsy_edit.php in Globsy 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

cpe:/a:php-nuke:php-nuke_module_docum

CVE-2008-0906

2008-02-22T16:44:00.000-05:00

2017-09-28T21:30:29.800-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27912 XF docum-modules-sql-injection(40720) EXPLOIT-DB 5161 SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle operation.

cpe:/a:php-nuke:inhalt_module

CVE-2008-0907

2008-02-22T16:44:00.000-05:00

2017-09-28T21:30:29.847-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27886 EXPLOIT-DB 5163 SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter.

cpe:/a:schoolwires:academic_portal

CVE-2008-0908

2008-02-22T16:44:00.000-05:00

2017-08-07T21:29:46.027-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27903 XF schoolwires-browse-sql-injection(40687) SQL injection vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to execute arbitrary SQL commands via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:schoolwires:academic_portal

CVE-2008-0909

2008-02-22T16:44:00.000-05:00

2008-09-05T17:36:18.740-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-25T10:47:00.000-05:00

BID 27903 Cross-site scripting (XSS) vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject arbitrary web script or HTML via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVE-2008-0910

2008-02-22T17:44:00.000-05:00

2017-08-07T21:29:46.087-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://www.f-secure.com/security/fsc-2008-1.shtml SECTRACK 1019405 SECTRACK 1019412 SECTRACK 1019413 VUPEN ADV-2008-0544 XF fsecure-cab-rar-security-bypass(40480) Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted RAR archive. NOTE: this might be related to CVE-2008-0792.

cpe:/a:iscripts:multicart:2.0

CVE-2008-0911

2008-02-22T18:44:00.000-05:00

2017-09-28T21:30:29.910-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27916 EXPLOIT-DB 5166 SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL commands via the productid parameter.

cpe:/a:sybase:mobilink:10.0.1.3629 cpe:/a:sybase:sql_anywhere:10.0.1.3415::developer_edition

CVE-2008-0912

2008-02-22T18:44:00.000-05:00

2018-10-15T18:03:27.153-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/mobilinkhof-adv.txt SREASON 3691 BUGTRAQ 20080220 Heap overflow in Sybase MobiLink 10.0.1.3629 BUGTRAQ 20080328 Re: Heap overflow in Sybase MobiLink 10.0.1.3629 BID 27914 SECTRACK 1019469 VUPEN ADV-2008-0626 Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10.0.1.3415 and probably other products, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a long (1) username, (2) version, or (3) remote ID. NOTE: some of these details are obtained from third party information.

cpe:/a:invision_power_services:invision_power_board:2.3.4

CVE-2008-0913

2008-02-22T18:44:00.000-05:00

2008-09-05T17:36:19.397-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-25T10:57:00.000-05:00

CONFIRM http://forums.invisionpower.com/index.php?showtopic=269961 Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via crafted BBCodes in an unspecified context.

cpe:/a:ipdiva:ipdiva:2.2 cpe:/a:ipdiva:ipdiva:2.3

CVE-2008-0914

2008-02-22T18:44:00.000-05:00

2018-10-15T18:03:27.823-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080214 DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks SREASON 3690 BUGTRAQ 20080214 DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks BUGTRAQ 20080214 Re: DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks BID 27800 XF ipdivaserver-unspecified-xss(40545) Multiple cross-site scripting (XSS) vulnerabilities in the Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:ipdiva:ipdiva:2.2.8 cpe:/a:ipdiva:ipdiva:2.3.2

CVE-2008-0915

2008-02-22T18:44:00.000-05:00

2018-10-15T18:03:28.480-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080214 DOINGSOFT-2008-02-11 - IPDiva VPN SSL Brute force attack SREASON 3692 BUGTRAQ 20080214 DOINGSOFT-2008-02-11 - IPDiva VPN SSL Brute force attack BID 27800 The Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 stores the number of remaining allowed login attempts in a cookie, which makes it easier for remote attackers to conduct brute force attacks by manipulating this cookie's value.

cpe:/a:highwood_design:hwdvideoshare

CVE-2008-0916

2008-02-22T18:44:00.000-05:00

2017-10-18T21:30:12.473-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27907 XF hwdvideoshare-index-sql-injection(40711) EXPLOIT-DB 5160 SQL injection vulnerability in the Highwood Design hwdVideoShare (com_hwdvideoshare) 1.1.3 Alpha component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a viewcategory action to index.php.

cpe:/a:tor_world:com_vote:1.2 cpe:/a:tor_world:i-navigator:4.0 cpe:/a:tor_world:interactive_bbs:1.3 cpe:/a:tor_world:mobile_frontier:2.1 cpe:/a:tor_world:quotes_of_the_day:1.5 cpe:/a:tor_world:simple_bbs:1.3 cpe:/a:tor_world:simple_vote:1.1 cpe:/a:tor_world:tor_board:1.1 cpe:/a:tor_world:tor_news:1.21 cpe:/a:tor_world:tor_search:1.1

CVE-2008-0917

2008-02-22T18:44:00.000-05:00

2008-09-05T17:36:20.023-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-25T11:14:00.000-05:00

CONFIRM http://download.torworld.com/bug/20080221.html JVN JVN#54593414 BID 27919 Cross-site scripting (XSS) vulnerability in Tor World Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1 and earlier, Diary.cgi (aka Quotes of the Day) 1.5 and earlier, Tor News 1.21 and earlier, Simple BBS 1.3 and earlier, Interactive BBS 1.3 and earlier, Tor Board 1.1 and earlier, Simple Vote 1.1 and earlier, and Com Vote 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:astats:astatspro:1.0.1 cpe:/a:joomla:com_astatspro:1.0.1

CVE-2008-0918

2008-02-22T18:44:00.000-05:00

2017-08-07T21:29:46.260-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

XF astatspro-countdlorlink-sql-injection(40852) SQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO (com_astatspro) 1.0.1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to getfile.php, a different vector than CVE-2008-0839. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:open_source_security_information_management:os-sim:0.1alpha cpe:/a:open_source_security_information_management:os-sim:0.2alpha cpe:/a:open_source_security_information_management:os-sim:0.3.1alpha cpe:/a:open_source_security_information_management:os-sim:0.3alpha cpe:/a:open_source_security_information_management:os-sim:0.5.1 cpe:/a:open_source_security_information_management:os-sim:0.5.2 cpe:/a:open_source_security_information_management:os-sim:0.6 cpe:/a:open_source_security_information_management:os-sim:0.6.2 cpe:/a:open_source_security_information_management:os-sim:0.6.3 cpe:/a:open_source_security_information_management:os-sim:0.7 cpe:/a:open_source_security_information_management:os-sim:0.7.1 cpe:/a:open_source_security_information_management:os-sim:0.8 cpe:/a:open_source_security_information_management:os-sim:0.9 cpe:/a:open_source_security_information_management:os-sim:0.9.1 cpe:/a:open_source_security_information_management:os-sim:0.9.2 cpe:/a:open_source_security_information_management:os-sim:0.9.3 cpe:/a:open_source_security_information_management:os-sim:0.9.4 cpe:/a:open_source_security_information_management:os-sim:0.9.5 cpe:/a:open_source_security_information_management:os-sim:0.9.6 cpe:/a:open_source_security_information_management:os-sim:0.9.7 cpe:/a:open_source_security_information_management:os-sim:0.9.8 cpe:/a:open_source_security_information_management:os-sim:0.9.9_rc1 cpe:/a:open_source_security_information_management:os-sim:0.9.9_rc2 cpe:/a:open_source_security_information_management:os-sim:0.9.9_rc3 cpe:/a:open_source_security_information_management:os-sim:0.9.9_rc4

CVE-2008-0919

2008-02-22T18:44:00.000-05:00

2018-10-15T18:03:28.870-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3689 BUGTRAQ 20080221 SQL-injection, XSS in OSSIM (Open Source Security Information Management) BUGTRAQ 20080222 Re: SQL-injection, XSS in OSSIM (Open Source Security Information Management) BUGTRAQ 20080225 Re: Re: SQL-injection, XSS in OSSIM (Open Source Security Information Management) BID 27929 EXPLOIT-DB 5171 Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter.

cpe:/a:open_source_security_information_management:os-sim:0.9.9:rc5

CVE-2008-0920

2008-02-22T18:44:00.000-05:00

2018-10-15T18:03:29.653-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3689 BUGTRAQ 20080221 SQL-injection, XSS in OSSIM (Open Source Security Information Management) BUGTRAQ 20080222 Re: SQL-injection, XSS in OSSIM (Open Source Security Information Management) BID 27927 EXPLOIT-DB 5171 SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression.

cpe:/a:becontent:becontent:0.3.1

CVE-2008-0921

2008-02-22T18:44:00.000-05:00

2017-09-28T21:30:30.113-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27928 EXPLOIT-DB 5170 SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:php-nuke:manuales:0.1

CVE-2008-0922

2008-02-22T18:44:00.000-05:00

2017-09-28T21:30:30.160-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27933 EXPLOIT-DB 5168 SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php.

cpe:/a:vmware:ace:1.0 cpe:/a:vmware:ace:1.0.2 cpe:/a:vmware:ace:2.0 cpe:/a:vmware:ace:2.0.1 cpe:/a:vmware:ace:2.0.2 cpe:/a:vmware:player:1.0.4 cpe:/a:vmware:vmware_player:1.0.1_build_19317 cpe:/a:vmware:vmware_player:1.0.2 cpe:/a:vmware:vmware_player:1.0.3 cpe:/a:vmware:vmware_workstation:6.0.1 cpe:/a:vmware:vmware_workstation:6.0.2 cpe:/a:vmware:workstation:4.5.2 cpe:/a:vmware:workstation:5.5.3_build_34685 cpe:/a:vmware:workstation:5.5.4 cpe:/a:vmware:workstation:6.0

CVE-2008-0923

2008-02-25T19:44:00.000-05:00

2018-10-15T18:03:30.200-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004034 FULLDISC 20080225 CORE-2007-0930 Path Traversal vulnerability in VMware's shared folders implementation MLIST [security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues SREASON 3700 MISC http://www.coresecurity.com/?action=item&id=2129 BUGTRAQ 20080225 CORE-2007-0930 Path Traversal vulnerability in VMware's shared folders implementation BUGTRAQ 20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues BID 27944 BID 28276 SECTRACK 1019493 CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0005.html CONFIRM http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html CONFIRM http://www.vmware.com/support/player/doc/releasenotes_player.html CONFIRM http://www.vmware.com/support/player2/doc/releasenotes_player2.html CONFIRM http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html CONFIRM http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html VUPEN ADV-2008-0679 VUPEN ADV-2008-0905 XF vmware-sharedfolders-directory-traversal(40837) Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write arbitrary files on the host OS via a multibyte string that produces a wide character string containing .. (dot dot) sequences, which bypasses the protection mechanism, as demonstrated using a "%c0%2e%c0%2e" string.

cpe:/a:novell:edirectory:8.7 cpe:/a:novell:edirectory:8.7.1 cpe:/a:novell:edirectory:8.7.1:sp1 cpe:/a:novell:edirectory:8.7.3 cpe:/a:novell:edirectory:8.7.3:sp1:windows cpe:/a:novell:edirectory:8.7.3:sp2:windows cpe:/a:novell:edirectory:8.7.3:sp3:windows cpe:/a:novell:edirectory:8.7.3:sp4:windows cpe:/a:novell:edirectory:8.7.3:sp5:windows cpe:/a:novell:edirectory:8.7.3:sp6:windows cpe:/a:novell:edirectory:8.7.3:sp7:windows cpe:/a:novell:edirectory:8.7.3:sp8:windows cpe:/a:novell:edirectory:8.7.3:sp9:windows cpe:/a:novell:edirectory:8.7.3.8 cpe:/a:novell:edirectory:8.8 cpe:/a:novell:edirectory:8.8:sp2:windows cpe:/a:novell:edirectory:8.8:sp8 cpe:/a:novell:edirectory:8.8.1

CVE-2008-0924

2008-03-28T14:44:00.000-04:00

2018-11-01T11:02:17.930-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2018-10-26T10:52:02.140-04:00

ALLOWS_USER_ACCESS

BUGTRAQ 20080326 ZDI-08-013: Novell eDirectory for Linux Stack Overflow BID 28434 SECTRACK 1019692 VUPEN ADV-2008-0987 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-013/ CONFIRM https://secure-support.novell.com/KanisaPlatform/Publishing/411/3382120_f.SAL_Public.html Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earlier in the 8.8.x series, allows remote attackers to cause a denial of service (daemon crash or CPU consumption) or execute arbitrary code via a long delRequest LDAP Extended Request message, probably involving a long Distinguished Name (DN) field.

cpe:/a:novell:edirectory:8.7.3.9::linux cpe:/a:novell:edirectory:8.7.3.9::solaris cpe:/a:novell:edirectory:8.7.3.9::windows_2000 cpe:/a:novell:edirectory:8.7.3.9::windows_2003 cpe:/a:novell:edirectory:8.8::linux cpe:/a:novell:edirectory:8.8::solaris cpe:/a:novell:edirectory:8.8::windows_2000 cpe:/a:novell:edirectory:8.8::windows_2003 cpe:/a:novell:edirectory:8.8.1::linux cpe:/a:novell:edirectory:8.8.1::solaris cpe:/a:novell:edirectory:8.8.1::windows_2000 cpe:/a:novell:edirectory:8.8.1::windows_2003 cpe:/a:novell:edirectory:8.8.2::linux cpe:/a:novell:edirectory:8.8.2::solaris cpe:/a:novell:edirectory:8.8.2::windows_2000 cpe:/a:novell:edirectory:8.8.2::windows_2003

CVE-2008-0925

2008-06-18T15:41:00.000-04:00

2017-08-07T21:29:46.383-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1020321 CONFIRM http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html CONFIRM http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html CONFIRM http://www.novell.com/support/viewContent.do?externalId=3460217&sliceId=1 BID 29782 VUPEN ADV-2008-1863 XF novell-edirectory-imonitor-xss(43151) Cross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within "error messages of the HTTP stack."

cpe:/a:novell:edirectory:8.5 cpe:/a:novell:edirectory:8.5.12a cpe:/a:novell:edirectory:8.5.27 cpe:/a:novell:edirectory:8.6.2 cpe:/a:novell:edirectory:8.7 cpe:/a:novell:edirectory:8.7.1 cpe:/a:novell:edirectory:8.7.1:sp1 cpe:/a:novell:edirectory:8.7.3 cpe:/a:novell:edirectory:8.7.3.8 cpe:/a:novell:edirectory:8.7.3.8_presp9 cpe:/a:novell:edirectory:8.7.3.9 cpe:/a:novell:edirectory:8.7.3.10 cpe:/a:novell:edirectory:8.8

CVE-2008-0926

2008-03-28T14:44:00.000-04:00

2018-10-15T18:03:32.747-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20080505 Novell eDirectory unauthenticated access to SOAP interface BID 28441 SECTRACK 1019691 VUPEN ADV-2008-0988 XF novell-edirectory-embox-unspecified(41426) CONFIRM https://secure-support.novell.com/KanisaPlatform/Publishing/876/3866911_f.SAL_Public.html The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daemon shutdown) or read arbitrary files. NOTE: it was later reported that 8.7.3.10 (aka 8.7.3 SP10) is also affected.

cpe:/o:microsoft:windows-nt:2000 cpe:/o:microsoft:windows-nt:2003

CVE-2008-0927

2008-04-14T12:05:00.000-04:00

2018-10-31T15:16:51.817-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2018-10-26T10:58:01.143-04:00

CONFIRM http://www.novell.com/support/viewContent.do?externalId=3829452&sliceId=1 BUGTRAQ 20080505 Novell eDirectory DoS via HTTP headers BID 28757 SECTRACK 1019836 VUPEN ADV-2008-1217 XF novell-edirectory-dhost-dos(41787) EXPLOIT-DB 5547 dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header with multiple comma-separated values. NOTE: this might be similar to CVE-2008-1777.

cpe:/a:qemu:qemu:0.1 cpe:/a:qemu:qemu:0.1.1 cpe:/a:qemu:qemu:0.1.2 cpe:/a:qemu:qemu:0.1.3 cpe:/a:qemu:qemu:0.1.4 cpe:/a:qemu:qemu:0.1.5 cpe:/a:qemu:qemu:0.1.6 cpe:/a:qemu:qemu:0.2 cpe:/a:qemu:qemu:0.3 cpe:/a:qemu:qemu:0.4 cpe:/a:qemu:qemu:0.4.1 cpe:/a:qemu:qemu:0.4.2 cpe:/a:qemu:qemu:0.4.3 cpe:/a:qemu:qemu:0.5.0 cpe:/a:qemu:qemu:0.5.1 cpe:/a:qemu:qemu:0.5.2 cpe:/a:qemu:qemu:0.5.3 cpe:/a:qemu:qemu:0.5.4 cpe:/a:qemu:qemu:0.5.5 cpe:/a:qemu:qemu:0.6.0 cpe:/a:qemu:qemu:0.6.1 cpe:/a:qemu:qemu:0.7.0 cpe:/a:qemu:qemu:0.7.1 cpe:/a:qemu:qemu:0.7.2 cpe:/a:qemu:qemu:0.8.0 cpe:/a:qemu:qemu:0.8.1 cpe:/a:qemu:qemu:0.8.2 cpe:/a:qemu:qemu:0.9.0 cpe:/a:qemu:qemu:0.9.1

CVE-2008-0928

2008-03-03T17:44:00.000-05:00

2017-09-28T21:30:30.317-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

NONE

http://nvd.nist.gov SUSE SUSE-SR:2009:008 MLIST [debian-security] 20080219 qemu unchecked block read/write vulnerability DEBIAN DSA-1799 MANDRIVA MDVSA-2008:162 MANDRIVA MDVSA-2009:016 FEDORA FEDORA-2008-1973 FEDORA FEDORA-2008-1993 REDHAT RHSA-2008:0194 BID 28001 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=433560 FEDORA FEDORA-2008-1995 FEDORA FEDORA-2008-2001 FEDORA FEDORA-2008-2057 FEDORA FEDORA-2008-2083 Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.

CVE-2008-0929

2008-02-25T17:44:00.000-05:00

2008-09-10T21:06:33.960-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

cpe:/a:freshmeat:xwine:1.0.1

CVE-2008-0930

2008-03-03T19:44:00.000-05:00

2008-09-05T17:36:22.227-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2008-03-04T10:29:00.000-05:00

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=468050 DEBIAN DSA-1526 BID 28049 w_editeur.c in XWine 1.0.1 for Debian GNU/Linux allows local users to overwrite or print arbitrary files via a symlink attack on the temporaire temporary file. NOTE: some of these details are obtained from third party information.

cpe:/a:xwine:xwine:1.0.1

CVE-2008-0931

2008-03-03T19:44:00.000-05:00

2008-09-05T17:36:22.383-04:00

6.3

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2008-03-04T10:37:00.000-05:00

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=468050 DEBIAN DSA-1526 BID 28369 w_export.c in XWine 1.0.1 on Debian GNU/Linux sets insecure permissions (0666) for /etc/wine/config, which might allow local users to execute arbitrary commands or cause a denial of service by modifying the file.

cpe:/a:the_sword_project:diatheke_front_end:1.5.9 cpe:/a:the_sword_project:sword:1.5.9

CVE-2008-0932

2008-02-25T16:44:00.000-05:00

2011-03-07T22:05:41.080-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466449 GENTOO GLSA-200803-06 DEBIAN DSA-1508 BID 27874 BID 27987 VUPEN ADV-2008-0670 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=433723 FEDORA FEDORA-2008-1922 FEDORA FEDORA-2008-1951 diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter.

cpe:/o:sun:solaris:10.0::sparc cpe:/o:sun:solaris:10.0::x86 cpe:/o:sun:solaris:10.0::x86_sparc

CVE-2008-0933

2008-02-25T13:44:00.000-05:00

2017-09-28T21:30:30.380-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUNALERT 231466 BID 27941 SECTRACK 1019490 VUPEN ADV-2008-0642 Multiple race conditions in the CPU Performance Counters (cpc) subsystem in the kernel in Sun Solaris 10 allow local users to cause a denial of service (panic) via unspecified vectors related to kcpc_unbind and kcpc_restore.

cpe:/a:nukec:nukec:2.1 cpe:/a:php-nuke:nukec_module:2.1

CVE-2008-0934

2008-02-25T13:44:00.000-05:00

2017-09-28T21:30:30.440-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27937 EXPLOIT-DB 5172 SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_catg parameter in a ViewCatg action.

cpe:/a:novell:iprint:4.32 cpe:/a:novell:iprint_client:4.26 cpe:/a:novell:iprint_client:4.32

CVE-2008-0935

2008-02-25T13:44:00.000-05:00

2011-03-07T22:05:41.330-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://download.novell.com/Download?buildid=prBBH4JpImA~ BID 27939 SECTRACK 1019489 VUPEN ADV-2008-0639 Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4.34 allows remote attackers to execute arbitrary code via a long argument to the ExecuteRequest method.

cpe:/a:xoops:prayer_list_module:1.04

CVE-2008-0936

2008-02-25T13:44:00.000-05:00

2008-09-05T17:36:23.257-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2008-02-26T09:40:00.000-05:00

ALLOWS_OTHER_ACCESS

BUGTRAQ 20080221 XOOPS Module prayerlist SQL Injection(cid) BID 27934 SQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action.

cpe:/a:tinyevent:tinyevent:1.01 cpe:/a:xoops:tiny_event_module:1.01

CVE-2008-0937

2008-02-25T13:44:00.000-05:00

2008-09-05T17:36:23.413-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2008-02-26T09:52:00.000-05:00

ALLOWS_OTHER_ACCESS

BUGTRAQ 20080221 XOOPS Module tinyevent-print SQL Injection(id) BID 27931 SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811.

cpe:/o:sun:solaris:10::sparc cpe:/o:sun:solaris:10::x86

CVE-2008-0938

2008-02-25T13:44:00.000-05:00

2017-09-28T21:30:30.520-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

NONE

http://nvd.nist.gov SUNALERT 231803 BID 27942 SECTRACK 1019483 VUPEN ADV-2008-0640 Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local users with PRIV_DTRACE_USER or PRIV_DTRACE_PROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126.

cpe:/a:wordpress:photo_album_plugin:1.1

CVE-2008-0939

2008-02-25T15:44:00.000-05:00

2017-09-28T21:30:30.583-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://me.mywebsight.ws/web/wppa/ SREASON 3693 MISC http://weblogtoolscollection.com/archives/2008/02/21/photo-album-plugin-vulnerabilities/ BUGTRAQ 20080216 WordPress album PHOTO SQL Injection BID 27832 VUPEN ADV-2008-0586 XF photoalbum-index-sql-injection(40599) EXPLOIT-DB 5135 Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via (1) the photo parameter to index.php, used by the wppa_photo_name function; or (2) the album parameter to index.php, used by the wppa_album_name function. NOTE: some of these details are obtained from third party information.

cpe:/a:webgui:webgui:7.4 cpe:/a:webgui:webgui:7.4.2 cpe:/a:webgui:webgui:7.4.3 cpe:/a:webgui:webgui:7.4.4 cpe:/a:webgui:webgui:7.4.5 cpe:/a:webgui:webgui:7.4.6 cpe:/a:webgui:webgui:7.4.7 cpe:/a:webgui:webgui:7.4.8 cpe:/a:webgui:webgui:7.4.9 cpe:/a:webgui:webgui:7.4.10 cpe:/a:webgui:webgui:7.4.11 cpe:/a:webgui:webgui:7.4.12 cpe:/a:webgui:webgui:7.4.13 cpe:/a:webgui:webgui:7.4.14 cpe:/a:webgui:webgui:7.4.15 cpe:/a:webgui:webgui:7.4.16 cpe:/a:webgui:webgui:7.4.17 cpe:/a:webgui:webgui:7.4.18 cpe:/a:webgui:webgui:7.4.23

CVE-2008-0940

2008-02-25T15:44:00.000-05:00

2008-09-05T17:36:23.883-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-26T10:07:00.000-05:00

CONFIRM http://www.plainblack.com/getwebgui/advisories/webgui-7_4_24-stable-released BID 27869 Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.4.24 allows remote attackers to inject arbitrary web script or HTML when creating a username, a different vulnerability than CVE-2007-0407.

cpe:/a:aeries:aeries_student_information_system:3.7.2.2 cpe:/a:aeries:aeries_student_information_system:3.8.2.8

CVE-2008-0941

2008-02-25T16:44:00.000-05:00

2018-10-15T18:03:34.230-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3694 BUGTRAQ 20080221 aeries browser interface(ABI) 3.8.2.8 XSS BID 27924 XF abi-newevent-xss(40756) Cross-site scripting (XSS) vulnerability in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event.

cpe:/a:aeries:aeries_student_information_system:3.7.2.2 cpe:/a:aeries:aeries_student_information_system:3.8.2.8

CVE-2008-0942

2008-02-25T16:44:00.000-05:00

2018-10-15T18:03:34.683-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3695 BUGTRAQ 20080221 aeries browser interface(ABI) 3.8.2.8 Remote SQL Injection BID 27924 XF abi-gradebookstuscores-sql-injection(40847) SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote attackers to execute arbitrary SQL commands via the GrdBk parameter.

cpe:/a:aeries:aeries_student_information_system:3.7.2.2 cpe:/a:aeries:aeries_student_information_system:3.8.2.8

CVE-2008-0943

2008-02-25T16:44:00.000-05:00

2018-10-15T18:03:35.043-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3696 BUGTRAQ 20080221 aeries browser interface(ABI) 3.7.2.2 Remote SQL Injection BID 27924 XF abi-fcterm-sql-injection(40757) Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) FC parameter to Comments.asp, or the Term parameter to (2) Labels.asp or (3) ClassList.asp.

cpe:/a:ipswitch:instant_messaging:2.0.8.1

CVE-2008-0944

2008-02-25T16:44:00.000-05:00

2018-10-15T18:03:35.480-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/ipsimene-adv.txt SREASON 3697 BUGTRAQ 20080207 Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1 BID 27677 Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application crash) via a version field containing zero.

cpe:/a:ipswitch:imserver:2.0.8.1 cpe:/a:ipswitch:instant_messaging:2.0.8.1

CVE-2008-0945

2008-02-25T16:44:00.000-05:00

2018-10-15T18:03:35.857-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/ipsimene-adv.txt MISC http://aluigi.org/poc/ipsimene.zip SREASON 3697 BUGTRAQ 20080207 Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1 BID 27677 Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in an IP address field.

cpe:/a:ipswitch:imserver:2.0.8.1 cpe:/a:ipswitch:instant_messaging:2.0.8.1

CVE-2008-0946

2008-02-25T16:44:00.000-05:00

2018-10-15T18:03:36.307-04:00

4.9

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/ipsimene-adv.txt MISC http://aluigi.org/poc/ipsimene.zip SREASON 3697 BUGTRAQ 20080207 Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1 BID 27677 Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files via a .. (dot dot) in the recipient field.

cpe:/a:mit:kerberos:5-1.4 cpe:/a:mit:kerberos:5-1.4.1 cpe:/a:mit:kerberos:5-1.4.2 cpe:/a:mit:kerberos:5-1.4.3 cpe:/a:mit:kerberos:5-1.4.4 cpe:/a:mit:kerberos:5-1.5 cpe:/a:mit:kerberos:5-1.5.1 cpe:/a:mit:kerberos:5-1.5.2 cpe:/a:mit:kerberos:5-1.5.3 cpe:/a:mit:kerberos:5-1.6 cpe:/a:mit:kerberos:5-1.6.1 cpe:/a:mit:kerberos:5-1.6.2 cpe:/a:mit:kerberos_5:1.6.3

CVE-2008-0947

2008-03-18T20:44:00.000-04:00

2018-10-15T18:03:36.747-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SUSE SUSE-SA:2008:016 HP SSRT100495 GENTOO GLSA-200803-31 SREASON 3752 CONFIRM http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html CONFIRM http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html CONFIRM http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-002.txt CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0112 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112 DEBIAN DSA-1524 CERT-VN VU#374121 MANDRIVA MDVSA-2008:069 MANDRIVA MDVSA-2008:070 REDHAT RHSA-2008:0164 BUGTRAQ 20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc BUGTRAQ 20080318 MITKRB5-SA-2008-002: array overrun in RPC library used by kadmin (resend, corrected subject) BUGTRAQ 20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation BID 28302 SECTRACK 1019631 UBUNTU USN-587-1 CERT TA08-079B VUPEN ADV-2008-0922 VUPEN ADV-2008-1102 XF krb5-rpclibrary-bo(41273) FEDORA FEDORA-2008-2637 FEDORA FEDORA-2008-2647 Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.

cpe:/a:mit:kerberos:5-1.2.2

CVE-2008-0948

2008-03-18T20:44:00.000-04:00

2018-10-15T18:03:41.607-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SUSE SUSE-SA:2008:016 HP SSRT100495 SREASON 3752 CONFIRM http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html CONFIRM http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html CONFIRM http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-002.txt CERT-VN VU#374121 REDHAT RHSA-2008:0181 BUGTRAQ 20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc BUGTRAQ 20080318 MITKRB5-SA-2008-002: array overrun in RPC library used by kadmin (resend, corrected subject) BUGTRAQ 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues BID 28302 SECTRACK 1019631 CERT TA08-079B CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0009.html VUPEN ADV-2008-0922 VUPEN ADV-2008-1102 VUPEN ADV-2008-1744 XF krb5-rpclibrary-fdsetsize-bo(41274) Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the FD_SETSIZE macro, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering a large number of open file descriptors.

CVE-2008-0949

2008-03-17T20:44:00.000-04:00

2017-08-07T21:29:46.963-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://www.informixmag.com/content/view/11143/27/ MISC http://www.informixmag.com/content/view/11144/27/ BID 28198 VUPEN ADV-2008-0860 AIXAPAR IC55224 AIXAPAR IC55225 XF ibm-ids-unspecified-privilege-escalation(41370) Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 7.x through 11.x allows remote attackers to gain privileges via a malformed connection request packet.

cpe:/o:microsoft:windows_vista:::business cpe:/o:microsoft:windows_vista:::enterprise cpe:/o:microsoft:windows_vista:::home_basic cpe:/o:microsoft:windows_vista:::home_premium cpe:/o:microsoft:windows_vista:::ultimate

CVE-2008-0951

2008-03-24T18:44:00.000-04:00

2018-10-12T17:45:06.287-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT-VN VU#889747 BID 28360 SECTRACK 1020446 VUPEN ADV-2008-0954 MS MS08-038 XF vista-nodrivetypeautorun-weak-security(41349) Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a (1) CD-ROM device or (2) U3-enabled USB device containing a filesystem with an Autorun.inf file, and possibly other vectors related to (a) AutoRun and (b) AutoPlay actions.

cpe:/a:hp:instant_support:1.0.0.23

CVE-2008-0952

2008-06-04T16:32:00.000-04:00

2017-08-07T21:29:47.073-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MISC http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf BID 29526 BID 29535 SECTRACK 1020165 VUPEN ADV-2008-1740 HP HPSBMA02326 XF hp-instantsupport-append-file-overwrite(42834) The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953.

cpe:/a:hp:instant_support:1.0.0.23

CVE-2008-0953

2008-06-04T16:32:00.000-04:00

2017-08-07T21:29:47.120-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf BID 29526 BID 29533 SECTRACK 1020165 VUPEN ADV-2008-1740 HP SSRT071490 XF hp-instantsupport-startapp-code-execution(42851) The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary programs via a .exe filename in the argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953.

cpe:/a:creative:creative_software_autoupdate_engine

CVE-2008-0955

2008-05-29T12:32:00.000-04:00

2017-09-28T21:30:30.833-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT-VN VU#501843 BID 29391 VUPEN ADV-2008-1668 XF creativesoftware-autoupdate-cachefolder-bo(42673) EXPLOIT-DB 5681 Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value.

cpe:/a:backweb:backweb:8.1.1.86 cpe:/a:logitech:desktop_manager:2.55

CVE-2008-0956

2008-06-11T22:32:00.000-04:00

2018-10-12T17:45:06.943-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://backweb.com/news_events/press_releases/051608.php HP HPSBST02344 CERT-VN VU#216153 BID 29558 CERT TA08-162B VUPEN ADV-2008-1791 VUPEN ADV-2008-1792 MS MS08-032 XF backweb-activex-liteinstactivator-bo(42991) Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute arbitrary code via unspecified vectors.

cpe:/a:photostockplus:photostockplus_uploader_tool

CVE-2008-0957

2008-05-20T13:20:00.000-04:00

2017-08-07T21:29:47.290-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CERT-VN VU#406937 BID 29279 VUPEN ADV-2008-1571 XF photostockplus-uploader-bo(42534) Multiple stack-based buffer overflows in the PhotoStockPlus Uploader Tool ActiveX control (PSPUploader.ocx) allow remote attackers to execute arbitrary code via unspecified initialization parameters.

cpe:/a:nctsoft:nctaudioeditor_activex_control

CVE-2008-0958

2008-05-29T12:32:00.000-04:00

2017-08-07T21:29:47.353-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT-VN VU#656593 VUPEN ADV-2008-1669 XF nctaudioeditor-nctaudiograbber2-bo(42678) Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTAudioGrabber2.dll allow remote attackers to execute arbitrary code via unspecified vectors.

cpe:/a:alivemedia:alive_mp3_wav_converter:3.9.3.2 cpe:/a:online_media_technologies:nctaudioeditor_activex_control cpe:/a:online_media_technologies:nctaudiostudio_activex_control cpe:/a:orion_studios:cinematicmp3:1.4.0.0 cpe:/a:ussun:power_audio_cd_burner:1.02 cpe:/a:ussun:power_audio_cd_grabber:1.0

CVE-2008-0959

2008-05-29T12:32:00.000-04:00

2017-08-07T21:29:47.417-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CERT-VN VU#669265 VUPEN ADV-2008-1669 XF nctaudiostudio-nctaudioinformation2-bo(42680) Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4.0.0, (4) Alive MP3 WAV Converter 3.9.3.2, and possibly other products, allow remote attackers to execute arbitrary code via unspecified vectors.

cpe:/a:juniper:session_and_resource_control:1.0 cpe:/a:juniper:session_and_resource_control:2.0 cpe:/a:juniper:src_pe:1.0 cpe:/a:juniper:src_pe:2.0

CVE-2008-0960

2008-06-10T14:32:00.000-04:00

2018-10-30T12:25:36.577-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2008-06-30 MLIST [productinfo] 20080611 Ingate Firewall and SIParator affected by SNMPv3 vulnerability SUSE SUSE-SA:2008:039 HP SSRT080082 REDHAT RHSA-2008:0528 GENTOO GLSA-200808-02 SREASON 3933 CONFIRM http://sourceforge.net/forum/forum.php?forum_id=833770 CONFIRM http://sourceforge.net/tracker/index.php?func=detail&aid=1989089&group_id=12694&atid=456380 SUNALERT 238865 CONFIRM http://support.apple.com/kb/HT2163 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-282.htm CISCO 20080610 SNMP Version 3 Authentication Vulnerabilities DEBIAN DSA-1663 CERT-VN VU#878044 CONFIRM http://www.kb.cert.org/vuls/id/CTAR-7FBS8Q CONFIRM http://www.kb.cert.org/vuls/id/MIMG-7ETS5Z CONFIRM http://www.kb.cert.org/vuls/id/MIMG-7ETS87 MANDRIVA MDVSA-2008:118 MISC http://www.ocert.org/advisories/ocert-2008-006.html MLIST [oss-security] 20080609 [oCERT-2008-006] multiple SNMP implementations HMAC authentication spoofing REDHAT RHSA-2008:0529 BUGTRAQ 20080609 [oCERT-2008-006] multiple SNMP implementations HMAC authentication spoofing BUGTRAQ 20081031 VMSA-2008-0017 Updated ESX packages for libxml2, ucd-snmp, libtiff BID 29623 SECTRACK 1020218 UBUNTU USN-685-1 CERT TA08-162A CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0013.html MISC http://www.vmware.com/security/advisories/VMSA-2008-0017.html VUPEN ADV-2008-1787 VUPEN ADV-2008-1788 VUPEN ADV-2008-1797 VUPEN ADV-2008-1800 VUPEN ADV-2008-1801 VUPEN ADV-2008-1836 VUPEN ADV-2008-1981 VUPEN ADV-2008-2361 VUPEN ADV-2008-2971 VUPEN ADV-2009-1612 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=447974 EXPLOIT-DB 5790 FEDORA FEDORA-2008-5215 FEDORA FEDORA-2008-5224 FEDORA FEDORA-2008-5218 SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.

cpe:/a:emc:diskxtender:6.20.060

CVE-2008-0961

2008-04-14T12:05:00.000-04:00

2017-08-07T21:29:47.463-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20080410 EMC DiskXtender Authentication Bypass Vulnerability BID 28727 SECTRACK 1019827 VUPEN ADV-2008-1198 XF emc-diskxtender-unauthorized-access(41772) EMV DiskXtender 6.20.060 has a hard-coded login and password, which allows remote attackers to bypass authentication via the RPC interface.

cpe:/a:emc:diskxtender:6.20.060

CVE-2008-0962

2008-04-14T12:05:00.000-04:00

2017-08-07T21:29:47.527-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20080410 EMC DiskXtender File System Manager Stack Buffer Overflow Vulnerability BID 28728 SECTRACK 1019828 VUPEN ADV-2008-1198 XF emc-diskxtender-filesystemmanager-bo(41774) Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted request to the RPC interface.

cpe:/a:emc:diskxtender:6.20.060

CVE-2008-0963

2008-04-14T12:05:00.000-04:00

2017-08-07T21:29:47.573-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20080410 EMC DiskXtender MediaStor Format String Vulnerability BID 28727 BID 28729 SECTRACK 1019829 VUPEN ADV-2008-1198 XF emc-diskxtender-mediastor-format-string(41773) Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted message to the RPC interface.

cpe:/o:sun:opensolaris cpe:/o:sun:opensolaris:::sparc cpe:/o:sun:opensolaris:::x86 cpe:/o:sun:opensolaris:build_snv_01 cpe:/o:sun:opensolaris:build_snv_02 cpe:/o:sun:opensolaris:build_snv_13 cpe:/o:sun:opensolaris:build_snv_19 cpe:/o:sun:opensolaris:build_snv_22 cpe:/o:sun:opensolaris:build_snv_64 cpe:/o:sun:opensolaris:build_snv_88 cpe:/o:sun:opensolaris:build_snv_89 cpe:/o:sun:opensolaris:build_snv_91 cpe:/o:sun:opensolaris:build_snv_92 cpe:/o:sun:opensolaris:build_snv_95 cpe:/o:sun:solaris:8::sparc cpe:/o:sun:solaris:8::x86 cpe:/o:sun:solaris:9::sparc cpe:/o:sun:solaris:9::x86 cpe:/o:sun:solaris:10::sparc cpe:/o:sun:solaris:10::x86 cpe:/o:sun:sunos:5.8 cpe:/o:sun:sunos:5.9 cpe:/o:sun:sunos:5.10

CVE-2008-0964

2008-08-08T14:41:00.000-04:00

2018-10-30T12:25:15.027-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20080804 Solaris snoop SMB Decoding Multiple Stack Buffer Overflow Vulnerabilities SUNALERT 240101 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm CONFIRM http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935 BID 30556 SECTRACK 1020633 VUPEN ADV-2008-2311 XF solaris-snoop1m-bo(44222) EXPLOIT-DB 6328 Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet.

CVE-2008-0965

2008-08-08T14:41:00.000-04:00

2018-10-30T12:25:15.027-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20080804 Solaris snoop SMB Decoding Multiple Format String Vulnerabilities SUNALERT 240101 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm CONFIRM http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935 BID 30556 SECTRACK 1020633 VUPEN ADV-2008-2311 XF sun-solaris-snoop1m-command-execution(44222) XF solaris-snoop1m-format-string(44415) Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.

cpe:/a:vmware:esx_server:2.5.5 cpe:/a:vmware:esx_server:3.1 cpe:/a:vmware:esx_server:3.2 cpe:/a:vmware:esx_server:3.3 cpe:/a:vmware:esx_server:3.5 cpe:/a:vmware:esxi:3.5 cpe:/a:vmware:player:1.0.0 cpe:/a:vmware:player:1.0.1 cpe:/a:vmware:player:1.0.2 cpe:/a:vmware:player:1.0.3 cpe:/a:vmware:player:1.0.4 cpe:/a:vmware:player:1.0.5 cpe:/a:vmware:player:1.0.6 cpe:/a:vmware:player:2.0 cpe:/a:vmware:player:2.0.1 cpe:/a:vmware:player:2.0.2 cpe:/a:vmware:player:2.0.3 cpe:/a:vmware:server:1.0.3 cpe:/a:vmware:vmware_server:1.0.0 cpe:/a:vmware:vmware_server:1.0.1 cpe:/a:vmware:vmware_server:1.0.2 cpe:/a:vmware:vmware_server:1.0.4 cpe:/a:vmware:vmware_server:1.0.5 cpe:/a:vmware:vmware_workstation:5.5.0 cpe:/a:vmware:vmware_workstation:5.5.2 cpe:/a:vmware:vmware_workstation:5.5.5 cpe:/a:vmware:vmware_workstation:5.5.6 cpe:/a:vmware:vmware_workstation:6.0.1 cpe:/a:vmware:vmware_workstation:6.0.2 cpe:/a:vmware:vmware_workstation:6.0.3 cpe:/a:vmware:workstation:5.5.1 cpe:/a:vmware:workstation:5.5.3 cpe:/a:vmware:workstation:5.5.4 cpe:/a:vmware:workstation:6.0 cpe:/o:vmware:esx:3.0.0 cpe:/o:vmware:esx:3.0.1 cpe:/o:vmware:esx:3.0.2

CVE-2008-0967

2008-06-05T16:32:00.000-04:00

2018-10-30T12:26:23.590-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20080604 VMware Multiple Products vmware-authd Untrusted Library Loading Vulnerability GENTOO GLSA-201209-25 SREASON 3922 SECTRACK 1020198 BUGTRAQ 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues BID 29557 CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0009.html VUPEN ADV-2008-1744 XF vmware-vmwareauthd-privilege-escalation(42878) Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before 2.0.4 build 93057, and VMware Server before 1.0.6 build 91891 on Linux, and VMware ESXi 3.5 and VMware ESX 2.5.4 through 3.5, allows local users to gain privileges via a library path option in a configuration file.

cpe:/h:barracuda_networks:barracuda_im_firewall:3.0.01.008 cpe:/h:barracuda_networks:barracuda_load_balancer:2.2.006 cpe:/h:barracuda_networks:barracuda_message_archiver:1.1.0.010 cpe:/h:barracuda_networks:barracuda_spam_firewall:3.5.11.020 cpe:/h:barracuda_networks:barracuda_web_filter:3.3.0.038

CVE-2008-0971

2008-12-19T12:30:00.267-05:00

2018-10-15T18:03:59.933-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://dcsl.ul.ie/advisories/03.htm SREASON 4792 SECTRACK 1021454 CONFIRM http://www.barracudanetworks.com/ns/support/tech_alert.php BUGTRAQ 20081216 CVE-2008-0971 - Barracuda Networks products Multiple Cross-Site Scripting Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Message Archiver before 1.2.1.002, Web Filter before 3.3.0.052, IM Firewall before 3.1.01.017, and Load Balancer before 2.3.024 allow remote attackers to inject arbitrary web script or HTML via (1) the Policy Name field in Search Based Retention Policy in Message Archiver; unspecified parameters in the (2) IP Configuration, (3) Administration, (4) Journal Accounts, (5) Retention Policy, and (6) GroupWise Sync components in Message Archiver; (7) input to search operations in Web Filter; and (8) input used in error messages and (9) hidden INPUT elements in (a) Spam Firewall, (b) IM Firewall, and (c) Web Filter.

cpe:/a:double-take_software:double-take:4.5 cpe:/a:double-take_software:double-take:5.0.0.2865

CVE-2008-0973

2008-02-25T18:44:00.000-05:00

2018-10-15T18:04:00.497-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://aluigi.altervista.org/adv/doubletakedown-adv.txt MISC http://aluigi.org/poc/doubletakedown.zip SREASON 3698 BUGTRAQ 20080222 Multiple vulnerabilities in Double-Take 5.0.0.2865 BID 27951 VUPEN ADV-2008-0666 Buffer overflow in Double-Take (aka HP StorageWorks Storage Mirroring) 4.5.0.1629, and other 4.5.0.x versions, allows remote attackers to have an unknown impact via a packet with a long string in the username field.

cpe:/a:double-take_software:double-take:4.5 cpe:/a:double-take_software:double-take:5.0.0.2865 cpe:/a:hp:storageworks_double-take:5.0.0.2865

CVE-2008-0974

2008-02-25T18:44:00.000-05:00

2018-10-15T18:04:01.027-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/doubletakedown-adv.txt MISC http://aluigi.org/poc/doubletakedown.zip SREASON 3698 BUGTRAQ 20080222 Multiple vulnerabilities in Double-Take 5.0.0.2865 BID 27951 VUPEN ADV-2008-0666 Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon termination) via (1) a large vector<T> value, which raises a "vector<T> too long" exception; or (2) a certain packet that raises an ospace/time/src\date.cpp exception.

cpe:/a:double-take_software:double-take:4.5 cpe:/a:double-take_software:double-take:5.0.0.2865

CVE-2008-0975

2008-02-25T18:44:00.000-05:00

2018-10-15T18:04:01.590-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/doubletakedown-adv.txt MISC http://aluigi.org/poc/doubletakedown.zip SREASON 3698 BUGTRAQ 20080222 Multiple vulnerabilities in Double-Take 5.0.0.2865 BID 27951 VUPEN ADV-2008-0666 Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (CPU consumption) via a -1 value in the field that specifies the size of the vector<T> value.

cpe:/a:double-take_software:double-take:4.5 cpe:/a:double-take_software:double-take:5.0.0.2865 cpe:/a:hp:storageworks_double-take:5.0.0.2865

CVE-2008-0976

2008-02-25T18:44:00.000-05:00

2018-10-15T18:04:02.170-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/doubletakedown-adv.txt MISC http://aluigi.org/poc/doubletakedown.zip SREASON 3698 BUGTRAQ 20080222 Multiple vulnerabilities in Double-Take 5.0.0.2865 BID 27951 VUPEN ADV-2008-0666 Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed packet, as demonstrated by a packet of type (1) 0x2722 or (2) 0x272a.

cpe:/a:double-take_software:double-take:4.5 cpe:/a:double-take_software:double-take:5.0.0.2865

CVE-2008-0977

2008-02-25T18:44:00.000-05:00

2018-10-15T18:04:02.730-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/doubletakedown-adv.txt MISC http://aluigi.org/poc/doubletakedown.zip SREASON 3698 BUGTRAQ 20080222 Multiple vulnerabilities in Double-Take 5.0.0.2865 BID 27951 VUPEN ADV-2008-0666 Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain long packet that triggers an attempt to allocate a large amount of memory.

cpe:/a:double-take_software:double-take:4.5 cpe:/a:double-take_software:double-take:5.0.0.2865

CVE-2008-0978

2008-02-25T18:44:00.000-05:00

2018-10-15T18:04:03.263-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/doubletakedown-adv.txt MISC http://aluigi.org/poc/doubletakedown.zip SREASON 3698 BUGTRAQ 20080222 Multiple vulnerabilities in Double-Take 5.0.0.2865 BID 27951 VUPEN ADV-2008-0666 Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to obtain sensitive information via a packet of type (1) 0x2728, which provides operating system and path information; (2) 0x274e, which lists Ethernet adapters; (3) 0x2726, which provides filesystem information; (4) 0x274f, which specifies the printer driver; or (5) 0x2757, which provides recent log entries.

cpe:/a:double-take_software:double-take:4.5 cpe:/a:double-take_software:double-take:5.0.0.2865 cpe:/a:hp:storageworks_double-take:5.0.0.2865

CVE-2008-0979

2008-02-25T18:44:00.000-05:00

2018-10-15T18:04:03.777-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/doubletakedown-adv.txt MISC http://aluigi.org/poc/doubletakedown.zip SREASON 3698 BUGTRAQ 20080222 Multiple vulnerabilities in Double-Take 5.0.0.2865 BID 27951 VUPEN ADV-2008-0666 Stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain packet that triggers the recursive calling of a function.

cpe:/a:spyce:spyce:2.1.3

CVE-2008-0980

2008-02-25T18:44:00.000-05:00

2018-10-15T18:04:04.373-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3699 MISC http://www.procheckup.com/Vulnerability_PR08-01.php BUGTRAQ 20080219 PR08-01: Several XSS, a cross-domain redirect and a webroot disclosure on Spyce - Python Server Pages (PSP) BID 27898 Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the url or type parameter to docs/examples/redirect.spy; (2) the x parameter to docs/examples/handlervalidate.spy; (3) the name parameter to spyce/examples/request.spy; (4) the Name parameter to spyce/examples/getpost.spy; (5) the mytextarea parameter, the mypass parameter, or an empty parameter to spyce/examples/formtag.spy; (6) the newline parameter to the default URI under demos/chat/; (7) the text1 parameter to docs/examples/formintro.spy; or (8) the mytext or mydate parameter to docs/examples/formtag.spy.

cpe:/a:spyce:spyce:2.1.3

CVE-2008-0981

2008-02-25T18:44:00.000-05:00

2018-10-15T18:04:04.717-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

cpe:/a:spyce:spyce:2.1.3

CVE-2008-0982

2008-02-25T18:44:00.000-05:00

2018-10-15T18:04:05.060-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3699 MISC http://www.procheckup.com/Vulnerability_PR08-01.php BUGTRAQ 20080219 PR08-01: Several XSS, a cross-domain redirect and a webroot disclosure on Spyce - Python Server Pages (PSP) BID 27898 Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to obtain sensitive information via a direct request for spyce/examples/automaton.spy, which reveals the path in an error message.

cpe:/a:lighttpd:lighttpd:1.4.7 cpe:/a:lighttpd:lighttpd:1.4.8 cpe:/a:lighttpd:lighttpd:1.4.9 cpe:/a:lighttpd:lighttpd:1.4.10 cpe:/a:lighttpd:lighttpd:1.4.11 cpe:/a:lighttpd:lighttpd:1.4.12 cpe:/a:lighttpd:lighttpd:1.4.13 cpe:/a:lighttpd:lighttpd:1.4.14 cpe:/a:lighttpd:lighttpd:1.4.15 cpe:/a:lighttpd:lighttpd:1.4.16 cpe:/a:lighttpd:lighttpd:1.4.17 cpe:/a:lighttpd:lighttpd:1.4.18

CVE-2008-0983

2008-02-26T13:44:00.000-05:00

2018-10-15T18:04:05.467-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SR:2008:008 GENTOO GLSA-200803-10 CONFIRM http://trac.lighttpd.net/trac/ticket/1562 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0084 DEBIAN DSA-1609 BUGTRAQ 20080228 rPSA-2008-0084-1 lighttpd BID 27943 VUPEN ADV-2008-0659 CONFIRM https://issues.rpath.com/browse/RPL-2284 FEDORA FEDORA-2008-2262 FEDORA FEDORA-2008-2278 lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size of a file descriptor array, which allows remote attackers to cause a denial of service (crash) via a large number of connections, which triggers an out-of-bounds access.

cpe:/a:miro:miro_player:1.1 cpe:/a:videolan:vlc_media_player:0.8.6d

CVE-2008-0984

2008-02-26T14:44:00.000-05:00

2018-10-15T18:04:06.980-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov FULLDISC 20080227 CORE-2008-0130: VLC media player chunk context validation error MISC http://www.coresecurity.com/?action=item&id=2147 DEBIAN DSA-1543 GENTOO GLSA-200803-13 BUGTRAQ 20080227 CORE-2008-0130: VLC media player chunk context validation error BID 28007 SECTRACK 1019510 CONFIRM http://www.videolan.org/security/sa0802.html VUPEN ADV-2008-0682 The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.

cpe:/a:google:android_sdk:m3-rc37a

CVE-2008-0985

2008-03-05T19:44:00.000-05:00

2018-10-15T18:04:08.043-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html SREASON 3727 MISC http://www.coresecurity.com/?action=item&id=2148 BUGTRAQ 20080304 CORE-2008-0124: Multiple vulnerabilities in Google's Android SDK BID 28005 XF androidsdk-gifimagedecoderondecode-bo(40998) Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows remote attackers to execute arbitrary code via a crafted GIF file whose logical screen height and width are different than the actual height and width.

cpe:/a:google:android_sdk:m3-rc37a cpe:/a:google:android_sdk:m5-rc14

CVE-2008-0986

2008-03-05T19:44:00.000-05:00

2018-10-15T18:04:08.560-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html SREASON 3727 MISC http://www.coresecurity.com/?action=item&id=2148 BUGTRAQ 20080304 CORE-2008-0124: Multiple vulnerabilities in Google's Android SDK BID 28006 XF androidsdk-bmpreadfromstream-int-overflow(40999) Integer overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK m3-rc37a and earlier, and m5-rc14, allows remote attackers to execute arbitrary code via a crafted BMP file with a header containing a negative offset field.

cpe:/a:apple:aperture:2 cpe:/a:apple:iphoto:7.1.2

CVE-2008-0987

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:47.977-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 APPLE APPLE-SA-2008-03-20 CONFIRM http://support.apple.com/kb/HT1232 BID 28304 BID 28363 SECTRACK 1019659 SECTRACK 1019683 SECTRACK 1019684 CERT TA08-079A VUPEN ADV-2008-0924 VUPEN ADV-2008-0957 XF macos-imageraw-bo(41294) Stack-based buffer overflow in Image Raw in Apple Mac OS X 10.5.2, and Digital Camera RAW Compatibility before Update 2.0 for Aperture 2 and iPhoto 7.1.2, allows remote attackers to execute arbitrary code via a crafted Adobe Digital Negative (DNG) image.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0988

2008-03-18T19:44:00.000-04:00

2011-03-07T22:05:45.767-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28374 SECTRACK 1019661 CERT TA08-079A VUPEN ADV-2008-0924 Off-by-one error in the Libsystem strnstr API in libc on Apple Mac OS X 10.4.11 allows context-dependent attackers to cause a denial of service (crash) via crafted arguments that trigger a buffer over-read.

cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x_server:10.5.2

CVE-2008-0989

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:48.040-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28339 SECTRACK 1019662 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-mdnsresponderhelper-format-string(41292) Format string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to execute arbitrary code via format string specifiers in the local hostname.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0990

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:48.087-04:00

4.4

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28345 SECTRACK 1019663 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-notifyd-dos(41289) notifyd in Apple Mac OS X 10.4.11 does not verify that Mach port death notifications have originated from the kernel, which allows local users to cause a denial of service via spoofed death notifications that prevent other applications from receiving notifications.

cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x_server:10.5.2

CVE-2008-0992

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:48.150-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28365 SECTRACK 1019673 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-pax-code-execution(41288) Array index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute arbitrary code via an archive with a crafted length value.

cpe:/a:apple:podcast_producer

CVE-2008-0993

2008-03-18T19:44:00.000-04:00

2013-08-27T01:56:40.063-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28372 SECTRACK 1019664 CERT TA08-079A VUPEN ADV-2008-0924 Podcast Capture in Podcast Producer for Apple Mac OS X 10.5.2 invokes a subtask with passwords in command line arguments, which allows local users to read the passwords via process listings.

cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x_server:10.5.2

CVE-2008-0994

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:48.213-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28386 SECTRACK 1019665 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-preview-weak-encryption(41276) Preview in Apple Mac OS X 10.5.2 uses 40-bit RC4 when saving a PDF file with encryption, which makes it easier for attackers to decrypt the file via brute force methods.

cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x_server:10.5.2

CVE-2008-0995

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:48.277-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28387 SECTRACK 1019667 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-printing-weak-encryption(41287) The Printing component in Apple Mac OS X 10.5.2 uses 40-bit RC4 when printing to an encrypted PDF file, which makes it easier for attackers to decrypt the file via brute force methods.

cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x_server:10.5.2

CVE-2008-0996

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:48.323-04:00

1.7

LOCAL

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28344 SECTRACK 1019667 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-printqueue-information-disclosure(41284) The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print queue, which might allow local users to obtain the credentials.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-0997

2008-03-18T18:44:00.000-04:00

2017-08-07T21:29:48.383-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28364 SECTRACK 1019648 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-appkit-ppd-bo(41282) Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows user-assisted remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted PostScript Printer Description (PPD) file that is not properly handled when querying a network printer.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x_server:10.4.11 cpe:/o:apple:mac_os_x_server:10.5.2

CVE-2008-0998

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:48.447-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28385 SECTRACK 1019674 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-netcfgtool-code-execution(41281) Unspecified vulnerability in NetCfgTool in the System Configuration component in Apple Mac OS X 10.4.11 and 10.5.2 allows local users to bypass authorization and execute arbitrary code via crafted distributed objects.

cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x_server:10.5.2

CVE-2008-0999

2008-03-18T19:44:00.000-04:00

2017-08-07T21:29:48.510-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 BID 28304 BID 28389 SECTRACK 1019669 CERT TA08-079A VUPEN ADV-2008-0924 XF macos-udf-dos(41280) Apple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service (crash) via a crafted Universal Disc Format (UDF) disk image, which triggers a NULL pointer dereference.

cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x_server:10.5.2

CVE-2008-1000

2008-03-18T19:44:00.000-04:00

2018-10-15T18:04:09.217-04:00

8.5

NETWORK

MEDIUM

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307562 APPLE APPLE-SA-2008-03-18 MISC http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=2189 BUGTRAQ 20080318 CORE-2008-0123: Leopard Server Remote Path Traversal BID 28278 SECTRACK 1019660 VUPEN ADV-2008-0924 XF macos-contentserver-directory-traversal(41278) Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 (aka Leopard) allows remote authenticated users to write arbitrary files via ".." sequences in file attachments.

cpe:/a:apple:safari:3.0 cpe:/a:apple:safari:3.0.1 cpe:/a:apple:safari:3.0.2 cpe:/a:apple:safari:3.0.3 cpe:/a:apple:safari:3.0.4

CVE-2008-1001

2008-03-18T20:44:00.000-04:00

2018-10-30T12:25:38.340-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307563 APPLE APPLE-SA-2008-03-18 BID 28290 BID 28321 SECTRACK 1019653 CERT TA08-079A VUPEN ADV-2008-0920 XF safari-errorpage-xss(41333) Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1, when running on Windows XP or Vista, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is not properly handled in the error page.

cpe:/a:apple:safari:0.8 cpe:/a:apple:safari:0.9 cpe:/a:apple:safari:1.0 cpe:/a:apple:safari:1.1 cpe:/a:apple:safari:1.2 cpe:/a:apple:safari:1.3 cpe:/a:apple:safari:1.3.1 cpe:/a:apple:safari:1.3.2 cpe:/a:apple:safari:2.0 cpe:/a:apple:safari:2.0.2 cpe:/a:apple:safari:2.0.4 cpe:/a:apple:safari:3.0 cpe:/a:apple:safari:3.0.1 cpe:/a:apple:safari:3.0.2 cpe:/a:apple:safari:3.0.3 cpe:/a:apple:safari:3.0.4

CVE-2008-1002

2008-03-18T20:44:00.000-04:00

2017-08-07T21:29:48.697-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307563 APPLE APPLE-SA-2008-03-18 CERT-VN VU#766019 BID 28290 BID 28328 SECTRACK 1019653 CERT TA08-079A VUPEN ADV-2008-0920 XF safari-javascripturls-security-bypass(41335) Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a crafted javascript: URL.

CVE-2008-1003

2008-03-18T20:44:00.000-04:00

2017-08-07T21:29:48.760-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307563 APPLE APPLE-SA-2008-03-18 BID 28290 BID 28330 SECTRACK 1019653 CERT TA08-079A VUPEN ADV-2008-0920 XF safari-documentdomain-security-bypass(41334) Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to sites that set the document.domain property or have the same document.domain.

CVE-2008-1004

2008-03-18T20:44:00.000-04:00

2017-08-07T21:29:48.807-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307563 APPLE APPLE-SA-2008-03-18 BID 28290 BID 28347 SECTRACK 1019653 CERT TA08-079A VUPEN ADV-2008-0920 XF safari-webinspector-security-bypass(41331) Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector.

CVE-2008-1005

2008-03-18T20:44:00.000-04:00

2017-08-07T21:29:48.870-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307563 APPLE APPLE-SA-2008-03-18 BID 28290 BID 28326 SECTRACK 1019656 CERT TA08-079A VUPEN ADV-2008-0920 XF safari-webcore-weak-security(41329) WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password.

CVE-2008-1006

2008-03-18T20:44:00.000-04:00

2017-08-07T21:29:48.947-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307563 APPLE APPLE-SA-2008-03-18 BID 28290 BID 28332 SECTRACK 1019653 CERT TA08-079A VUPEN ADV-2008-0920 XF safari-windowopen-security-bypass(41326) Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML by using the window.open function to change the security context of a web page.

CVE-2008-1007

2008-03-18T20:44:00.000-04:00

2017-08-07T21:29:49.010-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307563 APPLE APPLE-SA-2008-03-18 BID 28290 BID 28335 SECTRACK 1019653 CERT TA08-079A VUPEN ADV-2008-0920 XF safari-navigation-policy-security-bypass(41324) WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site scripting (XSS) attacks.

CVE-2008-1008

2008-03-18T20:44:00.000-04:00

2017-08-07T21:29:49.087-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307563 APPLE APPLE-SA-2008-03-18 BID 28290 BID 28336 SECTRACK 1019653 CERT TA08-079A VUPEN ADV-2008-0920 XF safari-documentdomain-xss(41323) Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via the document.domain property.

CVE-2008-1009

2008-03-18T20:44:00.000-04:00

2017-08-07T21:29:49.150-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307563 APPLE APPLE-SA-2008-03-18 BID 28290 BID 28337 SECTRACK 1019653 CERT TA08-079A VUPEN ADV-2008-0920 XF safari-historyobject-security-bypass(41322) Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary JavaScript by modifying the history object.

CVE-2008-1010

2008-03-18T20:44:00.000-04:00

2017-08-07T21:29:49.213-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=307563 APPLE APPLE-SA-2008-03-18 BID 28290 BID 28338 SECTRACK 1019654 CERT TA08-079A VUPEN ADV-2008-0920 XF safari-webkit-bo(41321) FEDORA FEDORA-2008-3229 Buffer overflow in WebKit, as used in Apple Safari before 3.1, allows remote attackers to execute arbitrary code via crafted regular expressions in JavaScript.

CVE-2008-1011

2008-03-18T20:44:00.000-04:00

2017-08-07T21:29:49.277-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=307563 APPLE APPLE-SA-2008-03-18 BID 28290 BID 28342 SECTRACK 1019653 CERT TA08-079A VUPEN ADV-2008-0920 XF safari-webkitcomponent-security-bypass(41320) FEDORA FEDORA-2008-3229 Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via a frame that calls a method instance in another frame.

cpe:/a:apple:apple_airport_extreme_base_station:::7.3.1_firmware

CVE-2008-1012

2008-03-20T06:44:00.000-04:00

2017-08-07T21:29:49.323-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2008-03-19 CONFIRM http://support.apple.com/kb/HT1226 BID 28348 SECTRACK 1019678 VUPEN ADV-2008-0955 XF airport-extremebasestation-afp-dos(41325) Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service (file sharing hang) via a crafted AFP request, related to "input validation."

cpe:/a:apple:quicktime:7.4.4

CVE-2008-1013

2008-04-04T13:44:00.000-04:00

2017-08-07T21:29:49.383-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1019757 CONFIRM http://support.apple.com/kb/HT1241 BID 28583 CERT TA08-094A VUPEN ADV-2008-1078 XF quicktime-qtjava-code-execution(41601) Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet.

cpe:/a:apple:quicktime:7.4.4

CVE-2008-1014

2008-04-04T13:44:00.000-04:00

2017-08-07T21:29:49.447-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1019758 CONFIRM http://support.apple.com/kb/HT1241 BID 28583 CERT TA08-094A VUPEN ADV-2008-1078 XF quicktime-moviefiles-information-disclosure(41602) Apple QuickTime before 7.4.5 does not properly handle external URLs in movies, which allows remote attackers to obtain sensitive information.

cpe:/a:apple:quicktime:7.4.4

CVE-2008-1015

2008-04-04T13:44:00.000-04:00

2017-08-07T21:29:49.510-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2008-07-10 SECTRACK 1019759 CONFIRM http://support.apple.com/kb/HT1241 BID 28583 CERT TA08-094A VUPEN ADV-2008-1078 VUPEN ADV-2008-2064 XF quicktime-data-reference-bo(41604) Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.

cpe:/a:apple:quicktime:7.4.4

CVE-2008-1016

2008-04-04T13:44:00.000-04:00

2017-08-07T21:29:49.557-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1019760 CONFIRM http://support.apple.com/kb/HT1241 BID 28583 CERT TA08-094A VUPEN ADV-2008-1078 XF quicktime-movie-media-code-execution(41605) Apple QuickTime before 7.4.5 does not properly handle movie media tracks, which allows remote attackers to execute arbitrary code via a crafted movie that triggers memory corruption.

cpe:/a:apple:quicktime:7.4.4

CVE-2008-1017

2008-04-04T13:44:00.000-04:00

2018-10-11T16:29:01.507-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2008-07-10 SECTRACK 1019761 CONFIRM http://support.apple.com/kb/HT1241 BUGTRAQ 20080403 ZDI-08-015: Apple QuickTime Clipping Region Heap Overflow Vulnerability BID 28583 CERT TA08-094A VUPEN ADV-2008-1078 VUPEN ADV-2008-2064 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-015 XF quicktime-crgn-bo(41607) Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.

cpe:/a:apple:quicktime:7.4.4

CVE-2008-1018

2008-04-04T13:44:00.000-04:00

2018-10-11T16:29:02.537-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2008-07-10 SECTRACK 1019762 CONFIRM http://support.apple.com/kb/HT1241 BUGTRAQ 20080403 ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability BID 28583 CERT TA08-094A VUPEN ADV-2008-1078 VUPEN ADV-2008-2064 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-016 XF quicktime-chan-bo(41606) Heap-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via an MP4A movie with a malformed Channel Compositor (aka chan) atom.

cpe:/a:apple:quicktime:7.4.4

CVE-2008-1019

2008-04-04T13:44:00.000-04:00

2018-10-11T16:29:03.677-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1019763 CONFIRM http://support.apple.com/kb/HT1241 BUGTRAQ 20080403 ZDI-08-014: Apple Quicktime Multiple Opcode Memory Corruption Vulnerabilities BID 28583 CERT TA08-094A VUPEN ADV-2008-1078 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-014 XF quicktime-pict-records-bo(41609) Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted PICT image file, related to an improperly terminated memory copy loop.

cpe:/a:apple:quicktime:7.4.4

CVE-2008-1020

2008-04-04T13:44:00.000-04:00

2018-10-11T16:29:04.520-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1019764 CONFIRM http://support.apple.com/kb/HT1241 BUGTRAQ 20080403 ZDI-08-017: Apple QuickTime Kodak Encoding Heap Overflow Vulnerability BID 28583 CERT TA08-094A VUPEN ADV-2008-1078 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-017 XF quicktime-pictimage-bo(41610) Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file with Kodak encoding, related to error checking and error messages.

cpe:/a:apple:quicktime:7.4.4

CVE-2008-1021

2008-04-04T13:44:00.000-04:00

2018-10-11T16:29:05.287-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1019765 CONFIRM http://support.apple.com/kb/HT1241 BUGTRAQ 20080403 ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability BID 28583 CERT TA08-094A VUPEN ADV-2008-1078 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-018 XF quicktime-animation-codec-bo(41612) Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted movie with run length encoding.

cpe:/a:apple:quicktime:7.4.4

CVE-2008-1022

2008-04-04T13:44:00.000-04:00

2018-10-11T16:29:06.100-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1019766 CONFIRM http://support.apple.com/kb/HT1241 BUGTRAQ 20080403 ZDI-08-019: Apple QuickTime Malformed VR obji Atom Parsing Memory Corruption Vulnerability BID 28583 CERT TA08-094A VUPEN ADV-2008-1078 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-019 XF quicktime-obji-atoms-bo(41613) Stack-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted VR movie with an obji atom of zero size.

cpe:/a:apple:quicktime:7.4.4

CVE-2008-1023

2008-04-04T13:44:00.000-04:00

2017-08-07T21:29:49.963-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1019767 CONFIRM http://support.apple.com/kb/HT1241 BID 28583 CERT TA08-094A VUPEN ADV-2008-1078 XF quicktime-clip-opcodes-bo(41615) Heap-based buffer overflow in Clip opcode parsing in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file.

cpe:/a:apple:safari:3 cpe:/a:apple:safari:3.1

CVE-2008-1024

2008-04-17T15:05:00.000-04:00

2017-08-07T21:29:50.010-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2008-04-16 CONFIRM http://support.apple.com/kb/HT1467 CERT-VN VU#529441 BID 28813 SECTRACK 1019868 VUPEN ADV-2008-0979 XF apple-safari-filedownload-code-execution(41864) Apple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file download with a crafted file name, which triggers memory corruption.

cpe:/a:apple:safari:0.8 cpe:/a:apple:safari:0.9 cpe:/a:apple:safari:1.0 cpe:/a:apple:safari:1.0.3 cpe:/a:apple:safari:1.1 cpe:/a:apple:safari:1.2 cpe:/a:apple:safari:1.3 cpe:/a:apple:safari:1.3.1 cpe:/a:apple:safari:1.3.2 cpe:/a:apple:safari:2.0 cpe:/a:apple:safari:2.0.2 cpe:/a:apple:safari:2.0.4 cpe:/a:apple:safari:3.0 cpe:/a:apple:safari:3.0.2 cpe:/a:apple:safari:3.0.3 cpe:/a:apple:safari:3.0.4 cpe:/a:apple:safari:3.1 cpe:/a:apple:webkit

CVE-2008-1025

2008-04-17T15:05:00.000-04:00

2017-08-07T21:29:50.120-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2008-07-11 APPLE APPLE-SA-2008-04-16 CONFIRM http://support.apple.com/kb/HT1467 CERT-VN VU#705529 BID 28814 SECTRACK 1019869 VUPEN ADV-2008-1250 VUPEN ADV-2008-2094 XF apple-safari-webkit-hostname-xss(41862) Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a colon in the hostname portion.

cpe:/a:apple:safari:3 cpe:/a:apple:safari:3.1

CVE-2008-1026

2008-04-17T15:05:00.000-04:00

2018-10-11T16:29:06.897-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2008-07-11 APPLE APPLE-SA-2008-04-16 SREASON 3815 CONFIRM http://support.apple.com/kb/HT1467 BUGTRAQ 20080416 ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability BID 28815 SECTRACK 1019870 VUPEN ADV-2008-1250 VUPEN ADV-2008-2094 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-022 XF apple-safari-webkit-pcrecompile-bo(41859) Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp) in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflow.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x:10.5 cpe:/o:apple:mac_os_x:10.5.1 cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x_server:10.4.11 cpe:/o:apple:mac_os_x_server:10.5 cpe:/o:apple:mac_os_x_server:10.5.1 cpe:/o:apple:mac_os_x_server:10.5.2

CVE-2008-1027

2008-06-02T17:30:00.000-04:00

2017-08-07T21:29:50.260-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2008-05-28 SECTRACK 1020130 BID 29412 BID 29490 CERT TA08-150A VUPEN ADV-2008-1697 XF macosx-afpserver-security-bypass(42703) Apple Filing Protocol (AFP) Server in Apple Mac OS X before 10.5.3 does not verify that requested files and directories are inside shared folders, which allows remote attackers to read arbitrary files via unspecified AFP traffic.

cpe:/o:apple:mac_os_x:10.4.11 cpe:/o:apple:mac_os_x_server:10.4.11

CVE-2008-1028

2008-06-02T17:30:00.000-04:00

2017-08-07T21:29:50.323-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2008-05-28 SECTRACK 1020131 BID 29412 BID 29487 CERT TA08-150A VUPEN ADV-2008-1697 XF macosx-appkit-code-execution(42705) Unspecified vulnerability in AppKit in Apple Mac OS X before 10.5 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document file, as demonstrated by opening the document with TextEdit.

CVE-2008-1030

2008-06-02T17:30:00.000-04:00

2017-08-07T21:29:50.370-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2008-05-28 SECTRACK 1020135 BID 29412 BID 29491 CERT TA08-150A VUPEN ADV-2008-1697 XF macosx-corefoundation-cfdatareplacebytes-bo(42709) Integer overflow in the CFDataReplaceBytes function in the CFData API in CoreFoundation in Apple Mac OS X before 10.5.3 allows context-dependent attackers to execute arbitrary code or cause a denial of service (crash) via an invalid length argument, which triggers a heap-based buffer overflow.

CVE-2008-1031

2008-06-02T17:30:00.000-04:00

2017-08-07T21:29:50.430-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2008-05-28 SECTRACK 1020136 BID 29412 BID 29480 CERT TA08-150A VUPEN ADV-2008-1697 XF macosx-coregraphics-unspec-code-execution(42710) CoreGraphics in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document, related to an uninitialized variable.

CVE-2008-1032

2008-06-02T17:30:00.000-04:00

2017-08-07T21:29:50.493-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2008-05-28 SECTRACK 1020137 BID 29412 BID 29481 CERT TA08-150A VUPEN ADV-2008-1697 XF macosx-coretypes-weak-security(42711) Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via an (1) Automator, (2) Help, (3) Safari, or (4) Terminal content type for a downloadable object, which does not trigger a "potentially unsafe" warning message in (a) the Download Validation feature in Mac OS X 10.4 or (b) the Quarantine feature in Mac OS X 10.5.

cpe:/a:apple:cups

CVE-2008-1033

2008-06-02T17:30:00.000-04:00

2017-08-07T21:29:50.557-04:00

2.1

NETWORK

HIGH

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2008-05-28 SECTRACK 1020145 BID 29412 BID 29484 CERT TA08-150A VUPEN ADV-2008-1697 XF macosx-cups-info-disclosure(42713) The scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3, when debug logging is enabled and a printer requires a password, allows attackers to obtain sensitive information (credentials) by reading the log data, related to "authentication environment variables."

cpe:/o:apple:mac_os_x:10.0 cpe:/o:apple:mac_os_x:10.1 cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.4

CVE-2008-1034

2008-06-02T17:30:00.000-04:00

2017-08-07T21:29:50.620-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2008-05-28 SECTRACK 1020138 CERT-VN VU#566875 BID 29412 BID 29483 CERT TA08-150A VUPEN ADV-2008-1697 XF macosx-helpviewer-bo(42716) Integer underflow in Help Viewer in Apple Mac OS X before 10.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted help:topic URL that triggers a buffer overflow.

cpe:/a:apple:ical:3.0.1::os_x

CVE-2008-1035

2008-06-03T16:32:00.000-04:00

2018-10-11T16:29:08.193-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2008-05-28 MISC http://www.coresecurity.com/?action=item&id=2219 BUGTRAQ 20080521 CORE-2008-0126: Multiple vulnerabilities in iCal BUGTRAQ 20080527 Re: CORE-2008-0126: Multiple vulnerabilities in iCal BUGTRAQ 20080528 Re: CORE-2008-0126: Multiple vulnerabilities in iCal BID 28633 BID 29412 BID 29486 SECTRACK 1020095 CERT TA08-150A VUPEN ADV-2008-1601 VUPEN ADV-2008-1697 Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or possibly execute arbitrary code via an "ATTACH;VALUE=URI:S=osumi" line in a .ics file, which triggers a "resource liberation" bug. NOTE: CVE-2008-2007 was originally used for this issue, but this is the appropriate identifier.

CVE-2008-1036

2008-06-02T17:30:00.000-04:00

2017-09-28T21:30:31.333-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2008-05-28 SECTRACK 1020139 MISC http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0064 DEBIAN DSA-1762 REDHAT RHSA-2009:0296 BID 29412 BID 29488 UBUNTU USN-747-1 CERT TA08-150A VUPEN ADV-2008-1697 XF macosx-icu-security-bypass(42717) The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.

cpe:/a:packeteer:packetshaper:8.2.2 cpe:/a:packeteer:policycenter:8.2.2

CVE-2008-1037

2008-02-27T14:44:00.000-05:00

2018-10-11T16:29:09.490-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3701 BUGTRAQ 20080224 Packeteer Products File Listing XSS BID 27982 SECTRACK 1019501 Cross-site scripting (XSS) vulnerability in the file listing function in the web management interface in Packeteer PacketShaper and PolicyCenter 8.2.2 allows remote attackers to inject arbitrary web script or HTML via the FILELIST parameter to an arbitrary component, which triggers injection into an Error Report page.

cpe:/a:drbenhur.com:dbhcms:1.1.3 cpe:/a:drbenhur.com:dbhcms:1.1.4

CVE-2008-1038

2008-02-27T14:44:00.000-05:00

2017-09-28T21:30:31.393-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27996 XF dbhcms-modextmanager-file-include(40835) EXPLOIT-DB 5189 PHP remote file inclusion vulnerability in mod/mod.extmanager.php in DBHcms 1.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the extmanager_install parameter.

cpe:/a:porar:webboard

CVE-2008-1039

2008-02-27T14:44:00.000-05:00

2017-09-28T21:30:31.457-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27989 XF porar-question-sql-injection(40839) EXPLOIT-DB 5185 SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands via the QID parameter.

cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.0::rehl_as4_x86 cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.0::rhel_as4_em64t cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.0::solaris cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.0::windows cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.1::windows cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.2::rhel_as4_em64t cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.2::rhel_as4_x86 cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.2::solaris cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.2::windows cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.3::rhel_as4_em64t cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.3::rhel_as4_x86 cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.3::solaris cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.3::windows cpe:/a:fujitsu:interstage_application_server_enterprise:v9.0.0::rhel5_intel64 cpe:/a:fujitsu:interstage_application_server_enterprise:v9.0.0::rhel5_ipf cpe:/a:fujitsu:interstage_application_server_enterprise:v9.0.0::rhel5_x86 cpe:/a:fujitsu:interstage_application_server_enterprise:v9.0.0::rhel_as4_em64t cpe:/a:fujitsu:interstage_application_server_enterprise:v9.0.0::rhel_as4_ipf cpe:/a:fujitsu:interstage_application_server_enterprise:v9.0.0::rhel_as4_x86 cpe:/a:fujitsu:interstage_application_server_enterprise:v9.0.0::solaris cpe:/a:fujitsu:interstage_application_server_enterprise:v9.0.0::windows cpe:/a:fujitsu:interstage_application_server_enterprise:v9.0.0a::rhel5_ipf cpe:/a:fujitsu:interstage_application_server_enterprise:v9.0.0a::rhel_as4_ipf cpe:/a:fujitsu:interstage_application_server_enterprise:v9.0.0a::windows cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.0::rhel_as4_em64t cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.0::rhel_as4_x86 cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.0::solaris cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.0::windows cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.2::rhel_as4_em64t cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.2::rhel_as4_x86 cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.2::solaris cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.2::windows cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.3::rhel_as4_em64t cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.3::rhel_as4_x86 cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.3::solaris cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.3::windows cpe:/a:fujitsu:interstage_application_server_standard_j:v9.0.0.0::rhel5_intel64 cpe:/a:fujitsu:interstage_application_server_standard_j:v9.0.0.0::rhel5_ipf cpe:/a:fujitsu:interstage_application_server_standard_j:v9.0.0.0::rhel5_x86 cpe:/a:fujitsu:interstage_application_server_standard_j:v9.0.0.0::rhel_as4_em64t cpe:/a:fujitsu:interstage_application_server_standard_j:v9.0.0.0::rhel_as4_ipf cpe:/a:fujitsu:interstage_application_server_standard_j:v9.0.0.0::rhel_as4_x86 cpe:/a:fujitsu:interstage_application_server_standard_j:v9.0.0.0::solaris cpe:/a:fujitsu:interstage_application_server_standard_j:v9.0.0.0::windows cpe:/a:fujitsu:interstage_application_server_standard_j:v9.0.0a::windows cpe:/a:fujitsu:interstage_apworks_enterprise:8.0.0::windows cpe:/a:fujitsu:interstage_apworks_standard_j:8.0.0::windows cpe:/a:fujitsu:interstage_studio_enterprise:8.0.1::windows cpe:/a:fujitsu:interstage_studio_enterprise:v9.0.0::windows cpe:/a:fujitsu:interstage_studio_standard_j:8.0.1::windows cpe:/a:fujitsu:interstage_studio_standard_j:v9.0.0::windows

CVE-2008-1040

2008-02-27T14:44:00.000-05:00

2011-03-07T22:05:50.703-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://www.fujitsu.com/global/support/software/security/products-f/interstage-200804e.html BID 27966 VUPEN ADV-2008-0662 Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI.

cpe:/a:matts_whois:matts_whois

CVE-2008-1041

2008-02-27T14:44:00.000-05:00

2008-09-05T17:36:39.567-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-28T09:36:00.000-05:00

MISC http://www.packetstormsecurity.org/0802-exploits/mattswhois-xss.txt BID 27974 Cross-site scripting (XSS) vulnerability in mwhois.php in Matt Wilson Matt's Whois (MWhois) allows remote attackers to inject arbitrary web script or HTML via the domain parameter.

cpe:/a:linux_web_shop:php_download_manager:1.1

CVE-2008-1042

2008-02-27T14:44:00.000-05:00

2017-09-28T21:30:31.520-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27961 XF phpdownloadmanager-body-file-include(40795) EXPLOIT-DB 5183 Directory traversal vulnerability in include/body.inc.php in Linux Web Shop (LWS) php Download Manager 1.0 and 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the content parameter.

cpe:/a:linux_web_shop:php_user_base:1.3:beta

CVE-2008-1043

2008-02-27T14:44:00.000-05:00

2018-10-11T16:29:09.880-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20080710 phpuserbase 1.3 (menu) Remote File Inclusion Vulnerability BID 27963 XF phpuserbase-header-file-include(40794) EXPLOIT-DB 5180 PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 BETA allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter.

cpe:/a:move_networks_inc:move_media_player cpe:/a:move_networks_inc:qunatum_streaming_player:7.7.4_39 cpe:/a:move_networks_inc:qunatum_streaming_player:7.7.6.7

CVE-2008-1044

2008-02-27T14:44:00.000-05:00

2017-09-28T21:30:31.630-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20080226 Move Networks Quantum Streaming Player UploadLogs() Buffer Overflow BID 27995 VUPEN ADV-2008-0684 EXPLOIT-DB 5190 Stack-based buffer overflow in the Quantum Streaming Player (Quantum Streaming IE Player) ActiveX control (aka QSP2IE.QSP2IE) in qsp2ie07076007.dll 7.7.6.7 and qsp2ie07074039.dll 7.7.4.39 in Move Media Player allows remote attackers to execute arbitrary code via a long argument to the UploadLogs method, a different vector than CVE-2007-4722. NOTE: some of these details are obtained from third party information.

cpe:/a:alkacon:opencms:7.0.3

CVE-2008-1045

2008-02-27T14:44:00.000-05:00

2018-10-11T16:29:10.320-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3702 BUGTRAQ 20080224 Alkacon OpenCms tree_files.jsp resource XSS BID 27986 Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the resource parameter.

cpe:/a:quinsonnas:quinsonnas_mail_checker:1.55

CVE-2008-1046

2008-02-27T14:44:00.000-05:00

2017-09-28T21:30:31.690-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

EXPLOIT-DB 5176 PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code via a URL in the op[footer_body] parameter.

cpe:/a:tiki:tikiwiki_cms%2fgroupware:1.6.1

CVE-2008-1047

2008-02-27T14:44:00.000-05:00

2012-10-24T00:00:00.000-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-28T10:09:00.000-05:00

CONFIRM http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=1498 CONFIRM http://tikiwiki.org/ReleaseNotes1910 BID 27968 VUPEN ADV-2008-0661 Cross-site scripting (XSS) vulnerability in tiki-edit_article.php in TikiWiki before 1.9.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:plume-cms:plume_cms:1.2.2

CVE-2008-1048

2008-02-27T14:44:00.000-05:00

2017-08-07T21:29:50.947-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.digitrustgroup.com/advisories/web-application-security-plume-cms.html BID 27999 SECTRACK 1019507 XF plume-xmedia-xss(40841) Cross-site scripting (XSS) vulnerability in manager/xmedia.php in Plume CMS 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the dir parameter.

cpe:/a:positive_software:h-sphere:2.5_patch_10 cpe:/a:positive_software:h-sphere:3.0_patch_8 cpe:/a:positive_software:sitestudio:1.7.1 cpe:/a:positive_software:sitestudio:1.8

CVE-2008-1049

2008-02-27T14:44:00.000-05:00

2017-08-07T21:29:51.010-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://www.psoft.net/misc/hs_ss_technical_update.html BID 28002 SECTRACK 1019506 XF hsphere-sitestudio-unspecified(40846) Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors.

cpe:/a:softbiz:jokes_and_funny_pictures_script

CVE-2008-1050

2008-02-27T14:44:00.000-05:00

2018-10-11T16:29:10.693-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3703 BUGTRAQ 20080224 Softbiz jokes and funny pictures (index.php) sql injection BID 27973 SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbcat_id parameter.

cpe:/o:phpprofiles:phpprofiles_:4.5.2:beta

CVE-2008-1051

2008-02-27T14:44:00.000-05:00

2017-09-28T21:30:31.737-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 27952 EXPLOIT-DB 5175 PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers to execute arbitrary PHP code via a URL in the content parameter.

cpe:/a:netwin:surgeftp:2.3a2

CVE-2008-1052

2008-02-27T14:44:00.000-05:00

2018-10-11T16:29:10.977-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/surgeftpizza-adv.txt SREASON 3704 BUGTRAQ 20080225 NULL pointer in SurgeFTP 2.3a2 BID 27993 XF surgeftp-contentlength-dos(40843) The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails.

cpe:/a:phpnuke:kose_yazilari_module

CVE-2008-1053

2008-02-27T14:44:00.000-05:00

2017-09-28T21:30:31.800-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27991 XF koseyazilari-artid-sql-injection(40848) EXPLOIT-DB 5186 Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a (1) viewarticle or (2) printpage action to modules.php.

cpe:/a:netwin:surgemail:1.8a cpe:/a:netwin:surgemail:1.8b3 cpe:/a:netwin:surgemail:1.8d cpe:/a:netwin:surgemail:1.8e cpe:/a:netwin:surgemail:1.8g3 cpe:/a:netwin:surgemail:1.9 cpe:/a:netwin:surgemail:1.9b2 cpe:/a:netwin:surgemail:2.0a2 cpe:/a:netwin:surgemail:2.0c cpe:/a:netwin:surgemail:2.0e cpe:/a:netwin:surgemail:2.0g2 cpe:/a:netwin:surgemail:2.1a cpe:/a:netwin:surgemail:2.1c7 cpe:/a:netwin:surgemail:2.2a6 cpe:/a:netwin:surgemail:2.2c9 cpe:/a:netwin:surgemail:2.2c10 cpe:/a:netwin:surgemail:2.2g2 cpe:/a:netwin:surgemail:2.2g3 cpe:/a:netwin:surgemail:3.0a cpe:/a:netwin:surgemail:3.0c2 cpe:/a:netwin:surgemail:3.1s cpe:/a:netwin:surgemail:3.8f3 cpe:/a:netwin:surgemail:3.8i cpe:/a:netwin:surgemail:3.8i2 cpe:/a:netwin:surgemail:3.8i3 cpe:/a:netwin:surgemail:38k cpe:/a:netwin:surgemail:38k4

CVE-2008-1054

2008-02-27T14:44:00.000-05:00

2018-10-11T16:29:11.507-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/surgemailz-adv.txt SREASON 3705 BUGTRAQ 20080225 Format string and buffer-overflow in SurgeMail 38k4 BID 27992 SECTRACK 1019500 VUPEN ADV-2008-0678 XF surgemail-webmail-bo(40834) Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin SurgeMail 38k4 and earlier, and beta 39a, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via an HTTP request with multiple long headers to webmail.exe and unspecified other CGI executables, which triggers an overflow when assigning values to environment variables. NOTE: some of these details are obtained from third party information.

cpe:/a:netwin:surgemail:1.8a cpe:/a:netwin:surgemail:1.8b3 cpe:/a:netwin:surgemail:1.8d cpe:/a:netwin:surgemail:1.8e cpe:/a:netwin:surgemail:1.8g3 cpe:/a:netwin:surgemail:1.9 cpe:/a:netwin:surgemail:1.9b2 cpe:/a:netwin:surgemail:2.0a2 cpe:/a:netwin:surgemail:2.0c cpe:/a:netwin:surgemail:2.0e cpe:/a:netwin:surgemail:2.0g2 cpe:/a:netwin:surgemail:2.1a cpe:/a:netwin:surgemail:2.1c7 cpe:/a:netwin:surgemail:2.2a6 cpe:/a:netwin:surgemail:2.2c9 cpe:/a:netwin:surgemail:2.2c10 cpe:/a:netwin:surgemail:2.2g2 cpe:/a:netwin:surgemail:2.2g3 cpe:/a:netwin:surgemail:3.0a cpe:/a:netwin:surgemail:3.0c2 cpe:/a:netwin:surgemail:3.8f3 cpe:/a:netwin:surgemail:38k4 cpe:/a:netwin:surgemail:39a cpe:/a:netwin:surgemail:beta_39a cpe:/a:netwin:webmail:3.1s

CVE-2008-1055

2008-02-27T14:44:00.000-05:00

2018-10-11T16:29:12.273-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://aluigi.altervista.org/adv/surgemailz-adv.txt SREASON 3705 BUGTRAQ 20080225 Format string and buffer-overflow in SurgeMail 38k4 BID 27990 SECTRACK 1019500 VUPEN ADV-2008-0678 XF surgemail-webmail-format-string(40833) Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in the page parameter.

cpe:/a:symark:powerbroker:2.8 cpe:/a:symark:powerbroker:3.0 cpe:/a:symark:powerbroker:3.2 cpe:/a:symark:powerbroker:3.5 cpe:/a:symark:powerbroker:4.0 cpe:/a:symark:powerbroker:5.0 cpe:/a:symark:powerbroker:5.01

CVE-2008-1056

2008-02-28T14:44:00.000-05:00

2017-08-07T21:29:51.323-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://www.mnin.org/advisories/2008_symarkpb.pdf BID 28015 CONFIRM http://www.symark.com/support/PBFeb2008Announcement.html XF powerbroker-argv-bo(40872) Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv[0] string when executing (1) pbrun, (2) pbsh, or (3) pbksh. NOTE: the product is often installed in environments with trust relationships that facilitate subsequent remote compromises.

cpe:/o:openbsd:openbsd:4.2

CVE-2008-1057

2008-02-28T14:44:00.000-05:00

2018-10-30T12:25:27.670-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov OPENBSD 20080225 008: RELIABILITY FIX: February 25, 2008 BID 27965 SECTRACK 1019496 VUPEN ADV-2008-0660 The ip6_check_rh0hdr function in netinet6/ip6_input.c in OpenBSD 4.2 allows attackers to cause a denial of service (panic) via malformed IPv6 routing headers.

cpe:/o:openbsd:openbsd:4.1 cpe:/o:openbsd:openbsd:4.2

CVE-2008-1058

2008-02-28T14:44:00.000-05:00

2018-10-30T12:25:27.670-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov OPENBSD 20080222 013: RELIABILITY FIX: February 22, 2008 OPENBSD 20080222 007: RELIABILITY FIX: February 22, 2008 BID 27949 SECTRACK 1019495 VUPEN ADV-2008-0660 The tcp_respond function in netinet/tcp_subr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service (panic) via crafted TCP packets. NOTE: some of these details are obtained from third party information.

cpe:/a:wordpress:sniplets_plugin:1.1.2 cpe:/a:wordpress:sniplets_plugin:1.2.2

CVE-2008-1059

2008-02-28T14:44:00.000-05:00

2018-10-11T16:29:13.117-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3706 BUGTRAQ 20080225 Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities BID 27985 XF sniplets-syntaxhighlight-file-include(40829) EXPLOIT-DB 5194 PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter.

cpe:/a:wordpress:sniplets_plugin:1.1.2 cpe:/a:wordpress:sniplets_plugin:1.2.2

CVE-2008-1060

2008-02-28T14:44:00.000-05:00

2018-10-11T16:29:13.727-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3706 BUGTRAQ 20080225 Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities BID 27985 XF sniplets-execute-code-execution(40831) EXPLOIT-DB 5194 Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via the text parameter.

cpe:/a:wordpress:sniplets_plugin:1.1.2 cpe:/a:wordpress:sniplets_plugin:1.2.2

CVE-2008-1061

2008-02-28T14:44:00.000-05:00

2018-10-11T16:29:14.333-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3706 BUGTRAQ 20080225 Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities BID 27985 XF sniplets-multiple-xss(40830) EXPLOIT-DB 5194 Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to (a) warning.php, (b) notice.php, and (c) inset.php in view/sniplets/, and possibly (d) modules/execute.php; the (2) url parameter to (e) view/admin/submenu.php; and the (3) page parameter to (f) view/admin/pager.php.

cpe:/a:intervideo:windvd_media_center:2.11.15.0

CVE-2008-1062

2008-02-28T14:44:00.000-05:00

2008-09-05T17:36:42.990-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2008-02-29T09:18:00.000-05:00

BID 28016 InterVideo IMC Server (aka IMCSvr.exe) and InterVideo Home Theater (aka IHT.exe) in InterVideo WinDVD Media Center 2.11.15.0 allow remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted packet with two CRLF sequences. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:xoops:xm-memberstats:2.0

CVE-2008-1063

2008-02-28T15:44:00.000-05:00

2017-08-07T21:29:51.573-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.xssing.com/index.php?x=3&y=12 XF xmmemberstats-sortby-xss(41001) Cross-site scripting (XSS) vulnerability index.php in the XM-Memberstats (xmmemberstats) module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the sortby parameter.

cpe:/a:xoops:xoops_rmsoft_gallery_system:2.0

CVE-2008-1064

2008-02-28T15:44:00.000-05:00

2017-08-07T21:29:51.633-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.xssing.com/index.php?x=3&y=12 XF rmsoftgallerysystem-images-xss(41013) Cross-site scripting (XSS) vulnerability in images.php in the Red Mexico RMSOFT Gallery System (GS) 2.0 module (aka rmgs) for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter.

cpe:/a:xoops:xm_memberstats:2.0e

CVE-2008-1065

2008-02-28T15:44:00.000-05:00

2008-09-05T17:36:43.443-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2008-02-29T10:49:00.000-05:00

ALLOWS_OTHER_ACCESS

BID 27979 MISC http://www.xssing.com/index.php?x=3&y=12 Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats (xmmemberstats) 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the (1) letter or (2) sortby parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:smarty:smarty:2.6.18

CVE-2008-1066

2008-02-28T15:44:00.000-05:00

2017-08-07T21:29:51.697-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://blog.s9y.org/archives/191-Serendipity-1.3-beta1-released.html SUSE SUSE-SR:2008:007 GENTOO GLSA-201111-04 DEBIAN DSA-1520 CONFIRM http://www.phpinsider.com/smarty-forum/viewtopic.php?p=47652 BID 28105 CONFIRM http://www.smarty.net/misc/NEWS XF smarty-modifierregexreplace-security-bypass(41002) FEDORA FEDORA-2008-2650 FEDORA FEDORA-2008-2587 FEDORA FEDORA-2008-2656 The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string.

cpe:/a:phpqladmin:phpqladmin:2.2.7

CVE-2008-1067

2008-02-28T16:44:00.000-05:00

2017-09-28T21:30:32.083-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

EXPLOIT-DB 5173 Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the _SESSION[path] parameter to (1) ezmlm.php and (2) tools/update_translations.php.

cpe:/a:portail_web_php:portail_web_php:2.5.1.1

CVE-2008-1068

2008-02-28T16:44:00.000-05:00

2017-09-28T21:30:32.130-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27962 EXPLOIT-DB 5182 Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) Vert/index.php, (2) Noir/index.php, and (3) Bleu/index.php in template/, different vectors than CVE-2008-0645.

cpe:/a:quantum_game_library:quantum_game_library:0.7.2c

CVE-2008-1069

2008-02-28T16:44:00.000-05:00

2017-09-28T21:30:32.190-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 27945 XF quantumgame-server-file-include(40776) EXPLOIT-DB 5174 Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[gameroot] parameter to (1) server_request.php and (2) qlib/smarty.inc.php.

cpe:/a:wireshark:wireshark:0.6 cpe:/a:wireshark:wireshark:0.7.9 cpe:/a:wireshark:wireshark:0.8.16 cpe:/a:wireshark:wireshark:0.9.10 cpe:/a:wireshark:wireshark:0.10 cpe:/a:wireshark:wireshark:0.10.4 cpe:/a:wireshark:wireshark:0.10.13 cpe:/a:wireshark:wireshark:0.99 cpe:/a:wireshark:wireshark:0.99.1 cpe:/a:wireshark:wireshark:0.99.2 cpe:/a:wireshark:wireshark:0.99.3 cpe:/a:wireshark:wireshark:0.99.4 cpe:/a:wireshark:wireshark:0.99.5 cpe:/a:wireshark:wireshark:0.99.6 cpe:/a:wireshark:wireshark:0.99.7

CVE-2008-1070

2008-02-28T17:44:00.000-05:00

2018-10-11T16:29:14.977-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SR:2008:005 GENTOO GLSA-200803-32 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092 MANDRIVA MDVSA-2008:057 REDHAT RHSA-2008:0890 BUGTRAQ 20080229 rPSA-2008-0092-1 tshark wireshark BID 28025 SECTRACK 1019515 VUPEN ADV-2008-0704 VUPEN ADV-2008-2773 CONFIRM http://www.wireshark.org/security/wnpa-sec-2008-01.html CONFIRM https://issues.rpath.com/browse/RPL-2296 FEDORA FEDORA-2008-2941 FEDORA FEDORA-2008-3040 The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.

CVE-2008-1071

2008-02-28T17:44:00.000-05:00

2018-10-11T16:29:17.677-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SR:2008:005 GENTOO GLSA-200803-32 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092 MANDRIVA MDVSA-2008:057 REDHAT RHSA-2008:0890 BUGTRAQ 20080229 rPSA-2008-0092-1 tshark wireshark BID 28025 SECTRACK 1019515 VUPEN ADV-2008-0704 VUPEN ADV-2008-2773 CONFIRM http://www.wireshark.org/security/wnpa-sec-2008-01.html CONFIRM https://issues.rpath.com/browse/RPL-2296 FEDORA FEDORA-2008-2941 FEDORA FEDORA-2008-3040 The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.

CVE-2008-1072

2008-02-28T17:44:00.000-05:00

2018-10-11T16:29:20.380-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SR:2008:005 GENTOO GLSA-200803-32 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092 MANDRIVA MDVSA-2008:057 REDHAT RHSA-2008:0890 BUGTRAQ 20080229 rPSA-2008-0092-1 tshark wireshark BID 28025 SECTRACK 1019515 VUPEN ADV-2008-0704 VUPEN ADV-2008-2773 CONFIRM http://www.wireshark.org/security/wnpa-sec-2008-01.html CONFIRM https://issues.rpath.com/browse/RPL-2296 FEDORA FEDORA-2008-2941 FEDORA FEDORA-2008-3040 The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug.

cpe:/a:internet_security_systems:internet_scanner:7.0_sp2

CVE-2008-1073

2008-02-28T19:44:00.000-05:00

2011-03-07T22:05:54.627-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov JVN JVN#42381549 BID 28014 SECTRACK 1019508 VUPEN ADV-2008-0681 Cross-site scripting (XSS) vulnerability in the report interface in Internet Security Systems (ISS) Internet Scanner 7.0 Service Pack 2 Build 7.2.2005.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:group_e:group_e:1.6.41

CVE-2008-1074

2008-02-28T19:44:00.000-05:00

2017-09-28T21:30:32.503-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://sourceforge.net/project/shownotes.php?group_id=196032&release_id=581434 BID 28024 VUPEN ADV-2008-0766 EXPLOIT-DB 5197 PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the CFG[PREPEND_FILE] parameter.

cpe:/a:maianscriptworld:maian_cart:1.1

CVE-2008-1075

2008-02-28T19:44:00.000-05:00

2008-09-05T17:36:45.067-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-29T14:45:00.000-05:00

BID 28028 Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search command. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:interspire:shopping_cart:1

CVE-2008-1076

2008-02-28T19:44:00.000-05:00

2017-08-07T21:29:51.807-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 28029 XF interspire-search-xss(40906) Cross-site scripting (XSS) vulnerability in search.php in Interspire Shopping Cart 1.x allows remote attackers to inject arbitrary web script or HTML via the search_query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:mamboportal.com:simpleboard:1.0.3_stable

CVE-2008-1077

2008-02-28T19:44:00.000-05:00

2017-09-28T21:30:32.550-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 28018 EXPLOIT-DB 5195 SQL injection vulnerability in index.php in the Simpleboard (com_simpleboard) 1.0.3 Stable component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action.

cpe:/o:gentoo:linux cpe:/o:rpath:rpath_linux

CVE-2008-1078

2008-02-28T21:44:00.000-05:00

2018-10-11T16:29:22.850-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=210158 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0088 GENTOO GLSA-200804-09 BUGTRAQ 20080228 rPSA-2008-0088-1 am-utils BID 28044 CONFIRM https://issues.rpath.com/browse/RPL-2255 FEDORA FEDORA-2008-10755 expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID] temporary file. NOTE: this is the same issue as CVE-2003-0308.1.

cpe:/a:beehive_software:sendfile.net

CVE-2008-1079

2008-03-04T13:44:00.000-05:00

2018-10-11T16:29:23.740-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3711 BUGTRAQ 20080229 Beehive/SendFile.NET - Secure File Transfer Appliance Hardcoded Credentials BID 28060 XF sendfile-sendfilejar-weak-security(40982) The outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile.NET uses hard-coded credentials for an FTP server, which allows remote attackers to gain privileges.

cpe:/a:opera:opera_browser:1.00 cpe:/a:opera:opera_browser:2.00 cpe:/a:opera:opera_browser:2.10 cpe:/a:opera:opera_browser:2.10:beta1 cpe:/a:opera:opera_browser:2.10:beta2 cpe:/a:opera:opera_browser:2.10:beta3 cpe:/a:opera:opera_browser:2.12 cpe:/a:opera:opera_browser:3.00 cpe:/a:opera:opera_browser:3.00:beta cpe:/a:opera:opera_browser:3.10 cpe:/a:opera:opera_browser:3.21 cpe:/a:opera:opera_browser:3.50 cpe:/a:opera:opera_browser:3.51 cpe:/a:opera:opera_browser:3.60 cpe:/a:opera:opera_browser:3.61 cpe:/a:opera:opera_browser:3.62 cpe:/a:opera:opera_browser:3.62:beta cpe:/a:opera:opera_browser:4.00 cpe:/a:opera:opera_browser:4.00:beta2 cpe:/a:opera:opera_browser:4.00:beta3 cpe:/a:opera:opera_browser:4.00:beta4 cpe:/a:opera:opera_browser:4.00:beta5 cpe:/a:opera:opera_browser:4.00:beta6 cpe:/a:opera:opera_browser:4.01 cpe:/a:opera:opera_browser:4.02 cpe:/a:opera:opera_browser:5.0 cpe:/a:opera:opera_browser:5.0:beta2 cpe:/a:opera:opera_browser:5.0:beta3 cpe:/a:opera:opera_browser:5.0:beta4 cpe:/a:opera:opera_browser:5.0:beta5 cpe:/a:opera:opera_browser:5.0:beta6 cpe:/a:opera:opera_browser:5.0:beta7 cpe:/a:opera:opera_browser:5.0:beta8 cpe:/a:opera:opera_browser:5.02 cpe:/a:opera:opera_browser:5.10 cpe:/a:opera:opera_browser:5.11 cpe:/a:opera:opera_browser:5.12 cpe:/a:opera:opera_browser:6.0 cpe:/a:opera:opera_browser:6.0:beta1 cpe:/a:opera:opera_browser:6.0:beta2 cpe:/a:opera:opera_browser:6.0:tp1 cpe:/a:opera:opera_browser:6.0:tp2 cpe:/a:opera:opera_browser:6.0:tp3 cpe:/a:opera:opera_browser:6.01 cpe:/a:opera:opera_browser:6.1:beta1 cpe:/a:opera:opera_browser:6.02 cpe:/a:opera:opera_browser:6.03 cpe:/a:opera:opera_browser:6.04 cpe:/a:opera:opera_browser:6.05 cpe:/a:opera:opera_browser:6.06 cpe:/a:opera:opera_browser:6.11 cpe:/a:opera:opera_browser:6.12 cpe:/a:opera:opera_browser:7.0 cpe:/a:opera:opera_browser:7.0:beta1 cpe:/a:opera:opera_browser:7.0:beta1_v2 cpe:/a:opera:opera_browser:7.0:beta2 cpe:/a:opera:opera_browser:7.01 cpe:/a:opera:opera_browser:7.02 cpe:/a:opera:opera_browser:7.03 cpe:/a:opera:opera_browser:7.10 cpe:/a:opera:opera_browser:7.10:beta1 cpe:/a:opera:opera_browser:7.11 cpe:/a:opera:opera_browser:7.11:beta2 cpe:/a:opera:opera_browser:7.20 cpe:/a:opera:opera_browser:7.20:beta7 cpe:/a:opera:opera_browser:7.21 cpe:/a:opera:opera_browser:7.22 cpe:/a:opera:opera_browser:7.23 cpe:/a:opera:opera_browser:7.50 cpe:/a:opera:opera_browser:7.50:beta1 cpe:/a:opera:opera_browser:7.51 cpe:/a:opera:opera_browser:7.52 cpe:/a:opera:opera_browser:7.53 cpe:/a:opera:opera_browser:7.54 cpe:/a:opera:opera_browser:7.54:update1 cpe:/a:opera:opera_browser:7.54:update2 cpe:/a:opera:opera_browser:7.60 cpe:/a:opera:opera_browser:8.0 cpe:/a:opera:opera_browser:8.0:beta1 cpe:/a:opera:opera_browser:8.0:beta2 cpe:/a:opera:opera_browser:8.0:beta3 cpe:/a:opera:opera_browser:8.01 cpe:/a:opera:opera_browser:8.02 cpe:/a:opera:opera_browser:8.50 cpe:/a:opera:opera_browser:8.51 cpe:/a:opera:opera_browser:8.52 cpe:/a:opera:opera_browser:8.53 cpe:/a:opera:opera_browser:8.54 cpe:/a:opera:opera_browser:9.0 cpe:/a:opera:opera_browser:9.0:beta1 cpe:/a:opera:opera_browser:9.0:beta2 cpe:/a:opera:opera_browser:9.01 cpe:/a:opera:opera_browser:9.02 cpe:/a:opera:opera_browser:9.10 cpe:/a:opera:opera_browser:9.12 cpe:/a:opera:opera_browser:9.20 cpe:/a:opera:opera_browser:9.20:beta1 cpe:/a:opera:opera_browser:9.21 cpe:/a:opera:opera_browser:9.22 cpe:/a:opera:opera_browser:9.23 cpe:/a:opera:opera_browser:9.24 cpe:/a:opera:opera_browser:9.25

CVE-2008-1080

2008-02-28T21:44:00.000-05:00

2012-06-07T13:58:51.290-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2008-02-29T15:16:00.000-05:00

SUSE SUSE-SA:2008:011 GENTOO GLSA-200803-09 CONFIRM http://www.opera.com/docs/changelogs/linux/926/ CONFIRM http://www.opera.com/support/search/view/877/ BID 27901 VUPEN ADV-2008-0622 Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input.

CVE-2008-1081

2008-02-28T21:44:00.000-05:00

2012-06-07T14:02:04.023-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2008-02-29T15:19:00.000-05:00

ALLOWS_OTHER_ACCESS

SUSE SUSE-SA:2008:011 GENTOO GLSA-200803-09 CONFIRM http://www.opera.com/docs/changelogs/linux/926/ CONFIRM http://www.opera.com/support/search/view/879/ BID 27901 VUPEN ADV-2008-0622 Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties.

CVE-2008-1082

2008-02-28T21:44:00.000-05:00

2012-06-07T14:06:31.273-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-02-29T15:22:00.000-05:00

SUSE SUSE-SA:2008:011 GENTOO GLSA-200803-09 CONFIRM http://www.opera.com/docs/changelogs/linux/926/ CONFIRM http://www.opera.com/support/search/view/880/ BID 27901 VUPEN ADV-2008-0622 Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting (XSS) attacks via crafted attribute values in an XML document, which are not properly handled during DOM presentation.

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:::x64 cpe:/o:microsoft:windows_2003_server::sp1 cpe:/o:microsoft:windows_2003_server::sp1:itanium cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_2003_server::sp2:x64 cpe:/o:microsoft:windows_server_2008:-::itanium cpe:/o:microsoft:windows_server_2008:-::x64 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista:-:sp1 cpe:/o:microsoft:windows_vista:-:sp1:x64 cpe:/o:microsoft:windows_xp::sp2

CVE-2008-1083

2008-04-08T19:05:00.000-04:00

2018-10-30T12:25:49.030-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov FULLDISC 20080408 ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability IDEFENSE 20080408 Microsoft Windows Graphics Rendering Engine Integer Overflow Vulnerability HP SSRT080048 MSKB 948590 CERT-VN VU#632963 BUGTRAQ 20080408 ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability BID 28571 BID 30933 SECTRACK 1019798 CERT TA08-099A VUPEN ADV-2008-1145 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-020/ MS MS08-021 XF win-emf-wmf-header-bo(41471) EXPLOIT-DB 5442 EXPLOIT-DB 6330 Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka "GDI Heap Overflow Vulnerability."

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:::x64 cpe:/o:microsoft:windows_2003_server::sp1 cpe:/o:microsoft:windows_2003_server::sp1:itanium cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_2003_server::sp2:x64 cpe:/o:microsoft:windows_server_2008:- cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_xp:::x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp2:x64

CVE-2008-1084

2008-04-08T19:05:00.000-04:00

2018-10-12T17:45:11.023-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT080048 MISC http://milw0rm.com/sploits/2008-ms08-25-exploit.zip BID 28554 SECTRACK 1019803 CERT TA08-099A VUPEN ADV-2008-1149 MS MS08-025 EXPLOIT-DB 5518 Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary code via unknown vectors related to improper input validation. NOTE: it was later reported that one affected function is NtUserFnOUTSTRING in win32k.sys.

cpe:/a:microsoft:ie:5.01:windows_2000_sp4 cpe:/a:microsoft:ie:6:windows_server_2003_sp1 cpe:/a:microsoft:ie:6:windows_server_2003_sp1_itanium cpe:/a:microsoft:ie:6:windows_xp_sp2 cpe:/a:microsoft:ie:7::windows_server_2003 cpe:/a:microsoft:ie:7:windows_server_2003_sp1 cpe:/a:microsoft:ie:7:windows_xp_sp2 cpe:/a:microsoft:internet_explorer:6::windows_server_2003_sp2 cpe:/a:microsoft:internet_explorer:6::windows_server_2003_sp2_itanium cpe:/a:microsoft:internet_explorer:6::windows_server_2003_x64_edition cpe:/a:microsoft:internet_explorer:6::windows_server_2003_x64_edition_sp2 cpe:/a:microsoft:internet_explorer:6::windows_xp_professional_x64_edition cpe:/a:microsoft:internet_explorer:6::windows_xp_professional_x64_edition_sp2 cpe:/a:microsoft:internet_explorer:7::windows_server_2003_sp2 cpe:/a:microsoft:internet_explorer:7::windows_server_2003_sp2_itanium cpe:/a:microsoft:internet_explorer:7::windows_server_2003_x64_edition cpe:/a:microsoft:internet_explorer:7::windows_server_2003_x64_edition_sp2 cpe:/a:microsoft:internet_explorer:7::windows_server_2008_itanium_edition cpe:/a:microsoft:internet_explorer:7::windows_server_2008_x32_edition cpe:/a:microsoft:internet_explorer:7::windows_server_2008_x64_edition cpe:/a:microsoft:internet_explorer:7::windows_vista cpe:/a:microsoft:internet_explorer:7::windows_vista_x64 cpe:/a:microsoft:internet_explorer:7::windows_xp_professional_x64_edition cpe:/a:microsoft:internet_explorer:7::windows_xp_professional_x64_edition_sp2

CVE-2008-1085

2008-04-08T19:05:00.000-04:00

2018-10-12T17:45:12.413-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080048 BUGTRAQ 20080414 Secunia Research: Internet Explorer Data Stream HandlingVulnerability BID 28552 SECTRACK 1019801 CERT TA08-099A VUPEN ADV-2008-1148 MS MS08-024 Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream that triggers memory corruption, as demonstrated using an invalid MIME-type that does not have a registered handler.

cpe:/a:microsoft:ie:5.01:sp4 cpe:/a:microsoft:ie:6:sp1 cpe:/o:microsoft:windows-nt:2008::itanium cpe:/o:microsoft:windows-nt:2008::x32 cpe:/o:microsoft:windows-nt:2008::x64 cpe:/o:microsoft:windows_2003_server:::x64 cpe:/o:microsoft:windows_2003_server::sp1 cpe:/o:microsoft:windows_2003_server::sp1:itanium cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_2003_server::sp2:x64 cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_xp:::x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp2:x64

CVE-2008-1086

2008-04-08T19:05:00.000-04:00

2018-10-12T17:45:13.477-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20080408 Microsoft HxTocCtrl ActiveX Control Invalid Param Heap Corruption Vulnerability HP SSRT080048 BID 28606 SECTRACK 1019800 CERT TA08-099A VUPEN ADV-2008-1147 MS MS08-023 XF ie-hxvz-code-execution(41464) The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption.

cpe:/o:microsoft:windows-nt:2008::itanium cpe:/o:microsoft:windows-nt:2008::x32 cpe:/o:microsoft:windows-nt:2008::x64 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:::x64 cpe:/o:microsoft:windows_2003_server::sp1 cpe:/o:microsoft:windows_2003_server::sp1:itanium cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_2003_server::sp2:x64 cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_xp:::x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp2:x64

CVE-2008-1087

2008-04-08T19:05:00.000-04:00

2018-10-12T17:45:14.523-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT080048 BID 28570 SECTRACK 1019798 CERT TA08-099A VUPEN ADV-2008-1145 MS MS08-021 EXPLOIT-DB 5442 EXPLOIT-DB 6656 Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."

cpe:/a:microsoft:project:2000:sr1 cpe:/a:microsoft:project:2002:sp1 cpe:/a:microsoft:project:2003:sp2

CVE-2008-1088

2008-04-08T19:05:00.000-04:00

2018-10-12T17:45:15.617-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080048 CERT-VN VU#155563 BID 28607 SECTRACK 1019797 CERT TA08-099A VUPEN ADV-2008-1142 MS MS08-018 XF project-file-code-execution(41447) Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of "memory resource allocations."

cpe:/a:microsoft:office:2003:sp2 cpe:/a:microsoft:office:2003:sp3 cpe:/a:microsoft:office:2007 cpe:/a:microsoft:office:2007_sp1 cpe:/a:microsoft:office:xp:sp2 cpe:/a:microsoft:visio:2002:sp2 cpe:/a:microsoft:visio:2003:sp1 cpe:/a:microsoft:visio:2003_sp3 cpe:/a:microsoft:visio:2007 cpe:/a:microsoft:visio:2007_sp1

CVE-2008-1089

2008-04-08T19:05:00.000-04:00

2018-10-12T17:45:16.523-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT080048 BID 28555 SECTRACK 1019804 CERT TA08-099A VUPEN ADV-2008-1143 MS MS08-019 XF visio-object-header-code-execution(41451) Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability."

CVE-2008-1090

2008-04-08T19:05:00.000-04:00

2018-10-12T17:45:17.350-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP SSRT080048 BID 28556 SECTRACK 1019804 CERT TA08-099A VUPEN ADV-2008-1143 MS MS08-019 XF visio-file-code-execution(41452) Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerability."

cpe:/a:microsoft:office:2000:sp3 cpe:/a:microsoft:office:2003:sp2 cpe:/a:microsoft:office:2003:sp3 cpe:/a:microsoft:office:2004::mac cpe:/a:microsoft:office:2007 cpe:/a:microsoft:office:2007_sp1 cpe:/a:microsoft:office:2008::mac cpe:/a:microsoft:office:xp:sp3 cpe:/a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007 cpe:/a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:::sp1 cpe:/a:microsoft:word_viewer:2003 cpe:/a:microsoft:word_viewer:2003::sp3

CVE-2008-1091

2008-05-13T18:20:00.000-04:00

2018-10-12T17:45:18.257-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT080071 CERT-VN VU#543907 BUGTRAQ 20080513 ZDI-08-023: Microsoft Office RTF Parsing Engine Memory Corruption Vulnerability BID 29104 SECTRACK 1020013 CERT TA08-134A VUPEN ADV-2008-1504 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-023 MS MS08-026 Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a "memory calculation error" and a heap-based buffer overflow, aka "Object Parsing Vulnerability."

cpe:/a:microsoft:word:2000:sp3 cpe:/a:microsoft:word:2002:sp3 cpe:/a:microsoft:word:2003:sp2 cpe:/a:microsoft:word:2003_sp3 cpe:/a:microsoft:word:2007 cpe:/a:microsoft:word:2007_sp1

CVE-2008-1092

2008-03-25T12:44:00.000-04:00

2018-10-30T12:25:28.170-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT080071 CERT-VN VU#936529 MSKB 950627 SECTRACK 1019686 MS MS08-028 XF microsoft-jet-msjet40-bo(41380) Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026.

cpe:/a:acresso:flexnet_connect cpe:/a:acresso:intallshield_update_agent

CVE-2008-1093

2008-09-18T11:04:27.093-04:00

2018-10-11T16:29:28.617-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SREASON 4268 CERT-VN VU#837092 BUGTRAQ 20080916 InstallShield Update Agent - Downloads and executes "Rule Scripts" insecurely. BID 31204 SECTRACK 1020893 MISC http://www.simplicity.net/vuln/CVE-2008-1093.txt VUPEN ADV-2008-2613 Acresso InstallShield Update Agent does not properly verify the authenticity of Rule Scripts obtained from GetRules.asp web pages on FLEXnet Connect servers, which allows remote man-in-the-middle attackers to execute arbitrary VBScript code via Trojan horse Rules.

cpe:/h:barracuda_networks:barracuda_spam_firewall:3.5.11.020

CVE-2008-1094

2008-12-19T12:30:02.827-05:00

2018-10-11T16:29:29.240-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://dcsl.ul.ie/advisories/02.htm SREASON 4793 SECTRACK 1021455 CONFIRM http://www.barracudanetworks.com/ns/support/tech_alert.php BUGTRAQ 20081216 CVE-2008-1094 - Barracuda Span Firewall SQL Injection Vulnerability EXPLOIT-DB 7496 SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a pattern_x parameter in a search_count_equals action, as demonstrated by the pattern_0 parameter.

cpe:/o:sun:solaris:8::x86 cpe:/o:sun:solaris:9::x86 cpe:/o:sun:solaris:10::x86 cpe:/o:sun:sunos:5.8 cpe:/o:sun:sunos:5.9 cpe:/o:sun:sunos:5.10

CVE-2008-1095

2008-02-29T06:44:00.000-05:00

2018-10-30T12:25:15.027-04:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov SUNALERT 200183 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-119.htm BID 27967 VUPEN ADV-2008-0645 XF solaris-ip-dos(40473) Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service (panic) via unknown vectors, possibly related to ICMP packets and IP fragment reassembly.

cpe:/a:imagemagick:graphicsmagick:1.1.7 cpe:/a:imagemagick:graphicsmagick:1.1.8 cpe:/a:imagemagick:graphicsmagick:1.1.9 cpe:/a:imagemagick:graphicsmagick:1.1.10 cpe:/a:imagemagick:graphicsmagick:1.1.11 cpe:/a:imagemagick:graphicsmagick:1.1.12 cpe:/a:imagemagick:imagemagick:6.2.8.0 cpe:/a:imagemagick:imagemagick:6.2.8.1 cpe:/a:imagemagick:imagemagick:6.2.8.2 cpe:/a:imagemagick:imagemagick:6.2.8.3

CVE-2008-1096

2008-03-05T15:44:00.000-05:00

2017-09-28T21:30:33.440-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414370 SUSE SUSE-SR:2008:014 DEBIAN DSA-1858 MANDRIVA MDVSA-2008:099 REDHAT RHSA-2008:0145 BID 28821 SECTRACK 1019880 UBUNTU USN-681-1 MISC https://bugzilla.redhat.com/show_bug.cgi?id=286411 XF imagemagick-loadtile-code-execution(41194) The load_tile function in the XCF coder in coders/xcf.c in (1) ImageMagick 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .xcf file that triggers an out-of-bounds heap write, possibly related to the ScaleCharToQuantum function.

CVE-2008-1097

2008-03-05T15:44:00.000-05:00

2017-09-28T21:30:33.503-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413034 SUSE SUSE-SR:2008:014 GENTOO GLSA-201311-10 DEBIAN DSA-1858 MANDRIVA MDVSA-2008:099 REDHAT RHSA-2008:0145 REDHAT RHSA-2008:0165 BID 28822 SECTRACK 1019881 MISC https://bugzilla.redhat.com/show_bug.cgi?id=285861 XF imagemagick-readpcximage-bo(41193) Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .pcx file that triggers incorrect memory allocation for the scanline array, leading to memory corruption.

cpe:/a:moinmoin:moinmoin:1.5.8

CVE-2008-1098

2008-03-05T15:44:00.000-05:00

2018-10-03T17:53:20.590-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://hg.moinmo.in/moin/1.5/rev/4ede07e792dd CONFIRM http://hg.moinmo.in/moin/1.5/rev/d0152eeb4499 CONFIRM http://moinmo.in/SecurityFixes DEBIAN DSA-1514 GENTOO GLSA-200803-27 BID 28173 XF moinmoin-multiple-actions-xss(41037) UBUNTU USN-716-1 FEDORA FEDORA-2008-3301 FEDORA FEDORA-2008-3328 Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) certain input processed by formatter/text_gedit.py (aka the gui editor formatter); (2) a page name, which triggers an injection in PageEditor.py when the page is successfully deleted by a victim in a DeletePage action; or (3) the destination page name for a RenamePage action, which triggers an injection in PageEditor.py when a victim's rename attempt fails because of a duplicate name. NOTE: the AttachFile XSS issue is already covered by CVE-2008-0781, and the login XSS issue is already covered by CVE-2008-0780.

cpe:/a:moinmoin:moinmoin:1.5.8

CVE-2008-1099

2008-03-05T15:44:00.000-05:00

2018-10-03T17:53:21.917-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://hg.moinmo.in/moin/1.5/rev/4a7de0173734 CONFIRM http://moinmo.in/SecurityFixes DEBIAN DSA-1514 GENTOO GLSA-200803-27 BID 28177 XF moinmoin-macrogetval-information-disclosure(41038) UBUNTU USN-716-1 FEDORA FEDORA-2008-3301 FEDORA FEDORA-2008-3328 _macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages.

cpe:/a:clam_anti-virus:clamav:0.92 cpe:/a:clam_anti-virus:clamav:0.92.1

CVE-2008-1100

2008-04-14T12:05:00.000-04:00

2017-08-07T21:29:52.650-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://kolab.org/security/kolab-vendor-notice-20.txt APPLE APPLE-SA-2008-09-15 SUSE SUSE-SA:2008:024 SUSE openSUSE-SU-2015:0906 GENTOO GLSA-200805-19 DEBIAN DSA-1549 CERT-VN VU#858595 MANDRIVA MDVSA-2008:088 BID 28756 BID 28784 SECTRACK 1019837 CERT TA08-260A VUPEN ADV-2008-1218 VUPEN ADV-2008-2584 XF clamav-cliscanpe-bo(41789) FEDORA FEDORA-2008-3358 FEDORA FEDORA-2008-3420 FEDORA FEDORA-2008-3900 CONFIRM https://wwws.clamav.net/bugzilla/show_bug.cgi?id=878 Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file.

cpe:/a:autonomy:keyview:2.0.0.2 cpe:/a:autonomy:keyview:10.3.0.0 cpe:/a:ibm:lotus_notes:6.0 cpe:/a:ibm:lotus_notes:6.5 cpe:/a:ibm:lotus_notes:7.0 cpe:/a:ibm:lotus_notes:7.0.2 cpe:/a:ibm:lotus_notes:7.0.3

CVE-2008-1101

2008-04-10T14:05:00.000-04:00

2018-10-11T16:29:29.850-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20080414 Secunia Research: Lotus Notes kvdocve.dll Path Processing BufferOverflow BID 28454 VUPEN ADV-2008-1153 VUPEN ADV-2008-1156 CONFIRM http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453 XF autonomy-keyview-kvdocve-bo(41725) Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows remote attackers to execute arbitrary code via a long pathname, as demonstrated by a long SRC attribute of an IMG element in an HTML document.

cpe:/a:blender:blender:2.45

CVE-2008-1102

2008-04-22T00:41:00.000-04:00

2017-08-07T21:29:52.777-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SUSE SUSE-SR:2008:010 DEBIAN DSA-1567 GENTOO GLSA-200805-12 MANDRIVA MDVSA-2008:204 BID 28870 VUPEN ADV-2008-1308 XF blender-imbloadhdr-bo(41917) FEDORA FEDORA-2008-3862 FEDORA FEDORA-2008-3875 Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image.

cpe:/a:blender:blender

CVE-2008-1103

2008-04-28T16:05:00.000-04:00

2017-08-07T21:29:52.823-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SUSE SUSE-SR:2008:010 GENTOO GLSA-200805-12 MANDRIVA MDVSA-2008:204 BID 28936 XF blender-file-unspecified(42153) Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."

cpe:/a:foxitsoftware:foxit_reader:2.0 cpe:/a:foxitsoftware:foxit_reader:2.2 cpe:/a:foxitsoftware:foxit_reader:2.3

CVE-2008-1104

2008-05-21T09:24:00.000-04:00

2018-10-11T16:29:30.740-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SREASON 3899 CONFIRM http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801 CERT-VN VU#119747 BUGTRAQ 20080520 Secunia Research: Foxit Reader "util.printf()" Buffer Overflow BID 29288 SECTRACK 1020050 VUPEN ADV-2008-1572 XF foxitreader-utilprintf-bo(42531) Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings.

cpe:/a:samba:samba:3.0.28a cpe:/a:samba:samba:3.0.29

CVE-2008-1105

2008-05-29T12:32:00.000-04:00

2018-10-11T16:29:31.727-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2008-06-30 SUSE SUSE-SA:2008:026 MLIST [Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix GENTOO GLSA-200805-23 SECTRACK 1020123 SLACKWARE SSA:2008-149-01 SUNALERT 249086 CONFIRM http://support.apple.com/kb/HT2163 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0180 DEBIAN DSA-1590 MANDRIVA MDVSA-2008:108 REDHAT RHSA-2008:0288 REDHAT RHSA-2008:0289 REDHAT RHSA-2008:0290 CONFIRM http://www.samba.org/samba/security/CVE-2008-1105.html BUGTRAQ 20080528 [SAMBA] CVE-2008-1105 - Boundary failure when parsing SMB responses BUGTRAQ 20080529 Secunia Research: Samba "receive_smb_raw()" Buffer OverflowVulnerability BUGTRAQ 20080602 rPSA-2008-0180-1 samba samba-client samba-server samba-swat BID 29404 BID 31255 UBUNTU USN-617-1 UBUNTU USN-617-2 VUPEN ADV-2008-1681 VUPEN ADV-2008-1908 VUPEN ADV-2008-1981 VUPEN ADV-2008-2222 VUPEN ADV-2008-2639 CONFIRM http://www.xerox.com/downloads/usa/en/c/cert_XRX08_009.pdf HP HPSBUX02341 XF samba-receivesmbraw-bo(42664) XF xerox-controller-samba-code-execution(45251) EXPLOIT-DB 5712 FEDORA FEDORA-2008-4679 FEDORA FEDORA-2008-4724 FEDORA FEDORA-2008-4797 Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.

cpe:/a:akamai_technologies:client:3322 cpe:/a:red_swoosh:client:3322

CVE-2008-1106

2008-06-09T19:32:00.000-04:00

2018-10-11T16:29:40.367-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

NONE

http://nvd.nist.gov SREASON 3930 BUGTRAQ 20080606 Akamai Technologies Security Advisory 2008-0003 (Akamai Client Software) BUGTRAQ 20080606 Secunia Research: Akamai Red Swoosh Cross-Site Request Forgery SECTRACK 1020208 VUPEN ADV-2008-1761 XF redswoosh-http-csrf(42895) The management interface in Akamai Client (formerly Red Swoosh) 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains (1) no Referer header, or (2) a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and force the client to download and execute arbitrary files.

cpe:/a:danskebank:danskesikker.ocx:3.1.0.48

CVE-2008-1107

2009-04-16T20:30:00.217-04:00

2018-10-11T16:29:41.147-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20090416 Secunia Research: Danske Bank e-Sec Control Module Error Logging Buffer Overflow BID 34549 VUPEN ADV-2009-1047 XF danske-esec-activex-bo(49903) Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control (DanskeSikker.ocx) 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function.

cpe:/a:gnome:evolution:2.2.1

CVE-2008-1108

2008-06-04T16:32:00.000-04:00

2017-09-28T21:30:33.723-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SUSE SUSE-SA:2008:028 GENTOO GLSA-200806-06 MANDRIVA MDVSA-2008:111 REDHAT RHSA-2008:0514 REDHAT RHSA-2008:0515 REDHAT RHSA-2008:0516 REDHAT RHSA-2008:0517 BID 29527 SECTRACK 1020169 UBUNTU USN-615-1 VUPEN ADV-2008-1732 XF evolution-icalendar-bo(42824) FEDORA FEDORA-2008-4990 FEDORA FEDORA-2008-5016 FEDORA FEDORA-2008-5018 Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.

cpe:/a:gnome:evolution:2.22.1

CVE-2008-1109

2008-06-04T16:32:00.000-04:00

2017-09-28T21:30:33.787-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SA:2008:028 GENTOO GLSA-200806-06 MANDRIVA MDVSA-2008:111 REDHAT RHSA-2008:0514 REDHAT RHSA-2008:0515 BID 29527 SECTRACK 1020170 UBUNTU USN-615-1 VUPEN ADV-2008-1732 XF evolution-icalendar-description-bo(42826) FEDORA FEDORA-2008-4990 FEDORA FEDORA-2008-5016 FEDORA FEDORA-2008-5018 Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window).

cpe:/a:xine:xine-lib:1.1.9 cpe:/a:xine:xine-plugin:1.1.9

CVE-2008-1110

2008-02-29T14:44:00.000-05:00

2017-09-28T21:30:33.847-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=208100 CONFIRM http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=fb6d089b520dca199ef16a046da28c50c984c2d2;style=gitweb GENTOO GLSA-200802-12 CONFIRM http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=571608 MANDRIVA MDVSA-2008:178 UBUNTU USN-635-1 CONFIRM http://xinehq.de/index.php/news CONFIRM http://xinehq.de/index.php/security XF xinelib-demuxasf-bo(41019) EXPLOIT-DB 1641 Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-1664 exploit code, but it is different from CVE-2006-1664.

cpe:/a:lighttpd:lighttpd:1.4.18

CVE-2008-1111

2008-03-04T18:44:00.000-05:00

2018-10-11T16:29:41.773-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE SUSE-SR:2008:008 GENTOO GLSA-200803-10 CONFIRM http://trac.lighttpd.net/trac/changeset/2107 MISC http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0106 DEBIAN DSA-1513 BUGTRAQ 20080312 rPSA-2008-0106-1 lighttpd BID 28100 VUPEN ADV-2008-0763 CONFIRM https://bugs.gentoo.org/show_bug.cgi?id=211956 XF lighttpd-modcgi-information-disclosure(41008) MISC https://issues.rpath.com/browse/RPL-2326 FEDORA FEDORA-2008-2262 FEDORA FEDORA-2008-2278 mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information.

CVE-2008-1112

2008-03-03T13:44:00.000-05:00

2008-03-05T00:00:00.000-05:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-0928. Reason: This candidate is a duplicate of CVE-2008-0928. Notes: All CVE users should reference CVE-2008-0928 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:vocera_communications:vocera_communications_badge

CVE-2008-1113

2008-03-03T13:44:00.000-05:00

2008-09-05T17:36:50.757-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov

2008-03-04T08:21:00.000-05:00

MISC http://blogs.zdnet.com/security/?p=896 MISC http://blogs.zdnet.com/security/?p=901 FULLDISC 20080221 Cisco and Vocera wireless LAN VoIP devices don't check certificates FULLDISC 20080223 Cisco confirms vulnerability in 7921 Wi-Fi IP phone SECTRACK 1019494 BID 27935 Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.

cpe:/h:vocera:wireless_handset:-

CVE-2008-1114

2008-03-03T13:44:00.000-05:00

2013-01-03T00:00:00.000-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-03-04T08:29:00.000-05:00

MISC http://blogs.zdnet.com/security/?p=896 MISC http://blogs.zdnet.com/security/?p=901 FULLDISC 20080221 Cisco and Vocera wireless LAN VoIP devices don't check certificates BID 27935 CONFIRM http://www.vocera.com/downloads/InfrastructureGuide.pdf Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.

cpe:/o:sun:solaris:8::sparc cpe:/o:sun:solaris:8::x86

CVE-2008-1115

2008-03-03T13:44:00.000-05:00

2017-09-28T21:30:33.910-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov SUNALERT 200163 BID 28069 VUPEN ADV-2008-0644 Unspecified vulnerability in Sun Solaris 8 directory functions allows local users to cause a denial of service (panic) via an unspecified sequence of system calls or commands.

cpe:/a:rising_antivirus_international:rising_web_scan_object:18.0.7

CVE-2008-1116

2008-03-03T13:44:00.000-05:00

2017-09-28T21:30:33.973-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 27997 VUPEN ADV-2008-0683 XF risingonline-webscan-code-execution(40838) EXPLOIT-DB 5188 Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are obtained from third party information.

cpe:/a:netopia:timbuktu_pro:8.6.5::windows

CVE-2008-1117

2008-03-14T16:44:00.000-04:00

2018-10-11T16:29:43.647-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/timbuto-adv.txt MISC http://aluigi.org/poc/timbuto.zip SREASON 3741 MISC http://www.coresecurity.com/?action=item&id=2166 BUGTRAQ 20080310 Vulnerabilities in Timbuktu Pro 8.6.5 BUGTRAQ 20080311 Re: [Full-disclosure] Vulnerabilities in Timbuktu Pro 8.6.5 BUGTRAQ 20080311 CORE-2008-0204: Timbuktu Pro Remote Path Traversal and Log Injection BID 28081 VUPEN ADV-2008-0840 EXPLOIT-DB 4455 EXPLOIT-DB 5238 Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \ (backslash) character followed by ../ (dot dot slash) sequences. NOTE: this can be leveraged for code execution by writing to a Startup folder. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4220.

cpe:/a:netopia:timbuktu_pro:8.6.5::windows

CVE-2008-1118

2008-03-14T16:44:00.000-04:00

2018-10-11T16:29:44.960-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SREASON 3742 MISC http://www.coresecurity.com/?action=item&id=2166 BUGTRAQ 20080311 CORE-2008-0204: Timbuktu Pro Remote Path Traversal and Log Injection BID 28081 XF timbuktu-log-security-bypass(41330) EXPLOIT-DB 5238 Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified (1) computer name, (2) user name, and (3) IP address fields.

cpe:/a:centreon:centreon:1.4 cpe:/a:centreon:centreon:1.4.1 cpe:/a:centreon:centreon:1.4.2 cpe:/a:centreon:centreon:1.4.2.1 cpe:/a:centreon:centreon:1.4.2.2 cpe:/a:centreon:centreon:1.4.2.3

CVE-2008-1119

2008-03-03T17:44:00.000-05:00

2017-09-28T21:30:34.177-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.centreon.com/Product/Changelog-Centreon-1.4.x.html BID 28022 EXPLOIT-DB 5204 Directory traversal vulnerability in include/doc/get_image.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter.

cpe:/a:icq:mirabilis_icq:6:build_6043

CVE-2008-1120

2008-03-03T17:44:00.000-05:00

2011-03-07T22:05:59.110-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://board.raidrush.ws/showthread.php?t=386983 BID 28027 VUPEN ADV-2008-0701 Format string vulnerability in the embedded Internet Explorer component for Mirabilis ICQ 6 build 6043 allows remote servers to execute arbitrary code or cause a denial of service (crash) via unspecified vectors related to HTML code generation.

cpe:/a:eazyportal:eazyportal:1.0

CVE-2008-1121

2008-03-03T17:44:00.000-05:00

2017-09-28T21:30:34.237-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 28019 EXPLOIT-DB 5196 SQL injection vulnerability in index.php in eazyPortal 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the session_vars cookie.

cpe:/a:dream4:koobi_pro:5.7

CVE-2008-1122

2008-03-03T17:44:00.000-05:00

2018-10-11T16:29:45.633-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20080415 Koobi CMS 4.2.4/4.2.5/4.3.0 Multiple Remote SQL Injection Vulnerabilities BID 28031 XF koobi-categ-sql-injection(40903) EXPLOIT-DB 5198 EXPLOIT-DB 5447 SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php. NOTE: it was later reported that this also affects Koobi CMS 4.2.4, 4.2.5, and 4.3.0.

cpe:/a:sitebuilder:sitebuilder_elite:1.2

CVE-2008-1123

2008-03-03T17:44:00.000-05:00

2017-09-28T21:30:34.380-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 28036 EXPLOIT-DB 5199 Multiple PHP remote file inclusion vulnerabilities in SiteBuilder Elite 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the CarpPath parameter to (1) files/carprss.php and (2) files/amazon-bestsellers.php.

cpe:/a:podcast_generator:podcast_generator:1.0:beta_2

CVE-2008-1124

2008-03-03T17:44:00.000-05:00

2017-09-28T21:30:34.440-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 28038 EXPLOIT-DB 5200 Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absoluteurl parameter to (1) components/xmlparser/loadparser.php; (2) admin.php, (3) categories.php, (4) categories_add.php, (5) categories_remove.php, (6) edit.php, (7) editdel.php, (8) ftpfeature.php, (9) login.php, (10) pgRSSnews.php, (11) showcat.php, and (12) upload.php in core/admin/; and (13) archive_cat.php, (14) archive_nocat.php, and (15) recent_list.php in core/.

cpe:/a:podcast_generator:podcast_generator:1.0:beta_2

CVE-2008-1125

2008-03-03T17:44:00.000-05:00

2017-09-28T21:30:34.503-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 28038 EXPLOIT-DB 5200 Multiple directory traversal vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) theme_path parameter to core/themes.php and the (2) filename parameter to download.php.

cpe:/a:barryvan_compo:barryvan_compo_manager:0.3

CVE-2008-1126

2008-03-03T17:44:00.000-05:00

2017-09-28T21:30:34.567-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 28035 EXPLOIT-DB 5202 PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the pageURL parameter.

cpe:/a:crytek:crysis:1.1.1.5879

CVE-2008-1127

2008-03-03T18:44:00.000-05:00

2017-09-28T21:30:34.613-04:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 28039 VUPEN ADV-2008-0735 EXPLOIT-DB 5201 Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute arbitrary code via format string specifiers in the user name, which is triggered when the game character is killed.

cpe:/a:phpmytourney:phpmytourney:2

CVE-2008-1128

2008-03-03T18:44:00.000-05:00

2018-10-11T16:29:46.227-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SREASON 3708 BUGTRAQ 20080229 PHPMyTourney Remote file include Vulnerability BID 28057 PHP remote file inclusion vulnerability in tourney/index.php in phpMyTourney 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

cpe:/a:xrms_crm:xrms:1.99.2

CVE-2008-1129

2008-03-03T19:44:00.000-05:00

2018-10-11T16:29:46.477-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3709 BUGTRAQ 20080228 XSS on XRMS- open source CRM BID 28041 Cross-site scripting (XSS) vulnerability in admin/users/self.php in XRMS CRM allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information.

cpe:/a:ibm:websphere_mq:5.3 cpe:/a:ibm:websphere_mq:6

CVE-2008-1130

2008-03-03T19:44:00.000-05:00

2011-03-07T22:05:59.893-05:00

6.6

LOCAL

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov BID 28046 SECTRACK 1019527 VUPEN ADV-2008-0719 AIXAPAR IZ01272 Unspecified vulnerability in IBM WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14 allows attackers to bypass access restrictions for a queue manager via a SVRCONN (MQ client) channel.

cpe:/a:drupal:drupal:6.0

CVE-2008-1131

2008-03-03T19:44:00.000-05:00

2008-09-05T17:36:53.380-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-03-04T10:51:00.000-05:00

CONFIRM http://drupal.org/node/227608 BID 28026 Cross-site scripting (XSS) vulnerability in Drupal 6.0 allows remote authenticated users to inject arbitrary web script or HTML via titles in content edit forms.

cpe:/a:net_activity_viewer:net_activity_viewer:0.2.1

CVE-2008-1132

2008-03-03T19:44:00.000-05:00

2008-09-05T17:36:53.537-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

NONE

http://nvd.nist.gov

2008-03-04T10:57:00.000-05:00

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=579181 Untrusted search path vulnerability in src/mainwindow.c in Net Activity Viewer 0.2.1 allows local users with Net Activity Viewer privileges to execute arbitrary code via a malicious gksu program, which is invoked during the Restart As Root action.

cpe:/a:drupal:drupal:6.0

CVE-2008-1133

2008-03-04T13:44:00.000-05:00

2008-09-05T17:36:53.677-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-03-04T13:56:00.000-05:00

CONFIRM http://drupal.org/node/227608 BID 28026 The Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in ECMAScript, which allows remote attackers to conduct cross-site scripting (XSS) attacks.

cpe:/a:omegasoft:interneserviceslosungen:7

CVE-2008-1134

2008-03-04T14:44:00.000-05:00

2018-10-11T16:29:46.803-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20080109 Privileg escalation in Omegasoft Insel 7 BID 27210 XF insel-cookie-weak-security(39575) OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 supports authentication with a cookie that lacks a shared secret, which allows remote attackers to login as an arbitrary user via a modified cookie.

cpe:/a:omegasoft:interneserviceslosungen:7

CVE-2008-1135

2008-03-04T14:44:00.000-05:00

2018-10-11T16:29:47.197-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20080109 Privileg escalation in Omegasoft Insel 7 BID 27210 XF insel-error-information-disclosure(39574) OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.

cpe:/a:synce:synce:0.10.0 cpe:/a:synce:synce:0.92

CVE-2008-1136

2008-03-04T14:44:00.000-05:00

2018-10-11T16:29:47.587-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SREASON 3710 CONFIRM http://sourceforge.net/forum/forum.php?forum_id=766440 MISC http://www.coresecurity.com/?action=item&id=2070 BUGTRAQ 20080107 CORE-2007-1106: SynCE Remote Command Injection BID 27178 BID 28141 XF synce-vdccm-command-execution(39506) FEDORA FEDORA-2008-0680 The Utils::runScripts function in src/utils.cpp in vdccm 0.92 through 0.10.0 in SynCE (SynCE-dccm) allows remote attackers to execute arbitrary commands via shell metacharacters in a certain string to TCP port 5679.

cpe:/a:joomla:com_garyscookbook:1.1.1 cpe:/a:mambo:com_garyscookbook:1.1.1

CVE-2008-1137

2008-03-04T15:44:00.000-05:00

2018-10-11T16:29:48.447-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20080224 joomla com_garyscookbook SQL Injection(id) BID 27972 XF garyscookbook-index-sql-injection(40803) EXPLOIT-DB 5178 SQL injection vulnerability in the Garys Cookbook (com_garyscookbook) 1.1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.

cpe:/a:deslock:deslock:3.2.6

CVE-2008-1138

2008-03-04T15:44:00.000-05:00

2017-09-28T21:30:34.817-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov VUPEN ADV-2008-0597 XF deslock-dlmfencsys-dos(41204) EXPLOIT-DB 5142 DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a certain ZERO_MEM DLMFENC_IOCTL request to \\.\DLKPFSD_Device, aka the "ring0 link list zero" vulnerability.

cpe:/a:deslock:deslock:3.2.6

CVE-2008-1139

2008-03-04T15:44:00.000-05:00

2017-09-28T21:30:34.880-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

VUPEN ADV-2008-0597 EXPLOIT-DB 5143 DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENC_IOCTL request to \\.\DLKPFSD_Device that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability.

cpe:/a:deslock:deslock:3.2.6

CVE-2008-1140

2008-03-04T15:44:00.000-05:00

2017-09-28T21:30:34.940-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

VUPEN ADV-2008-0597 EXPLOIT-DB 5144 DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISK_IOCTL request to \\.\DLKFDisk_Control that overwrites a data structure associated with a mounted pseudo-filesystem, aka the "ring0 SYSTEM" vulnerability.

cpe:/a:deslock:deslock:3.2.6

CVE-2008-1141

2008-03-04T15:44:00.000-05:00

2017-09-28T21:30:35.003-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov VUPEN ADV-2008-0597 EXPLOIT-DB 5141 Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (kernel memory consumption) via a series of DLMFENC_IOCTL requests to \\.\DLKPFSD_Device that allocate "link list structures."

cpe:/a:aterm:aterm:0.1.0 cpe:/a:aterm:aterm:0.1.1 cpe:/a:aterm:aterm:0.2.0 cpe:/a:aterm:aterm:0.3.0 cpe:/a:aterm:aterm:0.3.1 cpe:/a:aterm:aterm:0.3.2 cpe:/a:aterm:aterm:0.3.3 cpe:/a:aterm:aterm:0.3.4 cpe:/a:aterm:aterm:0.3.5 cpe:/a:aterm:aterm:0.3.6 cpe:/a:aterm:aterm:0.4.0 cpe:/a:aterm:aterm:0.4.1 cpe:/a:aterm:aterm:0.4.2 cpe:/a:aterm:aterm:1.00:beta1 cpe:/a:aterm:aterm:1.00:beta2 cpe:/a:aterm:aterm:1.00:beta3 cpe:/a:aterm:aterm:1.00:beta4 cpe:/a:aterm:aterm:1.0.0 cpe:/a:eterm:eterm:0.9.2 cpe:/a:eterm:eterm:0.9.3 cpe:/a:mrxvt:mrxvt:0.4.2 cpe:/a:mrxvt:mrxvt:0.5.2 cpe:/a:multi-aterm:multi-aterm:0.0.1 cpe:/a:multi-aterm:multi-aterm:0.0.3 cpe:/a:multi-aterm:multi-aterm:0.0.4 cpe:/a:multi-aterm:multi-aterm:0.0.5 cpe:/a:multi-aterm:multi-aterm:0.1 cpe:/a:multi-aterm:multi-aterm:0.2 cpe:/a:rxvt:rxvt:2.6.1 cpe:/a:rxvt:rxvt:2.6.2 cpe:/a:rxvt:rxvt:2.6.3 cpe:/a:rxvt:rxvt:2.6.4 cpe:/a:rxvt:rxvt:2.7.5 cpe:/a:rxvt:rxvt:2.7.6 cpe:/a:rxvt:rxvt:2.7.7 cpe:/a:rxvt:rxvt:2.7.8 cpe:/a:rxvt:rxvt:2.7.9 cpe:/a:rxvt-unicode:rxvt-unicode:1.0 cpe:/a:rxvt-unicode:rxvt-unicode:1.1 cpe:/a:rxvt-unicode:rxvt-unicode:1.2 cpe:/a:rxvt-unicode:rxvt-unicode:1.3 cpe:/a:rxvt-unicode:rxvt-unicode:1.4 cpe:/a:rxvt-unicode:rxvt-unicode:1.5 cpe:/a:rxvt-unicode:rxvt-unicode:1.6 cpe:/a:rxvt-unicode:rxvt-unicode:1.7 cpe:/a:rxvt-unicode:rxvt-unicode:1.8 cpe:/a:rxvt-unicode:rxvt-unicode:1.9 cpe:/a:rxvt-unicode:rxvt-unicode:1.91 cpe:/a:rxvt-unicode:rxvt-unicode:2.0 cpe:/a:rxvt-unicode:rxvt-unicode:2.1 cpe:/a:rxvt-unicode:rxvt-unicode:2.2 cpe:/a:rxvt-unicode:rxvt-unicode:2.3 cpe:/a:rxvt-unicode:rxvt-unicode:2.4 cpe:/a:rxvt-unicode:rxvt-unicode:2.5 cpe:/a:rxvt-unicode:rxvt-unicode:2.6 cpe:/a:rxvt-unicode:rxvt-unicode:2.7 cpe:/a:rxvt-unicode:rxvt-unicode:2.8 cpe:/a:rxvt-unicode:rxvt-unicode:2.9 cpe:/a:rxvt-unicode:rxvt-unicode:3.0 cpe:/a:rxvt-unicode:rxvt-unicode:3.1 cpe:/a:rxvt-unicode:rxvt-unicode:3.2 cpe:/a:rxvt-unicode:rxvt-unicode:3.3 cpe:/a:rxvt-unicode:rxvt-unicode:3.4 cpe:/a:rxvt-unicode:rxvt-unicode:3.5 cpe:/a:rxvt-unicode:rxvt-unicode:3.6 cpe:/a:rxvt-unicode:rxvt-unicode:3.7 cpe:/a:rxvt-unicode:rxvt-unicode:3.8 cpe:/a:rxvt-unicode:rxvt-unicode:3.9 cpe:/a:rxvt-unicode:rxvt-unicode:4.0 cpe:/a:rxvt-unicode:rxvt-unicode:4.1 cpe:/a:rxvt-unicode:rxvt-unicode:4.2 cpe:/a:rxvt-unicode:rxvt-unicode:4.3 cpe:/a:rxvt-unicode:rxvt-unicode:4.4 cpe:/a:rxvt-unicode:rxvt-unicode:4.5 cpe:/a:rxvt-unicode:rxvt-unicode:4.6 cpe:/a:rxvt-unicode:rxvt-unicode:4.7 cpe:/a:rxvt-unicode:rxvt-unicode:4.8 cpe:/a:rxvt-unicode:rxvt-unicode:4.9 cpe:/a:rxvt-unicode:rxvt-unicode:5.0 cpe:/a:rxvt-unicode:rxvt-unicode:5.1 cpe:/a:rxvt-unicode:rxvt-unicode:5.2 cpe:/a:rxvt-unicode:rxvt-unicode:5.3 cpe:/a:rxvt-unicode:rxvt-unicode:5.4 cpe:/a:rxvt-unicode:rxvt-unicode:5.5 cpe:/a:rxvt-unicode:rxvt-unicode:5.6 cpe:/a:rxvt-unicode:rxvt-unicode:5.7 cpe:/a:rxvt-unicode:rxvt-unicode:5.8 cpe:/a:rxvt-unicode:rxvt-unicode:5.9 cpe:/a:rxvt-unicode:rxvt-unicode:6.0 cpe:/a:rxvt-unicode:rxvt-unicode:6.1 cpe:/a:rxvt-unicode:rxvt-unicode:6.2 cpe:/a:rxvt-unicode:rxvt-unicode:6.3 cpe:/a:rxvt-unicode:rxvt-unicode:7.0 cpe:/a:rxvt-unicode:rxvt-unicode:7.1 cpe:/a:rxvt-unicode:rxvt-unicode:7.2 cpe:/a:rxvt-unicode:rxvt-unicode:7.3 cpe:/a:rxvt-unicode:rxvt-unicode:7.4 cpe:/a:rxvt-unicode:rxvt-unicode:7.5 cpe:/a:rxvt-unicode:rxvt-unicode:7.6 cpe:/a:rxvt-unicode:rxvt-unicode:7.7 cpe:/a:rxvt-unicode:rxvt-unicode:7.8 cpe:/a:rxvt-unicode:rxvt-unicode:7.9 cpe:/a:rxvt-unicode:rxvt-unicode:8.0 cpe:/a:rxvt-unicode:rxvt-unicode:8.1 cpe:/a:rxvt-unicode:rxvt-unicode:8.2 cpe:/a:rxvt-unicode:rxvt-unicode:8.3 cpe:/a:rxvt-unicode:rxvt-unicode:8.4 cpe:/a:rxvt-unicode:rxvt-unicode:8.5 cpe:/a:rxvt-unicode:rxvt-unicode:8.5a cpe:/a:rxvt-unicode:rxvt-unicode:8.6 cpe:/a:rxvt-unicode:rxvt-unicode:8.7 cpe:/a:rxvt-unicode:rxvt-unicode:8.8 cpe:/a:rxvt-unicode:rxvt-unicode:8.9 cpe:/a:rxvt-unicode:rxvt-unicode:9.0 cpe:/a:rxvt-unicode:rxvt-unicode:9.01 cpe:/a:wterm:wterm:6.2.5 cpe:/a:wterm:wterm:6.2.6 cpe:/a:wterm:wterm:6.2.8a2

CVE-2008-1142

2008-04-07T13:44:00.000-04:00

2009-02-26T00:00:00.000-05:00

3.7

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2008-04-08T09:32:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://article.gmane.org/gmane.comp.security.oss.general/122 CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469296 SUSE SUSE-SR:2008:017 GENTOO GLSA-200805-03 MANDRIVA MDVSA-2008:161 MANDRIVA MDVSA-2008:221 BID 28512 rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.

cpe:/h:marvell:88w8361w-bem1 cpe:/h:netgear:wn802t:1.3.16

CVE-2008-1144

2008-09-05T12:08:00.000-04:00

2018-10-11T16:29:48.960-04:00

6.3

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov SREASON 4227 BUGTRAQ 20080904 Marvell Driver EAPoL-Key Length Overflow BID 31013 XF netgear-wn802t-eapolkey-dos(44919) The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse EAPoL-Key packets, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via a malformed EAPoL-Key packet with a crafted "advertised length."

cpe:/a:webrick:webrick:1.8 cpe:/a:webrick:webrick:1.8_p114 cpe:/a:webrick:webrick:1.8_p115 cpe:/a:webrick:webrick:1.9 cpe:/a:webrick:webrick:1.9_1

CVE-2008-1145

2008-03-04T18:44:00.000-05:00

2018-10-11T16:29:49.493-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2008-06-30 SUSE SUSE-SR:2008:017 CONFIRM http://support.apple.com/kb/HT2163 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2008-0123 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0123 CERT-VN VU#404515 MANDRIVA MDVSA-2008:141 MANDRIVA MDVSA-2008:142 REDHAT RHSA-2008:0897 CONFIRM http://www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/ BUGTRAQ 20080306 [DSECRG-08-018] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory traversal file Download Vulnerability BUGTRAQ 20080306 Re: [DSECRG-08-018] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory traversal file Download Vulnerability BUGTRAQ 20080325 rPSA-2008-0123-1 ruby BID 28123 SECTRACK 1019562 VUPEN ADV-2008-0787 VUPEN ADV-2008-1981 XF ruby-webrick-directory-traversal(41010) CONFIRM https://issues.rpath.com/browse/RPL-2338 EXPLOIT-DB 5215 FEDORA FEDORA-2008-2443 FEDORA FEDORA-2008-2458 Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash (\) path separators or case-insensitive file names, allows remote attackers to access arbitrary files via (1) "..%5c" (encoded backslash) sequences or (2) filenames that match patterns in the :NondisclosureName option.

cpe:/a:cosmicperl:directory_pro:10.0.3 cpe:/a:darwin:darwin:1.0 cpe:/a:darwin:darwin:9.1 cpe:/a:navision:financials_server:3.0

CVE-2008-1146

2008-03-04T18:44:00.000-05:00

2017-08-07T21:29:54.043-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://www.securiteam.com/securityreviews/5PP0H0UNGW.html BUGTRAQ 20080206 A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability" BID 27647 MISC http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf XF openbsd-prng-dns-spoofing(40329) A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 3-bit random hops (aka "Algorithm X3"), as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning against OpenBSD's modification of BIND.

cpe:/a:cosmicperl:directory_pro:10.0.3 cpe:/a:darwin:darwin:1.0 cpe:/a:darwin:darwin:9.1 cpe:/a:navision:financials_server:3.0

CVE-2008-1147

2008-03-04T18:44:00.000-05:00

2017-08-07T21:29:54.183-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20080206 Re: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability" BUGTRAQ 20080206 RE: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability" CONFIRM http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet/ip_id.c?rev=1.10;contenttype= MISC http://www.securiteam.com/securityreviews/5PP0H0UNGW.html BUGTRAQ 20080206 A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability" BID 27647 MISC http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf XF openbsd-prng-dns-spoofing(40329) XF openbsd-xor-weak-security(41155) A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops (aka "Algorithm X2"), as used in OpenBSD 2.6 through 3.4, Mac OS X 10 through 10.5.1, FreeBSD 4.4 through 7.0, and DragonFlyBSD 1.0 through 1.10.1, allows remote attackers to guess sensitive values such as IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as injection into TCP packets and OS fingerprinting.

cpe:/a:cosmicperl:directory_pro:10.0.3 cpe:/a:darwin:darwin:1.0 cpe:/a:darwin:darwin:9.1 cpe:/a:navision:financials_server:3.0

CVE-2008-1148

2008-03-04T18:44:00.000-05:00

2017-08-07T21:29:54.277-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://www.securiteam.com/securityreviews/5PP0H0UNGW.html BUGTRAQ 20080206 A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability" BID 27647 MISC http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf XF openbsd-prng-dns-spoofing(40329) XF openbsd-add-weak-security(41157) A certain pseudo-random number generator (PRNG) algorithm that uses ADD with 0 random hops (aka "Algorithm A0"), as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as (1) DNS transaction IDs or (2) IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning, injection into TCP packets, and OS fingerprinting.

cpe:/a:phpmyadmin:phpmyadmin:2.11.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.0:beta1 cpe:/a:phpmyadmin:phpmyadmin:2.11.0:rc1 cpe:/a:phpmyadmin:phpmyadmin:2.11.0.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.1 cpe:/a:phpmyadmin:phpmyadmin:2.11.1:rc1 cpe:/a:phpmyadmin:phpmyadmin:2.11.1.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.1.1 cpe:/a:phpmyadmin:phpmyadmin:2.11.1.2 cpe:/a:phpmyadmin:phpmyadmin:2.11.2 cpe:/a:phpmyadmin:phpmyadmin:2.11.2.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.2.1 cpe:/a:phpmyadmin:phpmyadmin:2.11.2.2 cpe:/a:phpmyadmin:phpmyadmin:2.11.3 cpe:/a:phpmyadmin:phpmyadmin:2.11.3:rc1 cpe:/a:phpmyadmin:phpmyadmin:2.11.3.0 cpe:/a:phpmyadmin:phpmyadmin:2.11.4 cpe:/a:phpmyadmin:phpmyadmin:2.11.4:rc1

CVE-2008-1149

2008-03-04T18:44:00.000-05:00

2017-08-07T21:29:54.493-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SUSE SUSE-SR:2008:026 SUSE SUSE-SR:2009:003 DEBIAN DSA-1557 GENTOO GLSA-200803-15 MANDRIVA MDVSA-2008:131 CONFIRM http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-1 BID 28068 VUPEN ADV-2008-0731 VUPEN ADV-2008-0758 XF phpmyadmin-request-sql-injection(40968) FEDORA FEDORA-2008-2189 FEDORA FEDORA-2008-2229 phpMyAdmin before 2.11.5 accesses $_REQUEST to obtain some parameters instead of $_GET and $_POST, which allows attackers in the same domain to override certain variables and conduct SQL injection and Cross-Site Request Forgery (CSRF) attacks by using crafted cookies.

cpe:/o:cisco:ios:12.2

CVE-2008-1150

2008-03-27T13:44:00.000-04:00

2017-09-28T21:30:35.143-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1019714 CISCO 20080326 Cisco IOS Virtual Private Dial-up Network Denial of Service Vulnerability BID 28460 CERT TA08-087B VUPEN ADV-2008-1006 XF cisco-ios-vpdn-idb-dos(41484) The virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (resource exhaustion) via a series of PPTP sessions, related to the persistence of interface descriptor block (IDB) data structures after process termination, aka bug ID CSCdv59309.

cpe:/o:cisco:ios:12.2

CVE-2008-1151

2008-03-27T13:44:00.000-04:00

2017-09-28T21:30:35.207-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1019714 CISCO 20080326 Cisco IOS Virtual Private Dial-up Network Denial of Service Vulnerability BID 28460 CERT TA08-087B VUPEN ADV-2008-1006 XF cisco-ios-vpdn-pptp-dos(41483) Memory leak in the virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (memory consumption) via a series of PPTP sessions, related to "dead memory" that remains allocated after process termination, aka bug ID CSCsj58566.

cpe:/o:cisco:cisco_ios:12.0:da cpe:/o:cisco:cisco_ios:12.0:db cpe:/o:cisco:cisco_ios:12.0:dc cpe:/o:cisco:cisco_ios:12.0:s cpe:/o:cisco:cisco_ios:12.0:sc cpe:/o:cisco:cisco_ios:12.0:sl cpe:/o:cisco:cisco_ios:12.0:sp cpe:/o:cisco:cisco_ios:12.0:st cpe:/o:cisco:cisco_ios:12.0:sx cpe:/o:cisco:cisco_ios:12.0:sy cpe:/o:cisco:cisco_ios:12.0:sz cpe:/o:cisco:cisco_ios:12.0:t cpe:/o:cisco:cisco_ios:12.0:wc cpe:/o:cisco:cisco_ios:12.0:wt cpe:/o:cisco:cisco_ios:12.0:xa cpe:/o:cisco:cisco_ios:12.0:xb cpe:/o:cisco:cisco_ios:12.0:xc cpe:/o:cisco:cisco_ios:12.0:xd cpe:/o:cisco:cisco_ios:12.0:xe cpe:/o:cisco:cisco_ios:12.0:xf cpe:/o:cisco:cisco_ios:12.0:xg cpe:/o:cisco:cisco_ios:12.0:xh cpe:/o:cisco:cisco_ios:12.0:xi cpe:/o:cisco:cisco_ios:12.0:xj cpe:/o:cisco:cisco_ios:12.0:xk cpe:/o:cisco:cisco_ios:12.0:xl cpe:/o:cisco:cisco_ios:12.0:xm cpe:/o:cisco:cisco_ios:12.0:xn cpe:/o:cisco:cisco_ios:12.0:xo cpe:/o:cisco:cisco_ios:12.0:xq cpe:/o:cisco:cisco_ios:12.0:xr cpe:/o:cisco:cisco_ios:12.0:xs cpe:/o:cisco:cisco_ios:12.0:xv cpe:/o:cisco:cisco_ios:12.0:xw cpe:/o:cisco:cisco_ios:12.1:aa cpe:/o:cisco:cisco_ios:12.1:ax cpe:/o:cisco:cisco_ios:12.1:az cpe:/o:cisco:cisco_ios:12.1:b cpe:/o:cisco:cisco_ios:12.1:c cpe:/o:cisco:cisco_ios:12.1:cx cpe:/o:cisco:cisco_ios:12.1:d cpe:/o:cisco:cisco_ios:12.1:da cpe:/o:cisco:cisco_ios:12.1:db cpe:/o:cisco:cisco_ios:12.1:dc cpe:/o:cisco:cisco_ios:12.1:e cpe:/o:cisco:cisco_ios:12.1:ea cpe:/o:cisco:cisco_ios:12.1:eb cpe:/o:cisco:cisco_ios:12.1:ec cpe:/o:cisco:cisco_ios:12.1:eo cpe:/o:cisco:cisco_ios:12.1:eu cpe:/o:cisco:cisco_ios:12.1:ew cpe:/o:cisco:cisco_ios:12.1:ex cpe:/o:cisco:cisco_ios:12.1:ey cpe:/o:cisco:cisco_ios:12.1:ez cpe:/o:cisco:cisco_ios:12.1:ga cpe:/o:cisco:cisco_ios:12.1:gb cpe:/o:cisco:cisco_ios:12.1:xa cpe:/o:cisco:cisco_ios:12.1:xb cpe:/o:cisco:cisco_ios:12.1:xc cpe:/o:cisco:cisco_ios:12.1:xd cpe:/o:cisco:cisco_ios:12.1:xe cpe:/o:cisco:cisco_ios:12.1:xf cpe:/o:cisco:cisco_ios:12.1:xg cpe:/o:cisco:cisco_ios:12.1:xh cpe:/o:cisco:cisco_ios:12.1:xi cpe:/o:cisco:cisco_ios:12.1:xj cpe:/o:cisco:cisco_ios:12.1:xk cpe:/o:cisco:cisco_ios:12.1:xl cpe:/o:cisco:cisco_ios:12.1:xm cpe:/o:cisco:cisco_ios:12.1:xp cpe:/o:cisco:cisco_ios:12.1:xq cpe:/o:cisco:cisco_ios:12.1:xr cpe:/o:cisco:cisco_ios:12.1:xs cpe:/o:cisco:cisco_ios:12.1:xt cpe:/o:cisco:cisco_ios:12.1:xv cpe:/o:cisco:cisco_ios:12.1:xw cpe:/o:cisco:cisco_ios:12.1:xx cpe:/o:cisco:cisco_ios:12.1:xy cpe:/o:cisco:cisco_ios:12.1:xz cpe:/o:cisco:cisco_ios:12.1:ya cpe:/o:cisco:cisco_ios:12.1:yb cpe:/o:cisco:cisco_ios:12.1:yc cpe:/o:cisco:cisco_ios:12.1:yd cpe:/o:cisco:cisco_ios:12.1:ye cpe:/o:cisco:cisco_ios:12.1:yf cpe:/o:cisco:cisco_ios:12.1:yh cpe:/o:cisco:cisco_ios:12.1:yi cpe:/o:cisco:cisco_ios:12.1:yj cpe:/o:cisco:cisco_ios:12.2:b cpe:/o:cisco:cisco_ios:12.2:bc cpe:/o:cisco:cisco_ios:12.2:bw cpe:/o:cisco:cisco_ios:12.2:by cpe:/o:cisco:cisco_ios:12.2:bz cpe:/o:cisco:cisco_ios:12.2:cx cpe:/o:cisco:cisco_ios:12.2:cy cpe:/o:cisco:cisco_ios:12.2:da cpe:/o:cisco:cisco_ios:12.2:dd cpe:/o:cisco:cisco_ios:12.2:dx cpe:/o:cisco:cisco_ios:12.2:eu cpe:/o:cisco:cisco_ios:12.2:ew cpe:/o:cisco:cisco_ios:12.2:ewa cpe:/o:cisco:cisco_ios:12.2:ex cpe:/o:cisco:cisco_ios:12.2:ey cpe:/o:cisco:cisco_ios:12.2:ez cpe:/o:cisco:cisco_ios:12.2:fz cpe:/o:cisco:cisco_ios:12.2:ixa cpe:/o:cisco:cisco_ios:12.2:ixb cpe:/o:cisco:cisco_ios:12.2:ixc cpe:/o:cisco:cisco_ios:12.2:ixd cpe:/o:cisco:cisco_ios:12.2:ja cpe:/o:cisco:cisco_ios:12.2:mb cpe:/o:cisco:cisco_ios:12.2:mc cpe:/o:cisco:cisco_ios:12.2:s cpe:/o:cisco:cisco_ios:12.2:sb cpe:/o:cisco:cisco_ios:12.2:sbc cpe:/o:cisco:cisco_ios:12.2:se cpe:/o:cisco:cisco_ios:12.2:sea cpe:/o:cisco:cisco_ios:12.2:seb cpe:/o:cisco:cisco_ios:12.2:sec cpe:/o:cisco:cisco_ios:12.2:sed cpe:/o:cisco:cisco_ios:12.2:see cpe:/o:cisco:cisco_ios:12.2:sef cpe:/o:cisco:cisco_ios:12.2:seg cpe:/o:cisco:cisco_ios:12.2:sg cpe:/o:cisco:cisco_ios:12.2:sga cpe:/o:cisco:cisco_ios:12.2:sm cpe:/o:cisco:cisco_ios:12.2:so cpe:/o:cisco:cisco_ios:12.2:sra cpe:/o:cisco:cisco_ios:12.2:srb cpe:/o:cisco:cisco_ios:12.2:st cpe:/o:cisco:cisco_ios:12.2:su cpe:/o:cisco:cisco_ios:12.2:sv cpe:/o:cisco:cisco_ios:12.2:sw cpe:/o:cisco:cisco_ios:12.2:sxa cpe:/o:cisco:cisco_ios:12.2:sxb cpe:/o:cisco:cisco_ios:12.2:sxd cpe:/o:cisco:cisco_ios:12.2:sy cpe:/o:cisco:cisco_ios:12.2:sz cpe:/o:cisco:cisco_ios:12.2:t cpe:/o:cisco:cisco_ios:12.2:tpc cpe:/o:cisco:cisco_ios:12.2:uz cpe:/o:cisco:cisco_ios:12.2:xa cpe:/o:cisco:cisco_ios:12.2:xb cpe:/o:cisco:cisco_ios:12.2:xc cpe:/o:cisco:cisco_ios:12.2:xd cpe:/o:cisco:cisco_ios:12.2:xe cpe:/o:cisco:cisco_ios:12.2:xf cpe:/o:cisco:cisco_ios:12.2:xg cpe:/o:cisco:cisco_ios:12.2:xh cpe:/o:cisco:cisco_ios:12.2:xi cpe:/o:cisco:cisco_ios:12.2:xj cpe:/o:cisco:cisco_ios:12.2:xk cpe:/o:cisco:cisco_ios:12.2:xl cpe:/o:cisco:cisco_ios:12.2:xm cpe:/o:cisco:cisco_ios:12.2:xn cpe:/o:cisco:cisco_ios:12.2:xq cpe:/o:cisco:cisco_ios:12.2:xr cpe:/o:cisco:cisco_ios:12.2:xs cpe:/o:cisco:cisco_ios:12.2:xt cpe:/o:cisco:cisco_ios:12.2:xu cpe:/o:cisco:cisco_ios:12.2:xv cpe:/o:cisco:cisco_ios:12.2:xw cpe:/o:cisco:cisco_ios:12.2:ya cpe:/o:cisco:cisco_ios:12.2:yb cpe:/o:cisco:cisco_ios:12.2:yc cpe:/o:cisco:cisco_ios:12.2:ye cpe:/o:cisco:cisco_ios:12.2:yj cpe:/o:cisco:cisco_ios:12.2:yk cpe:/o:cisco:cisco_ios:12.2:yl cpe:/o:cisco:cisco_ios:12.2:ym cpe:/o:cisco:cisco_ios:12.2:yn cpe:/o:cisco:cisco_ios:12.2:yo cpe:/o:cisco:cisco_ios:12.2:yp cpe:/o:cisco:cisco_ios:12.2:yq cpe:/o:cisco:cisco_ios:12.2:yr cpe:/o:cisco:cisco_ios:12.2:ys cpe:/o:cisco:cisco_ios:12.2:yt cpe:/o:cisco:cisco_ios:12.2:yu cpe:/o:cisco:cisco_ios:12.2:yv cpe:/o:cisco:cisco_ios:12.2:yx cpe:/o:cisco:cisco_ios:12.2:yy cpe:/o:cisco:cisco_ios:12.2:za cpe:/o:cisco:cisco_ios:12.2:zb cpe:/o:cisco:cisco_ios:12.2:zc cpe:/o:cisco:cisco_ios:12.2:zd cpe:/o:cisco:cisco_ios:12.2:ze cpe:/o:cisco:cisco_ios:12.2:zf cpe:/o:cisco:cisco_ios:12.2:zg cpe:/o:cisco:cisco_ios:12.2:zh cpe:/o:cisco:cisco_ios:12.2:zj cpe:/o:cisco:cisco_ios:12.2:zl cpe:/o:cisco:cisco_ios:12.2:zp cpe:/o:cisco:cisco_ios:12.2:zy cpe:/o:cisco:cisco_ios:12.3 cpe:/o:cisco:cisco_ios:12.3:b cpe:/o:cisco:cisco_ios:12.3:bc cpe:/o:cisco:cisco_ios:12.3:bw cpe:/o:cisco:cisco_ios:12.3:eu cpe:/o:cisco:cisco_ios:12.3:ja cpe:/o:cisco:cisco_ios:12.3:jea cpe:/o:cisco:cisco_ios:12.3:jeb cpe:/o:cisco:cisco_ios:12.3:jec cpe:/o:cisco:cisco_ios:12.3:jl cpe:/o:cisco:cisco_ios:12.3:jx cpe:/o:cisco:cisco_ios:12.3:t cpe:/o:cisco:cisco_ios:12.3:tpc cpe:/o:cisco:cisco_ios:12.3:va cpe:/o:cisco:cisco_ios:12.3:xa cpe:/o:cisco:cisco_ios:12.3:xb cpe:/o:cisco:cisco_ios:12.3:xc cpe:/o:cisco:cisco_ios:12.3:xd cpe:/o:cisco:cisco_ios:12.3:xe cpe:/o:cisco:cisco_ios:12.3:xf cpe:/o:cisco:cisco_ios:12.3:xg cpe:/o:cisco:cisco_ios:12.3:xh cpe:/o:cisco:cisco_ios:12.3:xi cpe:/o:cisco:cisco_ios:12.3:xj cpe:/o:cisco:cisco_ios:12.3:xk cpe:/o:cisco:cisco_ios:12.3:xq cpe:/o:cisco:cisco_ios:12.3:xr cpe:/o:cisco:cisco_ios:12.3:xs cpe:/o:cisco:cisco_ios:12.3:xu cpe:/o:cisco:cisco_ios:12.3:xw cpe:/o:cisco:cisco_ios:12.3:xy cpe:/o:cisco:cisco_ios:12.3:ya cpe:/o:cisco:cisco_ios:12.3:yd cpe:/o:cisco:cisco_ios:12.3:yf cpe:/o:cisco:cisco_ios:12.3:yg cpe:/o:cisco:cisco_ios:12.3:yh cpe:/o:cisco:cisco_ios:12.3:yi cpe:/o:cisco:cisco_ios:12.3:yj cpe:/o:cisco:cisco_ios:12.3:yk cpe:/o:cisco:cisco_ios:12.3:ym cpe:/o:cisco:cisco_ios:12.3:yq cpe:/o:cisco:cisco_ios:12.3:ys cpe:/o:cisco:cisco_ios:12.3:yt cpe:/o:cisco:cisco_ios:12.3:yu cpe:/o:cisco:cisco_ios:12.3:yx cpe:/o:cisco:cisco_ios:12.3:yz cpe:/o:cisco:cisco_ios:12.4 cpe:/o:cisco:cisco_ios:12.4:ja cpe:/o:cisco:cisco_ios:12.4:jk cpe:/o:cisco:cisco_ios:12.4:jma cpe:/o:cisco:cisco_ios:12.4:jmb cpe:/o:cisco:cisco_ios:12.4:jmc cpe:/o:cisco:cisco_ios:12.4:jx cpe:/o:cisco:cisco_ios:12.4:md cpe:/o:cisco:cisco_ios:12.4:mr cpe:/o:cisco:cisco_ios:12.4:sw cpe:/o:cisco:cisco_ios:12.4:t cpe:/o:cisco:cisco_ios:12.4:xa cpe:/o:cisco:cisco_ios:12.4:xb cpe:/o:cisco:cisco_ios:12.4:xc cpe:/o:cisco:cisco_ios:12.4:xd cpe:/o:cisco:cisco_ios:12.4:xe cpe:/o:cisco:cisco_ios:12.4:xf cpe:/o:cisco:cisco_ios:12.4:xg cpe:/o:cisco:cisco_ios:12.4:xj cpe:/o:cisco:cisco_ios:12.4:xk cpe:/o:cisco:cisco_ios:12.4:xl cpe:/o:cisco:cisco_ios:12.4:xm cpe:/o:cisco:cisco_ios:12.4:xn cpe:/o:cisco:cisco_ios:12.4:xt cpe:/o:cisco:cisco_ios:12.4:xv cpe:/o:cisco:cisco_ios:12.4:xw cpe:/o:cisco:cisco_ios:12.4:xy cpe:/o:cisco:ios:12.0 cpe:/o:cisco:ios:12.2yd cpe:/o:cisco:ios:12.2yf cpe:/o:cisco:ios:12.2yg cpe:/o:cisco:ios:12.2yh

CVE-2008-1152

2008-03-27T13:44:00.000-04:00

2017-09-28T21:30:35.287-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20080326 Multiple DLSw Denial of Service Vulnerabilities in Cisco IOS BID 28465 SECTRACK 1019712 CERT TA08-087B VUPEN ADV-2008-1006 XF cisco-ios-dlsw-dos(41482) The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device restart or memory consumption) via crafted (1) UDP port 2067 or (2) IP protocol 91 packets.

cpe:/o:cisco:cisco_ios:12.3 cpe:/o:cisco:cisco_ios:12.4 cpe:/o:cisco:ios:12.1 cpe:/o:cisco:ios:12.2

CVE-2008-1153

2008-03-27T06:44:00.000-04:00

2017-09-28T21:30:35.363-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CISCO 20080326 Cisco IOS User Datagram Protocol Delivery Issue For IPv4/IPv6 Dual-stack Routers CERT-VN VU#936177 BID 28461 SECTRACK 1019713 CERT TA08-087B VUPEN ADV-2008-1006 XF cisco-ios-ipv6-dualstack-dos(41475) Cisco IOS 12.1, 12.2, 12.3, and 12.4, with IPv4 UDP services and the IPv6 protocol enabled, allows remote attackers to cause a denial of service (device crash and possible blocked interface) via a crafted IPv6 packet to the device.

cpe:/a:cisco:emergency_responder:2.0 cpe:/a:cisco:mobility_manager:2.0 cpe:/a:cisco:unified_communications_manager:5.0 cpe:/a:cisco:unified_communications_manager:5.1 cpe:/a:cisco:unified_communications_manager:6.0 cpe:/a:cisco:unified_communications_manager:6.1 cpe:/a:cisco:unified_presence:1.0 cpe:/a:cisco:unified_presence:6.0

CVE-2008-1154

2008-04-04T15:44:00.000-04:00

2017-08-07T21:29:54.837-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1019768 CISCO 20080403 Cisco Unified Communications Disaster Recovery Framework Command Execution Vulnerability BID 28591 VUPEN ADV-2008-1093 XF cisco-drf-command-execution(41632) The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, does not require authentication for requests received from the network, which allows remote attackers to execute arbitrary code via unspecified vectors.

cpe:/a:cisco:network_admission_control:3.5 cpe:/a:cisco:network_admission_control:3.6 cpe:/a:cisco:network_admission_control:3.6.0 cpe:/a:cisco:network_admission_control:3.6.0.1 cpe:/a:cisco:network_admission_control:3.6.1.1 cpe:/a:cisco:network_admission_control:3.6.2.1 cpe:/a:cisco:network_admission_control:3.6.2.2 cpe:/a:cisco:network_admission_control:3.6.4.1 cpe:/a:cisco:network_admission_control:3.6.4.2 cpe:/a:cisco:network_admission_control:3.6.4.3 cpe:/a:cisco:network_admission_control:4.0 cpe:/a:cisco:network_admission_control:4.0.0.1 cpe:/a:cisco:network_admission_control:4.0.2.1 cpe:/a:cisco:network_admission_control:4.0.2.2 cpe:/a:cisco:network_admission_control:4.0.3.1 cpe:/a:cisco:network_admission_control:4.0.3.2 cpe:/a:cisco:network_admission_control:4.0.3.3 cpe:/a:cisco:network_admission_control:4.0.5.0 cpe:/a:cisco:network_admission_control:4.0.5.1 cpe:/a:cisco:network_admission_control:4.1 cpe:/a:cisco:network_admission_control:4.1.0 cpe:/a:cisco:network_admission_control:4.1.1

CVE-2008-1155

2008-04-16T13:05:00.000-04:00

2017-08-07T21:29:54.900-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20080416 Cisco Network Admission Control Shared Secret Vulnerability BID 28807 SECTRACK 1019859 VUPEN ADV-2008-1248 XF cisco-nac-unauthorized-access(41849) Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.

cpe:/o:cisco:cisco_ios:12.3 cpe:/o:cisco:cisco_ios:12.4 cpe:/o:cisco:ios:12.0 cpe:/o:cisco:ios:12.2

CVE-2008-1156

2008-03-27T06:44:00.000-04:00

2017-09-28T21:30:35.427-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CISCO 20080326 Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak BID 28464 SECTRACK 1019715 CERT TA08-087B VUPEN ADV-2008-1006 XF cisco-ios-mvpm-information-disclosure(41468) Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to create "extra multicast states on the core routers" via a crafted Multicast Distribution Tree (MDT) Data Join message.

cpe:/a:cisco:ciscoworks_internetwork_performance_monitor:2.6

CVE-2008-1157

2008-03-14T16:44:00.000-04:00

2017-08-07T21:29:55.010-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20080313 CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability BID 28249 SECTRACK 1019611 VUPEN ADV-2008-0876 XF cisco-ciscoworks-ipm-command-execution(41208) Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands.

cpe:/a:cisco:unified_presence:6.0 cpe:/a:cisco:unified_presence_server:1.0 cpe:/a:cisco:unified_presence_server:1.0%281%29 cpe:/a:cisco:unified_presence_server:1.0%282%29 cpe:/a:cisco:unified_presence_server:1.0%283%29

CVE-2008-1158

2008-05-16T08:54:00.000-04:00

2017-08-07T21:29:55.057-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1020023 CISCO 20080514 Cisco Unified Presence Denial of Service Vulnerabilities BID 29219 VUPEN ADV-2008-1534 XF cisco-unifiedpresence-presenceengine-dos(42412) The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via malformed packets, aka Bug ID CSCsh50164.

cpe:/h:cisco:ios_s:12.4 cpe:/h:cisco:ios_t:12.4 cpe:/h:cisco:ios_xr:12.4 cpe:/o:cisco:ios_xr

CVE-2008-1159

2008-05-22T09:09:00.000-04:00

2017-09-28T21:30:35.487-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1020073 CISCO 20080521 Cisco IOS Secure Shell Denial of Service Vulnerabilities BID 29314 VUPEN ADV-2008-1605 XF cisco-ios-ssh-multiple-dos(42563) Multiple unspecified vulnerabilities in the SSH server in Cisco IOS 12.4 allow remote attackers to cause a denial of service (device restart) via unknown vectors, aka Bug ID (1) CSCsk42419, (2) CSCsk60020, and (3) CSCsh51293.

cpe:/a:zyxel:zywall:1050

CVE-2008-1160

2008-03-24T20:44:00.000-04:00

2018-08-13T17:47:31.523-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/0803-exploits/ZyWALL.pdf MISC http://www.secumania.org/exploits/remote/zyxel-zywall-quagga_zebra-(default-pass)-remote-root-vulnerability-2008032143791/ BID 28184 VUPEN ADV-2008-0990 XF zywall-quagga-zebra-default-password(41424) EXPLOIT-DB 5289 ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges.

cpe:/a:matroska:demuxer:1.1.10

CVE-2008-1161

2008-03-10T18:44:00.000-04:00

2017-08-07T21:29:55.243-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=a62d6f482a69;style=gitweb SUSE SUSE-SR:2008:006 DEBIAN DSA-1536 MANDRIVA MDVSA-2008:178 BID 28543 UBUNTU USN-635-1 XF xinelib-demuxer-bo(41172) Buffer overflow in the Matroska demuxer (demuxers/demux_matroska.c) in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Matroska file with invalid frame sizes.

cpe:/a:php_web_scripts:dynamic_photo_gallery:1.0.2

CVE-2008-1162

2008-03-05T18:44:00.000-05:00

2018-10-11T16:29:53.210-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://forum.aria-security.net/showthread.php?p=1521 BUGTRAQ 20080302 Dynamic photo gallery V1.02 SQL Injection BID 28067 EXPLOIT-DB 5211 SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter.

cpe:/a:phparcadescript:phparcadescript:1.0 cpe:/a:phparcadescript:phparcadescript:2.0 cpe:/a:phparcadescript:phparcadescript:3.0:rc1 cpe:/a:phparcadescript:phparcadescript:3.0:rc2

CVE-2008-1163

2008-03-05T18:44:00.000-05:00

2017-09-28T21:30:35.677-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 28065 EXPLOIT-DB 5208 SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action.

cpe:/a:phpcomasy:phpcomasy:0.8

CVE-2008-1164

2008-03-05T18:44:00.000-05:00

2017-09-28T21:30:35.723-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 28064 EXPLOIT-DB 5209 SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the mod_project_id parameter in a project_detail action.

cpe:/a:flyspray:flyspray:0.9.9 cpe:/a:flyspray:flyspray:0.9.9.1 cpe:/a:flyspray:flyspray:0.9.9.2 cpe:/a:flyspray:flyspray:0.9.9.3 cpe:/a:flyspray:flyspray:0.9.9.4

CVE-2008-1165

2008-03-05T18:44:00.000-05:00

2017-08-07T21:29:55.307-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://flyspray.org/fsa:3 XF flyspray-itemsummary-xss(40963) Multiple cross-site scripting (XSS) vulnerabilities in Flyspray 0.9.9 through 0.9.9.4 allow remote attackers to inject arbitrary web script or HTML via (1) a forced SQL error message or (2) old_value and new_value database fields in task summaries, related to the item_summary parameter in a details action in index.php. NOTE: some of these details are obtained from third party information.

cpe:/a:flyspray:flyspray:0.9.9 cpe:/a:flyspray:flyspray:0.9.9.1 cpe:/a:flyspray:flyspray:0.9.9.2 cpe:/a:flyspray:flyspray:0.9.9.3 cpe:/a:flyspray:flyspray:0.9.9.4

CVE-2008-1166

2008-03-05T18:44:00.000-05:00

2018-10-11T16:29:53.663-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20080303 [DSECRG-08-017] Flyspray 0.9.9.4 Multiple Security Vulnerabilities XF flyspray-username-information-disclosure(40964) Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.

cpe:/a:sarg:squid_analysis_report_generator:2.2.3.1

CVE-2008-1167

2008-03-05T18:44:00.000-05:00

2018-10-11T16:29:54.007-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SR:2008:006 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=581212 GENTOO GLSA-200803-21 MANDRIVA MDVSA-2008:079 BUGTRAQ 20080302 Squid Analysis Report Generator <= 2.2.3.1 buffer overflow BID 28077 SECTRACK 1019536 VUPEN ADV-2008-0749 XF sarg-useragent-bo(40970) Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information.

cpe:/a:sarg:squid_analysis_report_generator:2.2.3.1

CVE-2008-1168

2008-03-05T18:44:00.000-05:00

2017-08-07T21:29:55.477-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://sourceforge.net/project/shownotes.php?release_id=581509 GENTOO GLSA-200803-21 MANDRIVA MDVSA-2008:079 BID 28077 VUPEN ADV-2008-0750 XF sarg-useragent-xss(40972) Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:simm-comm:sci_photo_chat:3.4.9

CVE-2008-1169

2008-03-05T18:44:00.000-05:00

2017-08-07T21:29:55.540-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/scichatdt-adv.txt BID 27872 VUPEN ADV-2008-0614 XF photochat-get-directory-traversal(40655) Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) or "../" (dot dot forward slash) in the GET command.

cpe:/a:kcwiki:kcwiki:1.0

CVE-2008-1170

2008-03-05T18:44:00.000-05:00

2018-10-11T16:29:55.180-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SREASON 3714 BUGTRAQ 20080302 kcwiki 1.0 multiple remote file inclusion vulnerabilities. BID 28074 XF kcwiki-wiki-file-include(40976) Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the page parameter to (1) minimal/wiki.php and (2) simplest/wiki.php.

cpe:/a:phpbb:123_flash_chat_module

CVE-2008-1171

2008-03-05T18:44:00.000-05:00

2018-10-11T16:29:55.633-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3716 VIM 20080305 false: 123 Flash Chat RFI BUGTRAQ 20080228 123 Flash Chat Module for phpBB BUGTRAQ 20080228 Re: 123 Flash Chat Module for phpBB ** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) 123flashchat.php and (2) phpbb_login_chat.php. NOTE: CVE disputes this issue because $phpbb_root_path is explicitly set to "./" in both programs.

cpe:/a:torrenttrader:torrenttrader:1.08 cpe:/a:torrenttrader:torrenttrader_classic:1.08

CVE-2008-1172

2008-03-05T19:44:00.000-05:00

2018-10-11T16:29:56.040-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3713 BUGTRAQ 20080303 Cross-site Scripting and CSRF in TorrentTrader Classic v1.08 XF torrenttraderclassic-accountinbox-csrf(40981) Cross-site request forgery (CSRF) vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other users, as demonstrated by sending messages.

cpe:/a:torrenttrader:torrenttrader:1.08 cpe:/a:torrenttrader:torrenttrader_classic:1.08

CVE-2008-1173

2008-03-05T19:44:00.000-05:00

2018-10-11T16:29:56.353-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3713 BUGTRAQ 20080303 Cross-site Scripting and CSRF in TorrentTrader Classic v1.08 BID 28082 XF torrenttraderclassic-accountinbox-xss(40980) Cross-site scripting (XSS) vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

cpe:/a:flicks_software:authentix:6.3b1::trial

CVE-2008-1174

2008-03-05T19:44:00.000-05:00

2008-09-05T17:37:02.613-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-03-06T14:37:00.000-05:00

FULLDISC 20080226 XSS Vulnerability in AuthentiX SECTRACK 1019520 BID 28040 Cross-site scripting (XSS) vulnerability in editUser.asp in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter.

cpe:/a:flicks_software:authentix:6.3b1::trial

CVE-2008-1175

2008-03-05T19:44:00.000-05:00

2008-09-05T17:37:02.770-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-03-06T14:39:00.000-05:00

Cross-site scripting (XSS) vulnerability in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter to aspAdmin/deleteUser.asp, a different vector than CVE-2008-1174. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:affiliate_market:affiliate_market:0.1_beta

CVE-2008-1176

2008-03-05T19:44:00.000-05:00

2017-09-28T21:30:35.787-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov XF affiliatemarket-sideblock-xss(40514) EXPLOIT-DB 5114 Cross-site scripting (XSS) vulnerability in function/sideblock.php in Affiliate Market (affmarket) 0.1 BETA allows remote attackers to inject arbitrary web script or HTML via the sideblock4 parameter.

cpe:/a:affiliate_market:affiliate_market:0.1_beta

CVE-2008-1177

2008-03-05T19:44:00.000-05:00

2017-09-28T21:30:35.847-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

XF affiliatemarket-detail-sql-injection(40515) EXPLOIT-DB 5114 SQL injection vulnerability in shop/detail.php in Affiliate Market (affmarket) 0.1 BETA allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:centreon:centreon:1.4 cpe:/a:centreon:centreon:1.4.1 cpe:/a:centreon:centreon:1.4.2 cpe:/a:centreon:centreon:1.4.2.1 cpe:/a:centreon:centreon:1.4.2.2 cpe:/a:centreon:centreon:1.4.2.3

CVE-2008-1178

2008-03-05T19:44:00.000-05:00

2018-10-11T16:29:56.820-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3715 CONFIRM http://www.centreon.com/Product/Changelog-Centreon-1.4.x.html BUGTRAQ 20080229 Centreon <= 1.4.2.3 (index.php) Remote File Disclosure BID 28052 XF centreon-index-file-include(40950) Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter, a different vector than CVE-2008-1119.

cpe:/a:centreon:centreon:1.4 cpe:/a:centreon:centreon:1.4.1 cpe:/a:centreon:centreon:1.4.2 cpe:/a:centreon:centreon:1.4.2.1 cpe:/a:centreon:centreon:1.4.2.2 cpe:/a:centreon:centreon:1.4.2.3

CVE-2008-1179

2008-03-05T19:44:00.000-05:00

2017-08-07T21:29:55.900-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.centreon.com/Product/Changelog-Centreon-1.4.x.html BID 28043 XF centreon-colorpicker-xss(40924) Multiple cross-site scripting (XSS) vulnerabilities in include/common/javascript/color_picker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) title parameters. NOTE: some of these details are obtained from third party information.

cpe:/a:juniper:secure_access_2000:5.5:r1:build_11711

CVE-2008-1180

2008-03-05T19:44:00.000-05:00

2018-10-11T16:29:57.460-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3720 MISC http://www.procheckup.com/Vulnerability_PR07-41.php BUGTRAQ 20080228 PR07-41: XSS on Juniper Networks Secure Access 2000 BID 28034 VUPEN ADV-2008-0762 XF junipernetworks-rdremediate-xss(40916) Cross-site scripting (XSS) vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to inject arbitrary web script or HTML via the delivery_mode parameter.

cpe:/a:juniper:secure_access_2000:5.5:r1:build_11711

CVE-2008-1181

2008-03-05T19:44:00.000-05:00

2018-10-11T16:29:58.070-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3719 BUGTRAQ 20080228 PR07-42: Webroot disclosure on Juniper Networks Secure Access 2000 BID 28037 SECTRACK 1019526 Juniper Networks Secure Access 2000 5.5 R1 (build 11711) allows remote attackers to obtain sensitive information via a direct request for remediate.cgi without certain parameters, which reveals the path in an "Execute failed" error message.

cpe:/a:bsd_perimeter:pfsense:1.0.1 cpe:/a:bsd_perimeter:pfsense:1.2:rc1 cpe:/a:bsd_perimeter:pfsense:1.2:rc2 cpe:/a:bsd_perimeter:pfsense:1.2:rc3 cpe:/a:bsd_perimeter:pfsense:1.2:rc4

CVE-2008-1182

2008-03-05T19:44:00.000-05:00

2017-08-07T21:29:56.010-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://blog.pfsense.org/?p=170 BID 28072 XF pfsense-unspecified-xss(40967) Cross-site scripting (XSS) vulnerability in BSD Perimeter pfSense before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:crafty_syntax_live_help:crafty_syntax_live_help:2.4.13 cpe:/a:crafty_syntax_live_help:crafty_syntax_live_help:2.4.14 cpe:/a:crafty_syntax_live_help:crafty_syntax_live_help:2.4.15

CVE-2008-1183

2008-03-05T19:44:00.000-05:00

2017-08-07T21:29:56.057-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://sourceforge.net/project/shownotes.php?release_id=580994 BID 28071 XF cslh-multiple-xss(40636) Multiple cross-site scripting (XSS) vulnerabilities in Crafty Syntax Live Help (CSLH) before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) livehelp.php, (2) user_questions.php, and (3) leavemessage.php. NOTE: the lostsheep.php vector is covered by CVE-2008-0848.

cpe:/a:dnssec-tools:dnssec-tools:1.3.1

CVE-2008-1184

2008-03-05T19:44:00.000-05:00

2017-08-07T21:29:56.120-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://sourceforge.net/mailarchive/forum.php?thread_name=sdlk5lolzj.fsf%40wes.hardakers.net&forum_name=dnssec-tools-users BID 27998 VUPEN ADV-2008-0673 XF dnssectools-libval-security-bypass(40836) FEDORA FEDORA-2008-1758 FEDORA FEDORA-2008-1771 The DNSSEC validation library (libval) library in dnssec-tools before 1.3.1 does not properly check that the signing key is the APEX trust anchor, which might allow attackers to conduct unspecified attacks.

cpe:/a:sun:jdk:1.5.0 cpe:/a:sun:jdk:1.5.0:update1 cpe:/a:sun:jdk:1.5.0:update10 cpe:/a:sun:jdk:1.5.0:update11 cpe:/a:sun:jdk:1.5.0:update12 cpe:/a:sun:jdk:1.5.0:update13 cpe:/a:sun:jdk:1.5.0:update14 cpe:/a:sun:jdk:1.5.0:update2 cpe:/a:sun:jdk:1.5.0:update3 cpe:/a:sun:jdk:1.5.0:update4 cpe:/a:sun:jdk:1.5.0:update5 cpe:/a:sun:jdk:1.5.0:update6 cpe:/a:sun:jdk:1.5.0:update7 cpe:/a:sun:jdk:1.5.0:update8 cpe:/a:sun:jdk:1.5.0:update9 cpe:/a:sun:jdk:1.6.0 cpe:/a:sun:jdk:1.6.0:update_3 cpe:/a:sun:jdk:1.6.0:update_4 cpe:/a:sun:jre:1.4.2 cpe:/a:sun:jre:1.4.2_1 cpe:/a:sun:jre:1.4.2_2 cpe:/a:sun:jre:1.4.2_3 cpe:/a:sun:jre:1.4.2_4 cpe:/a:sun:jre:1.4.2_5 cpe:/a:sun:jre:1.4.2_6 cpe:/a:sun:jre:1.4.2_7 cpe:/a:sun:jre:1.4.2_8 cpe:/a:sun:jre:1.4.2_9 cpe:/a:sun:jre:1.4.2_10 cpe:/a:sun:jre:1.4.2_11 cpe:/a:sun:jre:1.4.2_12 cpe:/a:sun:jre:1.4.2_13 cpe:/a:sun:jre:1.4.2_14 cpe:/a:sun:jre:1.4.2_15 cpe:/a:sun:jre:1.4.2_16 cpe:/a:sun:jre:1.5.0 cpe:/a:sun:jre:1.5.0:update1 cpe:/a:sun:jre:1.5.0:update10 cpe:/a:sun:jre:1.5.0:update11 cpe:/a:sun:jre:1.5.0:update12 cpe:/a:sun:jre:1.5.0:update13 cpe:/a:sun:jre:1.5.0:update14 cpe:/a:sun:jre:1.5.0:update2 cpe:/a:sun:jre:1.5.0:update3 cpe:/a:sun:jre:1.5.0:update4 cpe:/a:sun:jre:1.5.0:update5 cpe:/a:sun:jre:1.5.0:update6 cpe:/a:sun:jre:1.5.0:update7 cpe:/a:sun:jre:1.5.0:update8 cpe:/a:sun:jre:1.5.0:update9 cpe:/a:sun:jre:1.6.0 cpe:/a:sun:jre:1.6.0:update_1 cpe:/a:sun:jre:1.6.0:update_2 cpe:/a:sun:jre:1.6.0:update_3 cpe:/a:sun:jre:1.6.0:update_4 cpe:/a:sun:sdk:1.4.2 cpe:/a:sun:sdk:1.4.2_1 cpe:/a:sun:sdk:1.4.2_2 cpe:/a:sun:sdk:1.4.2_3 cpe:/a:sun:sdk:1.4.2_4 cpe:/a:sun:sdk:1.4.2_5 cpe:/a:sun:sdk:1.4.2_6 cpe:/a:sun:sdk:1.4.2_7 cpe:/a:sun:sdk:1.4.2_8 cpe:/a:sun:sdk:1.4.2_9 cpe:/a:sun:sdk:1.4.2_10 cpe:/a:sun:sdk:1.4.2_11 cpe:/a:sun:sdk:1.4.2_12 cpe:/a:sun:sdk:1.4.2_13 cpe:/a:sun:sdk:1.4.2_14 cpe:/a:sun:sdk:1.4.2_15 cpe:/a:sun:sdk:1.4.2_16

CVE-2008-1185

2008-03-06T16:44:00.000-05:00

2019-07-31T08:35:22.810-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-07-24T12:03:56.223-04:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2008-09-24 SUSE SUSE-SA:2008:018 GENTOO GLSA-200804-28 SECTRACK 1019555 SUNALERT 233321 CONFIRM http://support.apple.com/kb/HT3178 CONFIRM http://support.apple.com/kb/HT3179 GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 REDHAT RHSA-2008:0186 CERT TA08-066A CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0010.html VUPEN ADV-2008-0770 VUPEN ADV-2008-1856 XF java-virtualmachine-multiple-priv-escalation(41025) XF sun-jre-unspecified-priv-escalation(41138) Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1186, aka "the first issue."

cpe:/a:sun:jdk:1.5.0 cpe:/a:sun:jdk:1.5.0:update1 cpe:/a:sun:jdk:1.5.0:update10 cpe:/a:sun:jdk:1.5.0:update11 cpe:/a:sun:jdk:1.5.0:update12 cpe:/a:sun:jdk:1.5.0:update13 cpe:/a:sun:jdk:1.5.0:update2 cpe:/a:sun:jdk:1.5.0:update3 cpe:/a:sun:jdk:1.5.0:update4 cpe:/a:sun:jdk:1.5.0:update5 cpe:/a:sun:jdk:1.5.0:update6 cpe:/a:sun:jdk:1.5.0:update7 cpe:/a:sun:jdk:1.5.0:update8 cpe:/a:sun:jdk:1.5.0:update9 cpe:/a:sun:jre:1.4.2 cpe:/a:sun:jre:1.4.2_1 cpe:/a:sun:jre:1.4.2_2 cpe:/a:sun:jre:1.4.2_3 cpe:/a:sun:jre:1.4.2_4 cpe:/a:sun:jre:1.4.2_5 cpe:/a:sun:jre:1.4.2_6 cpe:/a:sun:jre:1.4.2_7 cpe:/a:sun:jre:1.4.2_8 cpe:/a:sun:jre:1.4.2_9 cpe:/a:sun:jre:1.4.2_10 cpe:/a:sun:jre:1.4.2_11 cpe:/a:sun:jre:1.4.2_12 cpe:/a:sun:jre:1.4.2_13 cpe:/a:sun:jre:1.4.2_14 cpe:/a:sun:jre:1.4.2_15 cpe:/a:sun:jre:1.4.2_16 cpe:/a:sun:jre:1.5.0 cpe:/a:sun:jre:1.5.0:update1 cpe:/a:sun:jre:1.5.0:update10 cpe:/a:sun:jre:1.5.0:update11 cpe:/a:sun:jre:1.5.0:update12 cpe:/a:sun:jre:1.5.0:update13 cpe:/a:sun:jre:1.5.0:update2 cpe:/a:sun:jre:1.5.0:update3 cpe:/a:sun:jre:1.5.0:update4 cpe:/a:sun:jre:1.5.0:update5 cpe:/a:sun:jre:1.5.0:update6 cpe:/a:sun:jre:1.5.0:update7 cpe:/a:sun:jre:1.5.0:update8 cpe:/a:sun:jre:1.5.0:update9 cpe:/a:sun:sdk:1.4.2 cpe:/a:sun:sdk:1.4.2_1 cpe:/a:sun:sdk:1.4.2_2 cpe:/a:sun:sdk:1.4.2_3 cpe:/a:sun:sdk:1.4.2_4 cpe:/a:sun:sdk:1.4.2_5 cpe:/a:sun:sdk:1.4.2_6 cpe:/a:sun:sdk:1.4.2_7 cpe:/a:sun:sdk:1.4.2_8 cpe:/a:sun:sdk:1.4.2_9 cpe:/a:sun:sdk:1.4.2_10 cpe:/a:sun:sdk:1.4.2_11 cpe:/a:sun:sdk:1.4.2_12 cpe:/a:sun:sdk:1.4.2_13 cpe:/a:sun:sdk:1.4.2_14 cpe:/a:sun:sdk:1.4.2_15 cpe:/a:sun:sdk:1.4.2_16

CVE-2008-1186

2008-03-06T16:44:00.000-05:00

2019-07-31T08:35:38.700-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-07-24T12:02:41.453-04:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2008-09-24 SUSE SUSE-SA:2008:018 GENTOO GLSA-200804-28 SECTRACK 1019555 SUNALERT 233321 CONFIRM http://support.apple.com/kb/HT3178 CONFIRM http://support.apple.com/kb/HT3179 GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 REDHAT RHSA-2008:0186 CERT TA08-066A CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0010.html VUPEN ADV-2008-0770 VUPEN ADV-2008-1856 XF java-virtualmachine-multiple-priv-escalation(41025) XF sun-jre-unspecified-priv-escalation(41138) Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.2_16 and earlier, allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1185, aka "the second issue."

cpe:/a:sun:jdk:5.0:update_1 cpe:/a:sun:jdk:5.0:update_10 cpe:/a:sun:jdk:5.0:update_11 cpe:/a:sun:jdk:5.0:update_12 cpe:/a:sun:jdk:5.0:update_13 cpe:/a:sun:jdk:5.0:update_14 cpe:/a:sun:jdk:5.0:update_2 cpe:/a:sun:jdk:5.0:update_3 cpe:/a:sun:jdk:5.0:update_4 cpe:/a:sun:jdk:5.0:update_5 cpe:/a:sun:jdk:5.0:update_6 cpe:/a:sun:jdk:5.0:update_7 cpe:/a:sun:jdk:5.0:update_8 cpe:/a:sun:jdk:5.0:update_9 cpe:/a:sun:jdk:6 cpe:/a:sun:jdk:6:update_1 cpe:/a:sun:jdk:6:update_2 cpe:/a:sun:jdk:6:update_3 cpe:/a:sun:jdk:6:update_4 cpe:/a:sun:jre:1.4.2_01 cpe:/a:sun:jre:1.4.2_02 cpe:/a:sun:jre:1.4.2_03 cpe:/a:sun:jre:1.4.2_04 cpe:/a:sun:jre:1.4.2_05 cpe:/a:sun:jre:1.4.2_06 cpe:/a:sun:jre:1.4.2_07 cpe:/a:sun:jre:1.4.2_10 cpe:/a:sun:jre:1.4.2_11 cpe:/a:sun:jre:1.4.2_12 cpe:/a:sun:jre:1.4.2_13 cpe:/a:sun:jre:1.4.2_14 cpe:/a:sun:jre:5.0 cpe:/a:sun:jre:5.0:update_1 cpe:/a:sun:jre:5.0:update_10 cpe:/a:sun:jre:5.0:update_11 cpe:/a:sun:jre:5.0:update_12 cpe:/a:sun:jre:5.0:update_13 cpe:/a:sun:jre:5.0:update_14 cpe:/a:sun:jre:5.0:update_2 cpe:/a:sun:jre:5.0:update_3 cpe:/a:sun:jre:5.0:update_4 cpe:/a:sun:jre:5.0:update_5 cpe:/a:sun:jre:5.0:update_6 cpe:/a:sun:jre:5.0:update_7 cpe:/a:sun:jre:5.0:update_8 cpe:/a:sun:jre:5.0:update_9 cpe:/a:sun:jre:6 cpe:/a:sun:jre:6:update_1 cpe:/a:sun:jre:6:update_2 cpe:/a:sun:jre:6:update_3 cpe:/a:sun:jre:6:update_4 cpe:/a:sun:sdk:1.4.2 cpe:/a:sun:sdk:1.4.2_01 cpe:/a:sun:sdk:1.4.2_02 cpe:/a:sun:sdk:1.4.2_03 cpe:/a:sun:sdk:1.4.2_04 cpe:/a:sun:sdk:1.4.2_05 cpe:/a:sun:sdk:1.4.2_06 cpe:/a:sun:sdk:1.4.2_07 cpe:/a:sun:sdk:1.4.2_08 cpe:/a:sun:sdk:1.4.2_09 cpe:/a:sun:sdk:1.4.2_10 cpe:/a:sun:sdk:1.4.2_11 cpe:/a:sun:sdk:1.4.2_12 cpe:/a:sun:sdk:1.4.2_13 cpe:/a:sun:sdk:1.4.2_14 cpe:/a:sun:sdk:1.4.2_15 cpe:/a:sun:sdk:1.4.2_16

CVE-2008-1187

2008-03-06T16:44:00.000-05:00

2017-09-28T21:30:36.097-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BEA BEA08-201.00 CONFIRM http://download.novell.com/Download?buildid=q5exhSqeBjA~ JVN JVN#04032535 JVNDB JVNDB-2008-000016 APPLE APPLE-SA-2008-09-24 SUSE SUSE-SA:2008:018 SUSE SUSE-SA:2008:025 GENTOO GLSA-200804-28 SUNALERT 233322 CONFIRM http://support.apple.com/kb/HT3178 CONFIRM http://support.apple.com/kb/HT3179 CONFIRM http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5033642.html GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 REDHAT RHSA-2008:0186 REDHAT RHSA-2008:0210 REDHAT RHSA-2008:0243 REDHAT RHSA-2008:0244 REDHAT RHSA-2008:0245 REDHAT RHSA-2008:0267 REDHAT RHSA-2008:0555 SECTRACK 1019548 CERT TA08-066A CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0010.html VUPEN ADV-2008-0770 VUPEN ADV-2008-1252 VUPEN ADV-2008-1856 XF java-virtualmachine-multiple-priv-escalation(41025) Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms.

CVE-2008-1188

2008-03-06T16:44:00.000-05:00

2019-07-31T08:45:32.213-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-07-24T12:00:31.197-04:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2008-09-24 SUSE SUSE-SA:2008:018 SUSE SUSE-SA:2008:025 GENTOO GLSA-200804-28 SUNALERT 233323 CONFIRM http://support.apple.com/kb/HT3178 CONFIRM http://support.apple.com/kb/HT3179 GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 REDHAT RHSA-2008:0186 REDHAT RHSA-2008:0210 REDHAT RHSA-2008:0267 SECTRACK 1019549 CERT TA08-066A CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0010.html VUPEN ADV-2008-0770 VUPEN ADV-2008-1856 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-009/ MISC http://www.zerodayinitiative.com/advisories/ZDI-08-010/ XF javawebstart-application-priv-escalation(41029) XF javawebstart-multiple-unspecified-bo(41133) Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with (1) a long key name in the xml header or (2) a long charset value, different issues than CVE-2008-1189, aka "The first two issues."

CVE-2008-1189

2008-03-06T16:44:00.000-05:00

2019-07-31T08:47:35.857-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2019-07-24T11:59:22.087-04:00

ALLOWS_USER_ACCESS

APPLE APPLE-SA-2008-09-24 SUSE SUSE-SA:2008:018 SUSE SUSE-SA:2008:025 GENTOO GLSA-200804-28 SUNALERT 233323 CONFIRM http://support.apple.com/kb/HT3178 CONFIRM http://support.apple.com/kb/HT3179 GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 REDHAT RHSA-2008:0186 REDHAT RHSA-2008:0210 REDHAT RHSA-2008:0267 SECTRACK 1019549 CERT TA08-066A CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0010.html VUPEN ADV-2008-0770 VUPEN ADV-2008-1856 XF javawebstart-application-priv-escalation(41029) XF javawebstart-multiple-unspecified-bo(41133) XF javawebstart-unspecified-bo(41135) Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different issue than CVE-2008-1188, aka the "third" issue.

CVE-2008-1190

2008-03-06T16:44:00.000-05:00

2019-07-31T08:40:03.837-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-07-24T11:57:55.940-04:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2008-09-24 SUSE SUSE-SA:2008:018 SUSE SUSE-SA:2008:025 GENTOO GLSA-200804-28 SUNALERT 233323 CONFIRM http://support.apple.com/kb/HT3178 CONFIRM http://support.apple.com/kb/HT3179 GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 REDHAT RHSA-2008:0186 REDHAT RHSA-2008:0210 REDHAT RHSA-2008:0267 SECTRACK 1019549 CERT TA08-066A CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0010.html VUPEN ADV-2008-0770 VUPEN ADV-2008-1856 XF javawebstart-application-priv-escalation(41029) Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application, a different issue than CVE-2008-1191, aka the "fourth" issue.

cpe:/a:sun:jdk:6_update_4 cpe:/a:sun:jre:6_update_4

CVE-2008-1191

2008-03-06T16:44:00.000-05:00

2017-09-28T21:30:36.440-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

APPLE APPLE-SA-2008-09-24 SUSE SUSE-SA:2008:018 GENTOO GLSA-200804-28 SUNALERT 233323 CONFIRM http://support.apple.com/kb/HT3178 CONFIRM http://support.apple.com/kb/HT3179 GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 REDHAT RHSA-2008:0186 REDHAT RHSA-2008:0267 SECTRACK 1019549 CERT TA08-066A CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0010.html VUPEN ADV-2008-0770 VUPEN ADV-2008-1856 XF javawebstart-application-priv-escalation(41029) XF javawebstart-unspecified-priv-escalation(41136) Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via an untrusted application, a different issue than CVE-2008-1190, aka "The fifth issue."

cpe:/a:sun:jdk:1.5.0:- cpe:/a:sun:jdk:1.5.0:update1 cpe:/a:sun:jdk:1.5.0:update10 cpe:/a:sun:jdk:1.5.0:update11 cpe:/a:sun:jdk:1.5.0:update12 cpe:/a:sun:jdk:1.5.0:update13 cpe:/a:sun:jdk:1.5.0:update14 cpe:/a:sun:jdk:1.5.0:update2 cpe:/a:sun:jdk:1.5.0:update3 cpe:/a:sun:jdk:1.5.0:update4 cpe:/a:sun:jdk:1.5.0:update5 cpe:/a:sun:jdk:1.5.0:update6 cpe:/a:sun:jdk:1.5.0:update7 cpe:/a:sun:jdk:1.5.0:update8 cpe:/a:sun:jdk:1.5.0:update9 cpe:/a:sun:jdk:1.6.0:- cpe:/a:sun:jdk:1.6.0:update_3 cpe:/a:sun:jdk:1.6.0:update_4 cpe:/a:sun:jre:1.3.1 cpe:/a:sun:jre:1.3.1_2 cpe:/a:sun:jre:1.3.1_03 cpe:/a:sun:jre:1.3.1_04 cpe:/a:sun:jre:1.3.1_05 cpe:/a:sun:jre:1.3.1_06 cpe:/a:sun:jre:1.3.1_07 cpe:/a:sun:jre:1.3.1_08 cpe:/a:sun:jre:1.3.1_09 cpe:/a:sun:jre:1.3.1_10 cpe:/a:sun:jre:1.3.1_11 cpe:/a:sun:jre:1.3.1_12 cpe:/a:sun:jre:1.3.1_13 cpe:/a:sun:jre:1.3.1_14 cpe:/a:sun:jre:1.3.1_15 cpe:/a:sun:jre:1.3.1_16 cpe:/a:sun:jre:1.3.1_17 cpe:/a:sun:jre:1.3.1_18 cpe:/a:sun:jre:1.3.1_19 cpe:/a:sun:jre:1.3.1_20 cpe:/a:sun:jre:1.3.1_21 cpe:/a:sun:jre:1.4.2 cpe:/a:sun:jre:1.4.2_1 cpe:/a:sun:jre:1.4.2_2 cpe:/a:sun:jre:1.4.2_3 cpe:/a:sun:jre:1.4.2_4 cpe:/a:sun:jre:1.4.2_5 cpe:/a:sun:jre:1.4.2_6 cpe:/a:sun:jre:1.4.2_7 cpe:/a:sun:jre:1.4.2_8 cpe:/a:sun:jre:1.4.2_9 cpe:/a:sun:jre:1.4.2_10 cpe:/a:sun:jre:1.4.2_11 cpe:/a:sun:jre:1.4.2_12 cpe:/a:sun:jre:1.4.2_13 cpe:/a:sun:jre:1.4.2_14 cpe:/a:sun:jre:1.4.2_15 cpe:/a:sun:jre:1.4.2_16 cpe:/a:sun:jre:1.5.0:- cpe:/a:sun:jre:1.5.0:update1 cpe:/a:sun:jre:1.5.0:update10 cpe:/a:sun:jre:1.5.0:update11 cpe:/a:sun:jre:1.5.0:update12 cpe:/a:sun:jre:1.5.0:update13 cpe:/a:sun:jre:1.5.0:update14 cpe:/a:sun:jre:1.5.0:update2 cpe:/a:sun:jre:1.5.0:update3 cpe:/a:sun:jre:1.5.0:update4 cpe:/a:sun:jre:1.5.0:update5 cpe:/a:sun:jre:1.5.0:update6 cpe:/a:sun:jre:1.5.0:update7 cpe:/a:sun:jre:1.5.0:update8 cpe:/a:sun:jre:1.5.0:update9 cpe:/a:sun:jre:1.6.0:- cpe:/a:sun:jre:1.6.0:update_1 cpe:/a:sun:jre:1.6.0:update_2 cpe:/a:sun:jre:1.6.0:update_3 cpe:/a:sun:jre:1.6.0:update_4 cpe:/a:sun:sdk:1.3.1 cpe:/a:sun:sdk:1.3.1_01 cpe:/a:sun:sdk:1.3.1_01a cpe:/a:sun:sdk:1.3.1_02 cpe:/a:sun:sdk:1.3.1_03 cpe:/a:sun:sdk:1.3.1_04 cpe:/a:sun:sdk:1.3.1_05 cpe:/a:sun:sdk:1.3.1_06 cpe:/a:sun:sdk:1.3.1_07 cpe:/a:sun:sdk:1.3.1_08 cpe:/a:sun:sdk:1.3.1_09 cpe:/a:sun:sdk:1.3.1_10 cpe:/a:sun:sdk:1.3.1_11 cpe:/a:sun:sdk:1.3.1_12 cpe:/a:sun:sdk:1.3.1_13 cpe:/a:sun:sdk:1.3.1_14 cpe:/a:sun:sdk:1.3.1_15 cpe:/a:sun:sdk:1.3.1_16 cpe:/a:sun:sdk:1.3.1_17 cpe:/a:sun:sdk:1.3.1_18 cpe:/a:sun:sdk:1.3.1_19 cpe:/a:sun:sdk:1.3.1_20 cpe:/a:sun:sdk:1.3.1_21 cpe:/a:sun:sdk:1.4.2 cpe:/a:sun:sdk:1.4.2_1 cpe:/a:sun:sdk:1.4.2_2 cpe:/a:sun:sdk:1.4.2_3 cpe:/a:sun:sdk:1.4.2_4 cpe:/a:sun:sdk:1.4.2_5 cpe:/a:sun:sdk:1.4.2_6 cpe:/a:sun:sdk:1.4.2_7 cpe:/a:sun:sdk:1.4.2_8 cpe:/a:sun:sdk:1.4.2_9 cpe:/a:sun:sdk:1.4.2_10 cpe:/a:sun:sdk:1.4.2_11 cpe:/a:sun:sdk:1.4.2_12 cpe:/a:sun:sdk:1.4.2_13 cpe:/a:sun:sdk:1.4.2_14 cpe:/a:sun:sdk:1.4.2_15 cpe:/a:sun:sdk:1.4.2_16

CVE-2008-1192

2008-03-06T16:44:00.000-05:00

2019-07-31T08:36:48.703-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2019-07-24T11:50:17.437-04:00

ALLOWS_USER_ACCESS

BEA BEA08-201.00 APPLE APPLE-SA-2008-09-24 SUSE SUSE-SA:2008:018 SUSE SUSE-SA:2008:025 GENTOO GLSA-200804-28 SUNALERT 233324 CONFIRM http://support.apple.com/kb/HT3178 CONFIRM http://support.apple.com/kb/HT3179 GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 REDHAT RHSA-2008:0186 REDHAT RHSA-2008:0210 REDHAT RHSA-2008:0267 SECTRACK 1019550 CERT TA08-066A CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0010.html VUPEN ADV-2008-0770 VUPEN ADV-2008-1252 VUPEN ADV-2008-1856 XF java-plugin-unspecified-security-bypass(41031) Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier, and 1.3.1_21 and earlier; allows remote attackers to bypass the same origin policy and "execute local applications" via unknown vectors.

CVE-2008-1193

2008-03-06T16:44:00.000-05:00

2019-07-31T08:41:14.483-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-07-24T11:56:40.110-04:00

ALLOWS_ADMIN_ACCESS

BEA BEA08-201.00 APPLE APPLE-SA-2008-09-24 SUSE SUSE-SA:2008:018 SUSE SUSE-SA:2008:025 GENTOO GLSA-200804-28 SUNALERT 233325 CONFIRM http://support.apple.com/kb/HT3178 CONFIRM http://support.apple.com/kb/HT3179 GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 REDHAT RHSA-2008:0186 REDHAT RHSA-2008:0210 REDHAT RHSA-2008:0244 REDHAT RHSA-2008:0245 REDHAT RHSA-2008:0267 BID 28125 SECTRACK 1019551 CERT TA08-066A CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0010.html VUPEN ADV-2008-0770 VUPEN ADV-2008-1252 VUPEN ADV-2008-1856 XF sun-jre-imagelibrary-privilege-escalation(41028) Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to gain privileges via an untrusted application.

CVE-2008-1194

2008-03-06T16:44:00.000-05:00

2019-07-31T08:44:32.880-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2019-07-24T12:14:34.597-04:00

BEA BEA08-201.00 APPLE APPLE-SA-2008-09-24 SUSE SUSE-SA:2008:018 SUSE SUSE-SA:2008:025 GENTOO GLSA-200804-28 SUNALERT 233325 CONFIRM http://support.apple.com/kb/HT3178 CONFIRM http://support.apple.com/kb/HT3179 GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 REDHAT RHSA-2008:0186 REDHAT RHSA-2008:0210 REDHAT RHSA-2008:0244 REDHAT RHSA-2008:0245 REDHAT RHSA-2008:0267 SECTRACK 1019551 CERT TA08-066A CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0010.html VUPEN ADV-2008-0770 VUPEN ADV-2008-1252 VUPEN ADV-2008-1856 XF sun-jre-jdk-colorlibrary-dos(41132) Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to cause a denial of service (crash) via unknown vectors.

CVE-2008-1195

2008-03-06T16:44:00.000-05:00

2019-07-31T08:38:47.647-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-07-24T11:52:54.973-04:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2008-09-24 SUSE SUSE-SA:2008:018 SUSE SUSE-SA:2008:019 SUSE SUSE-SA:2008:025 GENTOO GLSA-200804-28 SUNALERT 233326 SUNALERT 238492 CONFIRM http://support.apple.com/kb/HT3178 CONFIRM http://support.apple.com/kb/HT3179 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 MANDRIVA MDVSA-2008:080 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-18.html REDHAT RHSA-2008:0186 REDHAT RHSA-2008:0210 REDHAT RHSA-2008:0267 BUGTRAQ 20080327 rPSA-2008-0128-1 firefox SECTRACK 1019553 UBUNTU USN-592-1 CERT TA08-066A CERT TA08-087A CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0010.html VUPEN ADV-2008-0770 VUPEN ADV-2008-0998 VUPEN ADV-2008-1793 VUPEN ADV-2008-1856 XF sun-jre-javascript-unauthorized-access(41030) Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.

CVE-2008-1196

2008-03-06T16:44:00.000-05:00

2019-07-31T08:43:06.157-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2019-07-24T11:51:58.003-04:00

ALLOWS_USER_ACCESS

CONFIRM http://download.novell.com/Download?buildid=q5exhSqeBjA~ APPLE APPLE-SA-2008-09-24 SUSE SUSE-SA:2008:018 SUSE SUSE-SA:2008:025 GENTOO GLSA-200804-28 SUNALERT 233327 CONFIRM http://support.apple.com/kb/HT3178 CONFIRM http://support.apple.com/kb/HT3179 CONFIRM http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5033642.html GENTOO GLSA-200804-20 GENTOO GLSA-200806-11 CERT-VN VU#223028 REDHAT RHSA-2008:0186 REDHAT RHSA-2008:0210 REDHAT RHSA-2008:0267 REDHAT RHSA-2008:0555 SECTRACK 1019552 CERT TA08-066A CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0010.html VUPEN ADV-2008-0770 VUPEN ADV-2008-1856 XF sun-java-webstart-javaws-bo(41026) Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.

cpe:/h:marvell:88w8361w-bem1 cpe:/h:netgear:wn802t:1.3.16

CVE-2008-1197

2008-09-05T12:08:00.000-04:00

2018-10-11T16:30:05.040-04:00

6.3

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov SREASON 4215 BUGTRAQ 20080904 Marvell Driver Null SSID Association Request Vulnerability BID 30976 XF netgear-wn802t-ssid-dos(44918) The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via a "Null SSID."

cpe:/a:red_hat:enterprise_linux:4 cpe:/o:redhat:enterprise_linux:3.0 cpe:/o:redhat:enterprise_linux:5.0

CVE-2008-1198

2008-03-06T16:44:00.000-05:00

2018-01-05T21:29:00.533-05:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

NONE

http://nvd.nist.gov SECUNIA 48045 MISC http://www.ernw.de/download/pskattack.pdf SECTRACK 1019563 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=435274 XF ipsec-ifup-weak-security(41053) The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.

cpe:/a:dovecot:dovecot:0.99.13 cpe:/a:dovecot:dovecot:0.99.14 cpe:/a:dovecot:dovecot:1.0 cpe:/a:dovecot:dovecot:1.0.2 cpe:/a:dovecot:dovecot:1.0.3 cpe:/a:dovecot:dovecot:1.0.4 cpe:/a:dovecot:dovecot:1.0.5 cpe:/a:dovecot:dovecot:1.0.6 cpe:/a:dovecot:dovecot:1.0.7 cpe:/a:dovecot:dovecot:1.0.8 cpe:/a:dovecot:dovecot:1.0.9 cpe:/a:dovecot:dovecot:1.0.10 cpe:/a:dovecot:dovecot:1.0.beta2 cpe:/a:dovecot:dovecot:1.0.beta3 cpe:/a:dovecot:dovecot:1.0.beta7 cpe:/a:dovecot:dovecot:1.0.beta8 cpe:/a:dovecot:dovecot:1.0.rc1 cpe:/a:dovecot:dovecot:1.0.rc2 cpe:/a:dovecot:dovecot:1.0.rc3 cpe:/a:dovecot:dovecot:1.0.rc4 cpe:/a:dovecot:dovecot:1.0.rc5 cpe:/a:dovecot:dovecot:1.0.rc6 cpe:/a:dovecot:dovecot:1.0.rc7 cpe:/a:dovecot:dovecot:1.0.rc8 cpe:/a:dovecot:dovecot:1.0.rc9 cpe:/a:dovecot:dovecot:1.0.rc10 cpe:/a:dovecot:dovecot:1.0.rc11 cpe:/a:dovecot:dovecot:1.0.rc12 cpe:/a:dovecot:dovecot:1.0.rc13 cpe:/a:dovecot:dovecot:1.0.rc14 cpe:/a:dovecot:dovecot:1.0.rc15 cpe:/a:dovecot:dovecot:1.0_rc29

CVE-2008-1199

2008-03-06T16:44:00.000-05:00

2018-10-11T16:30:05.493-04:00

4.4

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SR:2008:020 GENTOO GLSA-200803-25 DEBIAN DSA-1516 MLIST [Dovecot-news] 20080504 v1.0.11 released REDHAT RHSA-2008:0297 BUGTRAQ 20080304 Dovecot mail_extra_groups setting is often used insecurely BID 28092 XF dovecot-mailextragroups-unauth-access(41009) UBUNTU USN-593-1 FEDORA FEDORA-2008-2464 FEDORA FEDORA-2008-2475 Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are writable by group, via a symlink attack.

cpe:/a:microsoft:access:2000 cpe:/a:microsoft:jet:4.0

CVE-2008-1200

2008-03-06T16:44:00.000-05:00

2008-09-05T17:37:06.863-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2008-03-07T10:25:00.000-05:00

ALLOWS_ADMIN_ACCESS

MISC http://pandalabs.pandasecurity.com/archive/New-MS-Access-exploit.aspx BID 28087 Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet Engine (msjet40.dll). NOTE: this is probably a different issue than CVE-2007-6026.

cpe:/a:adobe:flash:basic:8 cpe:/a:adobe:flash:professional:8 cpe:/a:adobe:flash:professional:cs3

CVE-2008-1201

2008-03-24T13:44:00.000-04:00

2017-08-07T21:29:57.337-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://ruder.cdut.net/blogview.asp?logID=241 CONFIRM http://www.adobe.com/support/security/advisories/apsa08-03.html MISC http://www.fortiguardcenter.com/advisory/FGA-2008-07.html BID 28349 SECTRACK 1019681 VUPEN ADV-2008-0948 XF adobe-flash-fla-code-execution(41327) Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows allow user-assisted remote attackers to execute arbitrary code via a crafted .FLA file.

cpe:/a:adobe:livecycle_workflow:6.2

CVE-2008-1202

2008-03-11T20:44:00.000-04:00

2018-10-11T16:30:07.460-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3729 CONFIRM http://www.adobe.com/support/security/bulletins/apsb08-10.html MISC http://www.liquidmatrix.org/blog/2008/03/11/advisory-adobe-livecycle-workflow-xss-vulnerability/ BUGTRAQ 20080311 Advisory Adobe LiveCycle Workflow XSS Vulnerability BID 28209 SECTRACK 1019588 VUPEN ADV-2008-0864 XF adobe-lifecycle-loginpage-xss(41143) Cross-site scripting (XSS) vulnerability in the web management interface in Adobe LiveCycle Workflow 6.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

cpe:/a:adobe:coldfusion:7.0 cpe:/a:adobe:coldfusion:8.0

CVE-2008-1203

2008-03-11T20:44:00.000-04:00

2017-08-07T21:29:57.463-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.adobe.com/support/security/bulletins/apsb08-08.html BID 28207 SECTRACK 1019600 VUPEN ADV-2008-0862 XF coldfusion-interface-brute-force(41150) The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote attackers to conduct brute force attacks without detection.

cpe:/a:sun:java_system_access_manager:7.0::linux cpe:/a:sun:java_system_access_manager:7.0_2005q4::hp-ux cpe:/a:sun:java_system_access_manager:7.0_2005q4::solaris_sparc cpe:/a:sun:java_system_access_manager:7.0_2005q4::solaris_x86 cpe:/a:sun:java_system_access_manager:7.0_2005q4::windows cpe:/a:sun:java_system_access_manager:7.1::hp-ux cpe:/a:sun:java_system_access_manager:7.1::linux cpe:/a:sun:java_system_access_manager:7.1::solaris_sparc cpe:/a:sun:java_system_access_manager:7.1::solaris_x86 cpe:/a:sun:java_system_access_manager:7.1::windows

CVE-2008-1204

2008-03-07T19:44:00.000-05:00

2017-08-07T21:29:57.527-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUNALERT 201251 BID 28113 VUPEN ADV-2008-0784 XF sun-jsam-adminconsole-xss(41024) Multiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) Help and (2) Version windows.

cpe:/o:sun:solaris:10::sparc cpe:/o:sun:solaris:10::x86

CVE-2008-1205

2008-03-07T19:44:00.000-05:00

2017-08-07T21:29:57.573-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov SUNALERT 233761 BID 28112 VUPEN ADV-2008-0783 XF solaris-ipsecah-dos(41023) Unspecified vulnerability in the ipsecah kernel module in Sun Solaris 10, when a key management daemon for IPsec security associations is running, allows local users to cause a denial of service (panic) via unspecified vectors.

cpe:/a:linux_kiss_server:linux_kiss_server:1.2

CVE-2008-1206

2008-03-07T19:44:00.000-05:00

2017-08-07T21:29:57.620-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20080305 Vulnerability in Linux Kiss Server v1.2 BID 28099 MISC http://www.vashnukad.com/ VUPEN ADV-2008-0785 XF linuxkissserver-logmessage-format-string(41018) Format string vulnerability in the log_message function in lks.c in Linux Kiss Server 1.2, when background (daemon) mode is disabled, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in an invalid command.

cpe:/a:fujitsu:interstage_application_server_enterprise:7.0 cpe:/a:fujitsu:interstage_application_server_enterprise:7.0.1 cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.0 cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.1 cpe:/a:fujitsu:interstage_application_server_enterprise:8.0.2 cpe:/a:fujitsu:interstage_application_server_plus:7.0 cpe:/a:fujitsu:interstage_application_server_plus:7.0.1 cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.0 cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.1 cpe:/a:fujitsu:interstage_application_server_standard_j:8.0.2 cpe:/a:fujitsu:interstage_apworks_enterprise:8.0.0 cpe:/a:fujitsu:interstage_apworks_modelers_j:7.0 cpe:/a:fujitsu:interstage_apworks_standard_j:8.0.0 cpe:/a:fujitsu:interstage_business_application_server:8.0::enterprise cpe:/a:fujitsu:interstage_smart_repository

CVE-2008-1207

2008-03-07T19:44:00.000-05:00

2017-08-07T21:29:57.683-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.fujitsu.com/global/support/software/security/products-f/interstage-sr-200801e.html CONFIRM http://www.fujitsu.com/global/support/software/security/products-f/interstage-sr-200802e.html BID 28114 VUPEN ADV-2008-0786 XF interstage-smart-repository-dos(41039) XF interstage-smartrepository-update-dos(41041) Multiple unspecified vulnerabilities in Fujitsu Interstage Smart Repository, as used in multiple Fujitsu Interstage products, allow remote attackers to cause a denial of service (daemon crash) via (1) an invalid request or (2) a large amount of data sent to the registered attribute value.

cpe:/a:checkpoint:vpn-1_utm_edge_w_embedded_ngx:7.0.48

CVE-2008-1208

2008-03-07T19:44:00.000-05:00

2018-10-11T16:30:08.243-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.louhi.fi/advisory/checkpoint_080306.txt BUGTRAQ 20080306 Checkpoint VPN-1 UTM Edge cross-site scripting BID 28116 SECTRACK 1019554 VUPEN ADV-2008-0788 XF vpn1utmedge-login-xss(41032) CONFIRM https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk34520 Cross-site scripting (XSS) vulnerability in the login page in Check Point VPN-1 UTM Edge W Embedded NGX 7.0.48x allows remote attackers to inject arbitrary web script or HTML via the user parameter.

cpe:/a:xitex:xitex_webcontent_m1:::professional cpe:/a:xitex:xitex_webcontent_m1:::standard cpe:/a:xitex:xitex_webcontent_m1:::start

CVE-2008-1209

2008-03-07T19:44:00.000-05:00

2017-08-07T21:29:57.790-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 28115 XF xitex-redirect-xss(41021) Cross-site scripting (XSS) vulnerability in redirect.do in Xitex WebContent M1 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:pnotepad:programmers_notepad:2.0.6.1

CVE-2008-1210

2008-03-07T19:44:00.000-05:00

2017-08-07T21:29:57.837-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=581499&group_id=45545 BID 28119 XF programmersnotepad-ctags-bo(41022) Stack-based buffer overflow in the ctags parsing code in Programmer's Notepad before 2.0.8.718 allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted .c file, when the victim selects the Jump To dialog. NOTE: some of these details are obtained from third party information.

cpe:/a:bosdev:bosdates:3.0 cpe:/a:bosdev:bosdates:3.1 cpe:/a:bosdev:bosdates:3.2 cpe:/a:bosdev:bosdates:4.0

CVE-2008-1211

2008-03-07T19:44:00.000-05:00

2017-08-07T21:29:57.900-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 28117 XF bosdates-type-category-xss(41020) Cross-site scripting (XSS) vulnerability in BosDates 3.x and 4.x allows remote attackers to inject arbitrary web script or HTML via (1) the type parameter in calendar.php and (2) the category parameter in calendar_search.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:podcast_generator:podcast_generator:0.96.2

CVE-2008-1212

2008-03-07T19:44:00.000-05:00

2017-08-07T21:29:57.963-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 28106 XF podcastgenerator-setpermissions-xss(41130) Cross-site scripting (XSS) vulnerability in set_permissions.php in Podcast Generator 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the scriptlang parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:numara:footprints:8.1

CVE-2008-1213

2008-03-07T19:44:00.000-05:00

2017-08-07T21:29:58.010-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 28103 XF footprints-title-xss(41003) Cross-site scripting (XSS) vulnerability in Numara FootPrints for Linux 8.1 allows remote attackers to inject arbitrary web script or HTML via the Title form field when setting an appointment. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:numara:footprints:8.1

CVE-2008-1214

2008-03-07T19:44:00.000-05:00

2017-08-07T21:29:58.057-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

XF footprints-projectnum-command-execution(41005) MRcgi/MRProcessIncomingForms.pl in Numara FootPrints 8.1 on Linux allows remote attackers to execute arbitrary code via shell metacharacters in the PROJECTNUM parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/o:freebsd:freebsd:6.3 cpe:/o:freebsd:freebsd:7.0 cpe:/o:netbsd:netbsd cpe:/o:openbsd:openbsd:4.1 cpe:/o:openbsd:openbsd:4.2

CVE-2008-1215

2008-03-08T21:44:00.000-05:00

2017-08-07T21:29:58.120-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov OPENBSD [4.1] 20080307 014: SECURITY FIX: March 7, 2008 OPENBSD [4.2] 20080307 009: SECURITY FIX: March 7, 2008 VULN-DEV 20080229 *BSD user-ppp local root (when conditions permit) VULN-DEV 20080301 Re: *BSD user-ppp local root (when conditions permit) BID 28090 XF userppp-commandexpandinterpret-bo(41034) Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "~" characters.

cpe:/a:ibm:lotus_quickr_server:8.0

CVE-2008-1216

2008-03-08T21:44:00.000-05:00

2018-10-11T16:30:08.930-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3721 BUGTRAQ 20080222 IBM Quickr 8 Calendar Xss Injection (Bypass Quickr 8.0 Xss Filter) BID 27925 VUPEN ADV-2008-0667 IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting (XSS) attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a JavaScript event in a malformed element, as demonstrated by an onload event in an IFRAME element.

cpe:/a:ibm:lotus_notes:6.5 cpe:/a:ibm:lotus_notes:7.0.2 cpe:/a:ibm:lotus_notes:8.0.0

CVE-2008-1217

2008-03-08T21:44:00.000-05:00

2009-09-03T00:00:00.000-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2008-03-10T14:06:00.000-04:00

ALLOWS_ADMIN_ACCESS

SECTRACK 1019464 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg21271957 Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH, and 8.0.x before 8.0.1 allows remote attackers to execute arbitrary code via a crafted attachment in an e-mail message sent over SMTP, a variant of CVE-2007-6706.

cpe:/a:dovecot:dovecot:1.0.12 cpe:/a:dovecot:dovecot:1.1:rc2

CVE-2008-1218

2008-03-10T19:44:00.000-04:00

2018-10-11T16:30:09.337-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SUSE SUSE-SR:2008:020 GENTOO GLSA-200803-25 MISC http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0108 DEBIAN DSA-1516 MLIST [Dovecot-news] 20080309 Security hole #6: Some passdbs allowed users to log in without a valid password MLIST [Dovecot-news] 20080309 v1.0.13 and v1.1.rc3 released BUGTRAQ 20080312 rPSA-2008-0108-1 dovecot BID 28181 XF dovecot-tab-authentication-bypass(41085) CONFIRM https://issues.rpath.com/browse/RPL-2341 UBUNTU USN-593-1 EXPLOIT-DB 5257 FEDORA FEDORA-2008-2464 FEDORA FEDORA-2008-2475 Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skip_password_check field to be specified.

cpe:/a:phpnuke:kutubisitte_component:1.1

CVE-2008-1219

2008-03-10T13:44:00.000-04:00

2018-10-11T16:30:11.507-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3722 MISC http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3058 BUGTRAQ 20080306 PHP-Nuke KutubiSitte "kid" SQL Injection BUGTRAQ 20080306 PHP-Nuke KutubiSitte "kid" SQL Injection exploit code adding BID 28126 XF kutubisitte-kid-sql-injection(41036) SQL injection vulnerability in the Kutub-i Sitte (KutubiSitte) 1.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the kid parameter in a hadisgoster action to modules.php.

cpe:/a:phpnuke:4nchat:0.91

CVE-2008-1220

2008-03-10T13:44:00.000-04:00

2017-08-07T21:29:58.307-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 28128 XF 4nchat-roomid-sql-injection(41051) SQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the roomid parameter in an index action to modules.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:microworld_technologies:escan:9.0.742.98::corporate cpe:/a:microworld_technologies:escan_management_console:9.0.742.1 cpe:/a:microworld_technologies:escan_server:9.0.742.1

CVE-2008-1221

2008-03-10T13:44:00.000-04:00

2018-10-11T16:30:12.103-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/escaz-adv.txt SREASON 3723 BUGTRAQ 20080306 Directory traversal in MicroWorld eScan Server 9.0.742.98 BID 28127 XF escan-filename-directory-traversal(41033) Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (aka eScan Server) 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR (get) command.

cpe:/a:dokeos:open_source_learning_and_knowledge_management_tool:1.8.4 cpe:/a:dokeos:open_source_learning_and_knowledge_management_tool:1.8.4:sp1 cpe:/a:dokeos:open_source_learning_and_knowledge_management_tool:1.8.4:sp2

CVE-2008-1222

2008-03-10T13:44:00.000-04:00

2017-08-07T21:29:58.417-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://projects.dokeos.com/index.php?do=details&task_id=2312 CONFIRM http://www.dokeos.com/wiki/index.php/Security BID 28121 VUPEN ADV-2008-0798 XF dokeos-unspecified-xss(41046) Cross-site scripting (XSS) vulnerability in Dokeos 1.8.4 before SP3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2008-1223

2008-03-10T13:44:00.000-04:00

2017-08-07T21:29:58.463-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://projects.dokeos.com/index.php?do=details&task_id=2312 CONFIRM http://www.dokeos.com/wiki/index.php/Security BID 28121 VUPEN ADV-2008-0798 XF dokeos-unspecified-code-execution(41048) Unspecified vulnerability in Dokeos 1.8.4 before SP3 allows attackers to execute arbitrary code via unspecified vectors.

cpe:/a:bosdev:bosclassifieds_classified_ads:3.0

CVE-2008-1224

2008-03-10T13:44:00.000-04:00

2017-08-07T21:29:58.527-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 28140 XF classifiedads-account-xss(41045) Cross-site scripting (XSS) vulnerability in account.php in BosClassifieds Classified Ads System 3.0 allows remote attackers to inject arbitrary web script or HTML via the returnTo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:webct:webct:4.1.5.8::campus_edition

CVE-2008-1225

2008-03-10T13:44:00.000-04:00

2017-08-07T21:29:58.587-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20080305 WebCT 4.x Javascript Session Stealer Exploits MISC http://www.balupton.com/blogs/dev?title=webct_session_stealer_exploit MISC http://www.balupton.com/documents/webct_exploits.txt BID 28107 XF webct-dontwraptext-xss(41047) Multiple cross-site scripting (XSS) vulnerabilities in WebCT Campus Edition 4.1.5.8, when "Don't wrap text" is enabled, allow remote authenticated users to inject arbitrary web script or HTML via a (1) mail message or (2) discussion board message. NOTE: this might overlap CVE-2005-1076.

cpe:/a:zimbra:collaboration_suite:4.0.3 cpe:/a:zimbra:collaboration_suite:4.5.6

CVE-2008-1226

2008-03-10T13:44:00.000-04:00

2017-08-07T21:29:58.650-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov JVN JVN#95014590 JVNDB JVNDB-2008-000004 BID 28134 CONFIRM http://www.zimbra.com/jp/products/vulnerability.html XF zimbra-email-xss(41044) Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration Suite (ZCS) 4.0.3, 4.5.6, and possibly other versions before 4.5.10 allow remote attackers to inject arbitrary web script or HTML via an e-mail attachment, possibly involving a (1) .jpg or (2) .gif image attachment.

cpe:/a:silc:silc_toolkit:1.1 cpe:/a:silc:silc_toolkit:1.1.1 cpe:/a:silc:silc_toolkit:1.1.2 cpe:/a:silc:silc_toolkit:1.1.3 cpe:/a:silc:silc_toolkit:1.1.4 cpe:/a:silc:silc_toolkit:1.1.5

CVE-2008-1227

2008-03-10T13:44:00.000-04:00

2017-08-07T21:29:58.713-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SR:2008:006 GENTOO GLSA-200804-27 CONFIRM http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.6 MANDRIVA MDVSA-2008:158 BID 28101 VUPEN ADV-2008-0769 MISC https://bugzilla.redhat.com/show_bug.cgi?id=372021 XF silctoolkit-silcfingerprint-bo(41012) Stack-based buffer overflow in the silc_fingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing (SILC) Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via long input data. NOTE: some of these details are obtained from third party information.

cpe:/a:minigal:mg2

CVE-2008-1228

2008-03-10T13:44:00.000-04:00

2013-09-08T01:32:35.163-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20080304 Minigal 2 critical XSS BID 28098 Cross-site scripting (XSS) vulnerability in admin.php in MG2 (formerly Minigal) allows remote attackers to inject arbitrary web script or HTML via the list parameter in an import action.

cpe:/a:jspwiki:jspwiki:2.4.104 cpe:/a:jspwiki:jspwiki:2.5.139 cpe:/a:jspwiki:jspwiki:2.5.139_beta

CVE-2008-1229

2008-03-10T13:44:00.000-04:00

2017-09-28T21:30:37.083-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20080213 JSPWiki Multiple Vulnerabilities MISC http://www.bugsec.com/articles.php?Security=48&Web-Application-Firewall=0 BID 27785 XF jspwiki-edit-xss(40507) EXPLOIT-DB 5112 Cross-site scripting (XSS) vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to inject arbitrary web script or HTML via the editor parameter, a different vector than CVE-2007-5120.b.

cpe:/a:jspwiki:jspwiki:2.4.104 cpe:/a:jspwiki:jspwiki:2.5.139 cpe:/a:jspwiki:jspwiki:2.5.139_beta

CVE-2008-1230

2008-03-10T13:44:00.000-04:00

2017-09-28T21:30:37.130-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20080213 JSPWiki Multiple Vulnerabilities MISC http://www.bugsec.com/articles.php?Security=48&Web-Application-Firewall=0 BID 27785 XF jspwiki-install-file-upload(40511) EXPLOIT-DB 5112 Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to upload and execute arbitrary .jsp files via an unspecified manipulation that attaches a .jsp file to an "entry page."

cpe:/a:jspwiki:jspwiki:2.4.104 cpe:/a:jspwiki:jspwiki:2.5.139 cpe:/a:jspwiki:jspwiki:2.5.139_beta

CVE-2008-1231

2008-03-10T13:44:00.000-04:00

2017-09-28T21:30:37.190-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20080213 JSPWiki Multiple Vulnerabilities MISC http://www.bugsec.com/articles.php?Security=48&Web-Application-Firewall=0 BID 27785 XF jspwiki-edit-file-include(40508) EXPLOIT-DB 5112 Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local .jsp files, and obtain sensitive information, via a .. (dot dot) in the editor parameter.

cpe:/a:apache:tomcat:4.1.0 cpe:/a:apache:tomcat:4.1.1 cpe:/a:apache:tomcat:4.1.2 cpe:/a:apache:tomcat:4.1.3 cpe:/a:apache:tomcat:4.1.10 cpe:/a:apache:tomcat:4.1.12 cpe:/a:apache:tomcat:4.1.15 cpe:/a:apache:tomcat:4.1.24 cpe:/a:apache:tomcat:4.1.28 cpe:/a:apache:tomcat:4.1.31 cpe:/a:apache:tomcat:4.1.36 cpe:/a:apache:tomcat:5.5.0 cpe:/a:apache:tomcat:5.5.1 cpe:/a:apache:tomcat:5.5.2 cpe:/a:apache:tomcat:5.5.10 cpe:/a:apache:tomcat:5.5.11 cpe:/a:apache:tomcat:5.5.12 cpe:/a:apache:tomcat:5.5.13 cpe:/a:apache:tomcat:5.5.14 cpe:/a:apache:tomcat:5.5.15 cpe:/a:apache:tomcat:5.5.16 cpe:/a:apache:tomcat:5.5.17 cpe:/a:apache:tomcat:5.5.18 cpe:/a:apache:tomcat:5.5.19 cpe:/a:apache:tomcat:5.5.20 cpe:/a:apache:tomcat:5.5.21 cpe:/a:apache:tomcat:5.5.22 cpe:/a:apache:tomcat:5.5.23 cpe:/a:apache:tomcat:5.5.24 cpe:/a:apache:tomcat:5.5.25 cpe:/a:apache:tomcat:6.0 cpe:/a:apache:tomcat:6.0.0 cpe:/a:apache:tomcat:6.0.1 cpe:/a:apache:tomcat:6.0.10 cpe:/a:apache:tomcat:6.0.11 cpe:/a:apache:tomcat:6.0.12 cpe:/a:apache:tomcat:6.0.13 cpe:/a:apache:tomcat:6.0.14 cpe:/a:apache:tomcat:6.0.15 cpe:/a:apache_software_foundation:tomcat:4.1 cpe:/a:apache_software_foundation:tomcat:4.1.32 cpe:/a:apache_software_foundation:tomcat:4.1.34 cpe:/a:apache_software_foundation:tomcat:4.1.37 cpe:/a:apache_software_foundation:tomcat:5.5.26 cpe:/a:apache_software_foundation:tomcat:6.0.16

CVE-2008-1232

2008-08-03T21:41:00.000-04:00

2019-03-25T07:30:02.583-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-02-ca-service-desk-tomcat-cross-site-scripting-vulnerability.aspx APPLE APPLE-SA-2008-10-09 SUSE SUSE-SR:2008:018 SUSE SUSE-SR:2009:004 HP HPSBUX02401 HP HPSBST02955 SREASON 4098 CONFIRM http://support.apple.com/kb/HT3216 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm CONFIRM http://tomcat.apache.org/security-4.html CONFIRM http://tomcat.apache.org/security-5.html CONFIRM http://tomcat.apache.org/security-6.html MANDRIVA MDVSA-2008:188 REDHAT RHSA-2008:0648 REDHAT RHSA-2008:0862 REDHAT RHSA-2008:0864 BUGTRAQ 20080801 [CVE-2008-1232] Apache Tomcat XSS vulnerability BUGTRAQ 20090616 CA20090615-02: CA Service Desk Tomcat Cross Site Scripting Vulnerability BUGTRAQ 20090806 CA20090806-02: Security Notice for Unicenter Asset Portfolio Management, Unicenter Desktop and Server Management, Unicenter Patch Management BUGTRAQ 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components BID 30496 BID 31681 SECTRACK 1020622 CONFIRM http://www.vmware.com/security/advisories/VMSA-2009-0002.html CONFIRM http://www.vmware.com/security/advisories/VMSA-2009-0016.html VUPEN ADV-2008-2305 VUPEN ADV-2008-2780 VUPEN ADV-2008-2823 VUPEN ADV-2009-0320 VUPEN ADV-2009-0503 VUPEN ADV-2009-1609 VUPEN ADV-2009-2194 VUPEN ADV-2009-3316 XF tomcat-httpservletresponse-xss(44155) MLIST [tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ MLIST [tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ MLIST [tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ MLIST [tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ CONFIRM https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209500 CONFIRM https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214095 FEDORA FEDORA-2008-7977 FEDORA FEDORA-2008-8113 FEDORA FEDORA-2008-8130 Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.

cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:thunderbird:2.0.0.12

CVE-2008-1233

2008-03-27T06:44:00.000-04:00

2018-10-11T16:30:22.883-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SUSE SUSE-SA:2008:019 REDHAT RHSA-2008:0208 SUNALERT 238492 SUNALERT 239546 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 DEBIAN DSA-1532 DEBIAN DSA-1534 DEBIAN DSA-1535 DEBIAN DSA-1574 GENTOO GLSA-200805-18 CERT-VN VU#466521 MANDRIVA MDVSA-2008:080 MANDRIVA MDVSA-2008:155 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-14.html REDHAT RHSA-2008:0207 REDHAT RHSA-2008:0209 BUGTRAQ 20080327 rPSA-2008-0128-1 firefox BID 28448 SECTRACK 1019694 SLACKWARE SSA:2008-128-02 UBUNTU USN-592-1 UBUNTU USN-605-1 CERT TA08-087A VUPEN ADV-2008-0998 VUPEN ADV-2008-0999 VUPEN ADV-2008-1793 VUPEN ADV-2008-2091 XF mozilla-settimeout-code-execution(41443) FEDORA FEDORA-2008-3519 FEDORA FEDORA-2008-3557 Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via "XPCNativeWrapper pollution."

cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:thunderbird:2.0.0.12

CVE-2008-1234

2008-03-27T06:44:00.000-04:00

2018-10-11T16:30:30.807-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE SUSE-SA:2008:019 REDHAT RHSA-2008:0208 SUNALERT 238492 SUNALERT 239546 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 DEBIAN DSA-1532 DEBIAN DSA-1534 DEBIAN DSA-1535 DEBIAN DSA-1574 GENTOO GLSA-200805-18 CERT-VN VU#466521 MANDRIVA MDVSA-2008:080 MANDRIVA MDVSA-2008:155 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-14.html REDHAT RHSA-2008:0207 REDHAT RHSA-2008:0209 BUGTRAQ 20080327 rPSA-2008-0128-1 firefox BID 28448 SECTRACK 1019694 SLACKWARE SSA:2008-128-02 UBUNTU USN-592-1 UBUNTU USN-605-1 CERT TA08-087A VUPEN ADV-2008-0998 VUPEN ADV-2008-0999 VUPEN ADV-2008-1793 VUPEN ADV-2008-2091 XF firefox-eventhandlers-xss(41455) FEDORA FEDORA-2008-3519 FEDORA FEDORA-2008-3557 Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to inject arbitrary web script or HTML via event handlers, aka "Universal XSS using event handlers."

cpe:/a:mozilla:firefox:0.1 cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.4 cpe:/a:mozilla:firefox:0.5 cpe:/a:mozilla:firefox:0.6 cpe:/a:mozilla:firefox:0.6.1 cpe:/a:mozilla:firefox:0.7 cpe:/a:mozilla:firefox:0.7.1 cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:thunderbird:0.1 cpe:/a:mozilla:thunderbird:0.2 cpe:/a:mozilla:thunderbird:0.3 cpe:/a:mozilla:thunderbird:0.4 cpe:/a:mozilla:thunderbird:0.5 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.8 cpe:/a:mozilla:thunderbird:0.9 cpe:/a:mozilla:thunderbird:1.0 cpe:/a:mozilla:thunderbird:1.0.2 cpe:/a:mozilla:thunderbird:1.0.4 cpe:/a:mozilla:thunderbird:1.0.5 cpe:/a:mozilla:thunderbird:1.0.6 cpe:/a:mozilla:thunderbird:1.0.7 cpe:/a:mozilla:thunderbird:1.0.8 cpe:/a:mozilla:thunderbird:1.5 cpe:/a:mozilla:thunderbird:1.5.0.2 cpe:/a:mozilla:thunderbird:1.5.0.4 cpe:/a:mozilla:thunderbird:1.5.0.5 cpe:/a:mozilla:thunderbird:1.5.0.7 cpe:/a:mozilla:thunderbird:1.5.0.8 cpe:/a:mozilla:thunderbird:1.5.0.9 cpe:/a:mozilla:thunderbird:1.5.0.10 cpe:/a:mozilla:thunderbird:1.5.0.12 cpe:/a:mozilla:thunderbird:1.5.0.13 cpe:/a:mozilla:thunderbird:1.5.0.14 cpe:/a:mozilla:thunderbird:2.0.0.0 cpe:/a:mozilla:thunderbird:2.0.0.4 cpe:/a:mozilla:thunderbird:2.0.0.5 cpe:/a:mozilla:thunderbird:2.0.0.6 cpe:/a:mozilla:thunderbird:2.0.0.9 cpe:/a:mozilla:thunderbird:2.0.0.12

CVE-2008-1235

2008-03-27T06:44:00.000-04:00

2018-10-11T16:30:38.540-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SA:2008:019 REDHAT RHSA-2008:0208 SUNALERT 238492 SUNALERT 239546 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 DEBIAN DSA-1532 DEBIAN DSA-1534 DEBIAN DSA-1535 DEBIAN DSA-1574 GENTOO GLSA-200805-18 CERT-VN VU#466521 MANDRIVA MDVSA-2008:080 MANDRIVA MDVSA-2008:155 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-14.html REDHAT RHSA-2008:0207 REDHAT RHSA-2008:0209 BUGTRAQ 20080327 rPSA-2008-0128-1 firefox BID 28448 SECTRACK 1019694 SLACKWARE SSA:2008-128-02 UBUNTU USN-592-1 UBUNTU USN-605-1 CERT TA08-087A VUPEN ADV-2008-0998 VUPEN ADV-2008-0999 VUPEN ADV-2008-1793 VUPEN ADV-2008-2091 XF mozilla-principal-code-execution(41457) FEDORA FEDORA-2008-3519 FEDORA FEDORA-2008-3557 Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute with the wrong principal, aka "Privilege escalation via incorrect principals."

cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:thunderbird:2.0.0.12

CVE-2008-1236

2008-03-27T06:44:00.000-04:00

2018-10-11T16:30:47.947-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SUSE SUSE-SA:2008:019 REDHAT RHSA-2008:0208 SUNALERT 238492 SUNALERT 239546 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 DEBIAN DSA-1532 DEBIAN DSA-1534 DEBIAN DSA-1535 DEBIAN DSA-1574 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:080 MANDRIVA MDVSA-2008:155 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-15.html REDHAT RHSA-2008:0207 REDHAT RHSA-2008:0209 BUGTRAQ 20080327 rPSA-2008-0128-1 firefox BID 28448 SECTRACK 1019695 SLACKWARE SSA:2008-128-02 UBUNTU USN-592-1 UBUNTU USN-605-1 CERT TA08-087A VUPEN ADV-2008-0998 VUPEN ADV-2008-0999 VUPEN ADV-2008-1793 VUPEN ADV-2008-2091 XF mozilla-layoutengine-code-execution(41445) FEDORA FEDORA-2008-3519 FEDORA FEDORA-2008-3557 Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the layout engine.

cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:thunderbird:2.0.0.12

CVE-2008-1237

2008-03-27T06:44:00.000-04:00

2018-10-11T16:30:55.573-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SUSE SUSE-SA:2008:019 SUSE SUSE-SR:2008:011 REDHAT RHSA-2008:0208 SUNALERT 238492 SUNALERT 239546 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 DEBIAN DSA-1532 DEBIAN DSA-1534 DEBIAN DSA-1535 DEBIAN DSA-1574 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:080 MANDRIVA MDVSA-2008:155 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-15.html REDHAT RHSA-2008:0207 REDHAT RHSA-2008:0209 BUGTRAQ 20080327 rPSA-2008-0128-1 firefox BID 28448 SECTRACK 1019695 SLACKWARE SSA:2008-128-02 UBUNTU USN-592-1 UBUNTU USN-605-1 CERT TA08-087A VUPEN ADV-2008-0998 VUPEN ADV-2008-0999 VUPEN ADV-2008-1793 VUPEN ADV-2008-2091 XF firefox-javascript-engine-code-execution(41446) FEDORA FEDORA-2008-3519 FEDORA FEDORA-2008-3557 Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine.

cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:seamonkey:1.1.8

CVE-2008-1238

2008-03-27T06:44:00.000-04:00

2018-10-11T16:31:03.433-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE SUSE-SA:2008:019 REDHAT RHSA-2008:0208 MISC http://sla.ckers.org/forum/read.php?10,20033 SUNALERT 238492 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 DEBIAN DSA-1532 DEBIAN DSA-1534 DEBIAN DSA-1535 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:080 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-16.html REDHAT RHSA-2008:0207 REDHAT RHSA-2008:0209 BUGTRAQ 20080327 rPSA-2008-0128-1 firefox BID 28448 SECTRACK 1019703 UBUNTU USN-592-1 CERT TA08-087A VUPEN ADV-2008-0998 VUPEN ADV-2008-1793 XF mozilla-http-referrer-spoofing(41449) Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.

cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:seamonkey:1.1.8

CVE-2008-1240

2008-03-27T21:44:00.000-04:00

2018-10-11T16:31:07.603-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE SUSE-SA:2008:019 SUNALERT 238492 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 DEBIAN DSA-1532 DEBIAN DSA-1534 DEBIAN DSA-1535 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:080 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-18.html BUGTRAQ 20080327 rPSA-2008-0128-1 firefox BID 28448 UBUNTU USN-592-1 CERT TA08-087A VUPEN ADV-2008-0998 VUPEN ADV-2008-1793 XF mozilla-liveconnect-unauthorized-access(41458) LiveConnect in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 does not properly parse the content origin for jar: URIs before sending them to the Java plugin, which allows remote attackers to access arbitrary ports on the local machine. NOTE: this is closely related to CVE-2008-1195.

cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:seamonkey:1.1.8

CVE-2008-1241

2008-03-27T06:44:00.000-04:00

2018-10-11T16:31:10.400-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE SUSE-SA:2008:019 REDHAT RHSA-2008:0208 SUNALERT 238492 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 DEBIAN DSA-1532 DEBIAN DSA-1534 DEBIAN DSA-1535 GENTOO GLSA-200805-18 MANDRIVA MDVSA-2008:080 CONFIRM http://www.mozilla.org/security/announce/2008/mfsa2008-19.html REDHAT RHSA-2008:0207 REDHAT RHSA-2008:0209 BUGTRAQ 20080327 rPSA-2008-0128-1 firefox BID 28448 SECTRACK 1019700 UBUNTU USN-592-1 CERT TA08-087A VUPEN ADV-2008-0998 VUPEN ADV-2008-1793 XF firefox-xul-popup-spoofing(41454) GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab.

cpe:/h:belkin:f5d7230-4:::9.01.10

CVE-2008-1242

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:14.557-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! BID 28317 XF belkin-f5d72304-security-bypass(41120) The control panel on the Belkin F5D7230-4 router with firmware 9.01.10 maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user, a different vulnerability than CVE-2005-3802.

cpe:/h:linksys:wrt300n:::2.00.20

CVE-2008-1243

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:15.010-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://code.bulix.org/cx46qa-65489 MISC http://code.bulix.org/koom78-65490 MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF linksys-wrt300n-dyndnsdomain-xss(41121) Cross-site scripting (XSS) vulnerability on the Linksys WRT300N router with firmware 2.00.20, when Mozilla Firefox or Apple Safari is used, allows remote attackers to inject arbitrary web script or HTML via the dyndns_domain parameter to the default URI.

cpe:/h:belkin:f5d7230-4:::9.01.10

CVE-2008-1244

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:15.463-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! BID 28319 MISC https://bugzilla.mozilla.org/show_bug.cgi?id=371598 XF belkin-f5d72304-setupdns-security-bypass(41124) cgi-bin/setup_dns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns1_1, dns1_2, dns1_3, and dns1_4 parameters. NOTE: it was later reported that F5D7632-4V6 with firmware 6.01.08 is also affected.

cpe:/h:belkin:f5d7230-4:::9.01.10

CVE-2008-1245

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:16.010-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! BID 28322 XF belkin-f5d72304-setupvirtualserver-dos(41116) cgi-bin/setup_virtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a denial of service (control center outage) via an HTTP request with invalid POST data and a "Connection: Keep-Alive" header.

cpe:/o:cisco:pix_asa_finesse_operation_system:7.1 cpe:/o:cisco:pix_asa_finesse_operation_system:7.2

CVE-2008-1246

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:16.480-04:00

6.8

LOCAL

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://hackathology.blogspot.com/2008/01/pixasa-finesse-71-72-privilege.html MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080124 PIX Privilege Escalation Vulnerability BUGTRAQ 20080124 Re: PIX Privilege Escalation Vulnerability BUGTRAQ 20080125 Re: Re: PIX Privilege Escalation Vulnerability BUGTRAQ 20080205 Re: Re: PIX Privilege Escalation Vulnerability BUGTRAQ 20080301 The Router Hacking Challenge is Over! BID 27457 XF cisco-pixasa-privilege-escalation(41129) ** DISPUTED ** The Cisco PIX/ASA Finesse Operation System 7.1 and 7.2 allows local users to gain privileges by entering characters at the enable prompt, erasing these characters via the Backspace key, and then holding down the Backspace key for one second after erasing the final character. NOTE: third parties, including one who works for the vendor, have been unable to reproduce the flaw unless the enable password is blank.

cpe:/h:linksys:wrt54g:::1.00.9

CVE-2008-1247

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:17.277-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://kinqpinz.info/lib/wrt54g/own.txt MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! BID 28381 XF linksys-wrt54g-security-bypass(41118) MISC https://kinqpinz.info/lib/wrt54g/ MISC https://kinqpinz.info/lib/wrt54g/own2.txt EXPLOIT-DB 5313 EXPLOIT-DB 5926 The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary administrative actions via a direct request to (1) Advanced.tri, (2) AdvRoute.tri, (3) Basic.tri, (4) ctlog.tri, (5) ddns.tri, (6) dmz.tri, (7) factdefa.tri, (8) filter.tri, (9) fw.tri, (10) manage.tri, (11) ping.tri, (12) PortRange.tri, (13) ptrigger.tri, (14) qos.tri, (15) rstatus.tri, (16) tracert.tri, (17) vpn.tri, (18) WanMac.tri, (19) WBasic.tri, or (20) WFilter.tri. NOTE: the Security.tri vector is already covered by CVE-2006-5202.

cpe:/h:snom:320_sip_phone

CVE-2008-1248

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:18.357-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF snomsip-interface-unauth-access(41171) The web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to make arbitrary phone calls via the "Call a number" field. NOTE: this might overlap CVE-2007-3440.

cpe:/h:snom:320_sip_phone

CVE-2008-1249

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:18.667-04:00

9.4

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! snomControl.swf in the central phone server for the Snom 320 SIP Phone allows remote attackers to cause a denial of service (application crash and corruption of call logs) via a "'); (double quote, quote, close parenthesis, semicolon) sequence in the "Call a number" field.

cpe:/h:snom:320_sip_phone

CVE-2008-1250

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:18.857-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! BID 27767 XF snom-sipphone-addressbook-csrf(40500) Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence.

cpe:/h:snom:320_sip_phone

CVE-2008-1251

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:19.293-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! BID 27767 XF snom-sipphone-addressbook-xss(40499) Cross-site scripting (XSS) vulnerability in the web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/h:deutsche_telekom:speedport_w500_dsl_router

CVE-2008-1252

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:19.777-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! BID 28382 XF speedport-w500-bbanner-info-disclosure(41128) b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source.

cpe:/h:d-link:dsl-g604t

CVE-2008-1253

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:20.247-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! BID 28439 XF dlinkdslg604t-cgibinwebcm-xss(41117) Cross-site scripting (XSS) vulnerability in cgi-bin/webcm on the D-Link DSL-G604T router allows remote attackers to inject arbitrary web script or HTML via the var:category parameter, as demonstrated by a request for advanced/portforw.htm on the fwan page.

cpe:/h:zyxel:p-660hw

CVE-2008-1254

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:20.683-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF zyxel-p660hw-unspecified-csrf(41111) Multiple cross-site request forgery (CSRF) vulnerabilities on the ZyXEL P-660HW series router allow remote attackers to (1) change DNS servers and (2) add keywords to the "bannedlist" via unspecified vectors.

cpe:/h:zyxel:p-660hw

CVE-2008-1255

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:20.997-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF zyxel-p660hw-ip-authentication-bypass(41114) The ZyXEL P-660HW series router maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user.

cpe:/h:zyxel:p-660hw

CVE-2008-1256

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:21.307-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF zyxel-p660hw-default-password(41108) The ZyXEL P-660HW series router has "admin" as its default password, which allows remote attackers to gain administrative access.

cpe:/h:zyxel:p-660hw:_t1:- cpe:/h:zyxel:p-660hw:_t1:v2 cpe:/h:zyxel:p-660hw_d1:- cpe:/h:zyxel:p-660hw_d1:v2 cpe:/h:zyxel:p-660hw_d3:- cpe:/h:zyxel:p-660hw_t3:- cpe:/h:zyxel:p-660hw_t3:v2

CVE-2008-1257

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:21.620-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF zyxel-p660hw-diaggeneral-xss(41109) Cross-site scripting (XSS) vulnerability in Forms/DiagGeneral_2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HTML via the PingIPAddr parameter.

cpe:/h:d-link:di-604

CVE-2008-1258

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:21.933-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! BID 28439 XF dlink-di604-prim-xss(41122) Cross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via the rf parameter.

cpe:/h:zyxel:p-2602hw-d1a:::3.40%28ajz.1%29

CVE-2008-1259

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:22.387-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF zyxel-ipaddress-authentication-bypass(41112) The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a user who previously authenticated within the previous 5 minutes.

cpe:/h:zyxel:p-2602hw-d1a:::3.40%28ajz.1%29

CVE-2008-1260

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:22.730-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF zyxel-p2602hw-multiple-csrf(41170) Multiple cross-site request forgery (CSRF) vulnerabilities on the Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware allow remote attackers to (1) make the admin web server available on the Internet (WAN) interface via the WWWAccessInterface parameter to Forms/RemMagWWW_1 or (2) change the IP whitelisting timeout via the StdioTimout parameter to Forms/rpSysAdmin_1.

cpe:/h:zyxel:p-2602hw-d1a:3.40%28ajz.1%29

CVE-2008-1261

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:23.043-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF zyxel-p2602hwd1a-loginstatus-info-disclosure(41113) The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware provides different responses to admin page requests depending on whether a user is logged in, which allows remote attackers to obtain current login status by requesting an arbitrary admin URI.

cpe:/h:airspan:wimax_prost:4.1::6.5.38.0

CVE-2008-1262

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:23.370-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://airspan4wimax.googlepages.com/ MISC http://www.0x000000.com/?i=524 MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ CERT-VN VU#248372 BUGTRAQ 20080301 The Router Hacking Challenge is Over! BID 28122 CONFIRM http://www.sharemethods.net/nepal/servlet/open?keeppath=false&aid=29820 VUPEN ADV-2008-0802 XF wimaxprost-webinterface-security-bypass(41052) The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/.

cpe:/h:linksys:wrt54g

CVE-2008-1263

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:24.230-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF linksys-config-information-disclosure(41115) The Linksys WRT54G router stores passwords and keys in cleartext in the Config.bin file, which might allow remote authenticated users to obtain sensitive information via an HTTP request for the top-level Config.bin URI.

cpe:/h:linksys:wrt54g

CVE-2008-1264

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:24.543-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF linksys-wrt54g-ftp-default-password(41126) The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents, and an ELF executable file.

cpe:/h:linksys:wrt54g

CVE-2008-1265

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:24.857-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF linksys-wrt54g-ftp-dos(41127) The Linksys WRT54G router allows remote attackers to cause a denial of service (device restart) via a long username and password to the FTP interface.

cpe:/h:d-link:di-524

CVE-2008-1266

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:25.167-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! BID 28439 XF dlink-di524-interface-dos(41125) Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact via (1) a long username or (2) an HTTP header with a large name and an empty value.

cpe:/h:siemens:speedstream_6520

CVE-2008-1267

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:25.683-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! BID 28490 XF speedstream-basehelpenglish-dos(41123) The Siemens SpeedStream 6520 router allows remote attackers to cause a denial of service (web interface crash) via an HTTP request to basehelp_English.htm with a large integer in the Content-Length field.

cpe:/h:linksys:wrt54g:7::7.00.1

CVE-2008-1268

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:26.137-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://swbae.egloos.com/1701135 MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF linksys-wrt54g-ftp-security-bypass(41119) The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an FTP session by sending an arbitrary username and password.

cpe:/h:alice:gate2_plus_wi-fi

CVE-2008-1269

2008-03-10T13:44:00.000-04:00

2018-10-11T16:31:26.510-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

NONE

http://nvd.nist.gov MISC http://vx.netlux.org/wargamevx/alice_gate2_pluswifi_PoC.zip MISC http://www.gnucitizen.org/projects/router-hacking-challenge/ BUGTRAQ 20080301 The Router Hacking Challenge is Over! XF alicegate2pluswifi-admin-security-bypass(41110) cp06_wifi_m_nocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request.

cpe:/a:lighttpd:lighttpd:1.4.18

CVE-2008-1270

2008-03-10T17:44:00.000-04:00

2018-10-11T16:31:26.917-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE SUSE-SR:2008:008 GENTOO GLSA-200804-08 CONFIRM http://trac.lighttpd.net/trac/ticket/1587 MISC http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0106 DEBIAN DSA-1521 CONFIRM http://www.lighttpd.net/2008/3/10/1-4-19-made-in-germany CONFIRM http://www.lighttpd.net/security/lighttpd_sa_2008_03.txt BUGTRAQ 20080312 rPSA-2008-0106-1 lighttpd BID 28226 VUPEN ADV-2008-0885 CONFIRM https://bugs.gentoo.org/show_bug.cgi?id=212930 XF lighttpd-moduserdir-information-disclosure(41173) CONFIRM https://issues.rpath.com/browse/RPL-2344 mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the ~nobody directory.

CVE-2008-1271

2008-03-10T17:44:00.000-04:00

2008-03-12T00:00:00.000-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-1218. Reason: This candidate is a duplicate of CVE-2008-1218. Notes: All CVE users should reference CVE-2008-1218 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:bmscripts:bm_classifieds:20080309

CVE-2008-1272

2008-03-10T19:44:00.000-04:00

2017-09-28T21:30:38.147-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 28159 XF bmclassifieds-showad-sql-injection(41066) EXPLOIT-DB 5223 Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showad.php and the (2) ad parameter to pfriendly.php.

cpe:/a:imagevue:imagevue:1.7

CVE-2008-1273

2008-03-10T19:44:00.000-04:00

2017-08-07T21:30:01.557-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://downloads.securityfocus.com/vulnerabilities/exploits/28138.html BID 28138 XF imagevue-path-xss(41169) Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) popup.php, (2) test/dir2.php, (3) admin/upload.php, and (4) dirxml.php in upload/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/o:ibm:aix:6.1.0

CVE-2008-1274

2008-03-10T19:44:00.000-04:00

2017-09-28T21:30:38.207-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 28180 SECTRACK 1019572 VUPEN ADV-2008-0805 AIXAPAR IZ17177 XF ibm-aix-man-privilege-escalation(41067) Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory.

cpe:/a:mailenable:mailenable_enterprise:3.0 cpe:/a:mailenable:mailenable_professional:3.0 cpe:/a:mailenable:mailenable_standard

CVE-2008-1275

2008-03-10T19:44:00.000-04:00

2017-09-28T21:30:38.270-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.mailenable.com/hotfix/ BID 28154 VUPEN ADV-2008-0800 XF mailenable-expn-vrfy-dos(41083) EXPLOIT-DB 5235 Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service (crash) via crafted (1) EXPN or (2) VRFY commands.

cpe:/a:mailenable:mailenable_enterprise:3.13 cpe:/a:mailenable:mailenable_professional:3.13

CVE-2008-1276

2008-03-10T19:44:00.000-04:00

2018-10-11T16:31:28.543-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/maildisable-adv.txt SREASON 3724 BUGTRAQ 20080307 Multiple vulnerabilities in MailEnable Professional/Enterprise 3.13 BID 28145 SECTRACK 1019565 VUPEN ADV-2008-0799 XF mailenable-imapservice-bo(41058) EXPLOIT-DB 5249 Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.

cpe:/a:mailenable:mailenable_enterprise:3.13 cpe:/a:mailenable:mailenable_professional:3.13

CVE-2008-1277

2008-03-10T19:44:00.000-04:00

2018-10-11T16:31:29.403-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/maildisable-adv.txt SREASON 3724 BUGTRAQ 20080307 Multiple vulnerabilities in MailEnable Professional/Enterprise 3.13 BID 28145 SECTRACK 1019565 VUPEN ADV-2008-0799 XF mailenable-imapservice-dos(41059) The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without required arguments, which triggers a NULL pointer dereference.

cpe:/a:remotelyanywhere:remotelyanywhere:8.0.668::server cpe:/a:remotelyanywhere:remotelyanywhere:8.0.668::workstation

CVE-2008-1278

2008-03-10T19:44:00.000-04:00

2018-10-11T16:31:30.090-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/remotelynowhere-adv.txt BUGTRAQ 20080310 NULL pointer in Remotely Anywhere 8.0.668 BID 28175 VUPEN ADV-2008-0816 XF remotelyanywhere-http-dos(41077) The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attackers to cause a denial of service (crash) via an invalid Accept-Charset header, which triggers a NULL pointer dereference. NOTE: the service is automatically restarted.

cpe:/a:acronis:true_image:1.5.19.191::group_server cpe:/a:acronis:true_image:9.5.0.8072::enterprise_server

CVE-2008-1279

2008-03-10T19:44:00.000-04:00

2018-10-11T16:31:30.637-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/acrogroup-adv.txt BUGTRAQ 20080310 Invalid memory access in Acronis True Image Group Server 1.5.19.191 BID 28169 VUPEN ADV-2008-0813 XF acronis-groupserver-dos(41071) Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a packet with an invalid length field, which causes an out-of-bounds read.

cpe:/a:acronis:true_image:9.5.0.8072 cpe:/a:acronis:true_image_windows_agent:1.0.0.54

CVE-2008-1280

2008-03-10T19:44:00.000-04:00

2018-10-11T16:31:31.247-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/acroagent-adv.txt BUGTRAQ 20080310 NULL pointer in Acronis True Image Windows Agent 1.0.0.54 BID 28169 VUPEN ADV-2008-0812 XF acronis-windows-agent-dos(41070) Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference.

cpe:/a:argontechnology:client_management_services:1.31

CVE-2008-1281

2008-03-10T19:44:00.000-04:00

2018-10-11T16:31:31.777-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/argonauti-adv.txt BUGTRAQ 20080310 Directory traversal in Argon Client Management Services 1.31 BID 28160 VUPEN ADV-2008-0815 XF argoncms-tftpsrvs-directory-traversal(41076) EXPLOIT-DB 5230 Directory traversal vulnerability in TFTPsrvs.exe 2.5.3.1 and earlier, as used in Argon Technology Client Management Services (CMS) 1.31 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.

cpe:/a:b21soft:bfup:1.0.308_19

CVE-2008-1282

2008-03-10T19:44:00.000-04:00

2017-08-07T21:30:02.087-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov JVN JVN#10606373 CONFIRM http://www.hi-ho.ne.jp/babaq/bfupinfo.html BID 28131 VUPEN ADV-2008-0797 XF bfup-activex-bo(41050) Buffer overflow in the BFup ActiveX control (BFup.dll) in B21Soft BFup before 1.0.802.29 allows remote attackers to execute arbitrary code via a long FilePath parameter.

cpe:/a:silver-forge:neptune_web_server:3.0::professional

CVE-2008-1283

2008-03-10T20:44:00.000-04:00

2018-10-11T16:31:32.450-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3725 BUGTRAQ 20080307 XSS in Neptune Web Server BID 28148 XF neptune-webserver-404errorpage-xss(41089) Cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page.

cpe:/a:horde:groupware:1.0.4 cpe:/a:horde:groupware_webmail_edition:1.0.5 cpe:/a:horde:horde:3.1.6

CVE-2008-1284

2008-03-10T20:44:00.000-04:00

2018-10-11T16:31:32.870-04:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov MLIST [announce] 20080307 Horde 3.1.7 (final) MLIST [announce] 20080307 Horde Groupware 1.0.5 (final) MLIST [announce] 20080307 Horde Groupware Webmail Edition 1.0.6 (final) GENTOO GLSA-200805-01 SREASON 3726 DEBIAN DSA-1519 BUGTRAQ 20080307 Horde Webmail file inclusion proof of concept & patch. BUGTRAQ 20080308 Re: Horde Webmail file inclusion proof of concept & patch. BID 28153 VUPEN ADV-2008-0822 XF horde-theme-file-include(41054) FEDORA FEDORA-2008-2362 FEDORA FEDORA-2008-2406 Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via ".." sequences and a null byte in the theme name.

cpe:/a:sun:jsf:1.2_07

CVE-2008-1285

2008-03-11T13:44:00.000-04:00

2017-08-07T21:30:02.260-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov REDHAT RHSA-2008:0825 REDHAT RHSA-2008:0826 REDHAT RHSA-2008:0827 REDHAT RHSA-2008:0828 SUNALERT 233561 CONFIRM http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp03/html-single/readme/index.html CONFIRM http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp01/html-single/readme/ BID 28192 SECTRACK 1020628 VUPEN ADV-2008-0808 CONFIRM https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=437082 XF sun-jsf-routines-xss(41081) CONFIRM https://jira.jboss.org/jira/browse/JBPAPP-682 Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

cpe:/a:sun:java_web_console:3.0.2 cpe:/a:sun:java_web_console:3.0.3 cpe:/a:sun:java_web_console:3.0.4

CVE-2008-1286

2008-03-11T13:44:00.000-04:00

2017-08-07T21:30:02.323-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov SUNALERT 231526 BID 28155 SECTRACK 1019574 VUPEN ADV-2008-0806 XF sun-javawebconsole-information-disclosure(41069) Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended access restrictions and determine the existence of files or directories via unknown vectors.

cpe:/a:ibm:rational_clearquest:7.0.0.2 cpe:/a:ibm:rational_clearquest:7.0.1.1

CVE-2008-1287

2008-03-11T13:44:00.000-04:00

2017-08-07T21:30:02.370-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 28132 SECTRACK 1019566 VUPEN ADV-2008-0804 AIXAPAR PK55561 XF clearquest-username-information-disclosure(41042) IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.

cpe:/a:ibm:rational_clearquest:7.0.0.2 cpe:/a:ibm:rational_clearquest:7.0.1.1

CVE-2008-1288

2008-03-11T13:44:00.000-04:00

2017-08-07T21:30:02.433-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 28133 SECTRACK 1019567 VUPEN ADV-2008-0804 AIXAPAR PK55753 XF clearquest-cookie-information-disclosure(41043) IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies.

cpe:/a:asterisk:asterisk_appliance_developer_kit:1.4 cpe:/a:asterisk:asterisk_business_edition:c.1.0-beta8 cpe:/a:asterisk:asterisk_business_edition:c.1.0beta7 cpe:/a:asterisk:asterisknow:1.0.1 cpe:/a:asterisk:open_source:1.4.18 cpe:/a:asterisk:open_source:1.4.19:rc-2 cpe:/a:asterisk:open_source:1.6.0_beta5 cpe:/a:asterisk:s800i:1.1.0.1

CVE-2008-1289

2008-03-24T13:44:00.000-04:00

2018-10-11T16:31:34.653-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://downloads.digium.com/pub/security/AST-2008-002.html MISC http://labs.musecurity.com/advisories/MU-200803-01.txt SREASON 3763 SECTRACK 1019628 CONFIRM http://www.asterisk.org/node/48466 BUGTRAQ 20080318 AST-2008-002: Two buffer overflows in RTP Codec Payload Handling BID 28308 VUPEN ADV-2008-0928 XF asterisk-rtppayload-bo(41302) XF asterisk-rtp-codecpayload-bo(41305) FEDORA FEDORA-2008-2554 FEDORA FEDORA-2008-2620 Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote attackers to (1) write a zero to an arbitrary memory location via a large RTP payload number, related to the ast_rtp_unset_m_type function in main/rtp.c; or (2) write certain integers to an arbitrary memory location via a large number of RTP payloads, related to the process_sdp function in channels/chan_sip.c.

cpe:/a:viewvc:viewvc:1.0.2 cpe:/a:viewvc:viewvc:1.0.3

CVE-2008-1290

2008-03-24T13:44:00.000-04:00

2009-08-20T01:14:20.087-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380 CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=212288 GENTOO GLSA-200803-29 CONFIRM http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD BID 28055 VUPEN ADV-2008-0734 ViewVC before 1.0.5 includes "all-forbidden" files within search results that list CVS or Subversion (SVN) commits, which allows remote attackers to obtain sensitive information.

cpe:/a:viewvc:viewvc:1.0.2 cpe:/a:viewvc:viewvc:1.0.3

CVE-2008-1291

2008-03-24T13:44:00.000-04:00

2009-08-20T01:14:20.213-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380 CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=212288 GENTOO GLSA-200803-29 CONFIRM http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD BID 28055 VUPEN ADV-2008-0734 ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read files and list folders under the hidden CVSROOT folder.

cpe:/a:viewvc:viewvc:1.0.2 cpe:/a:viewvc:viewvc:1.0.3

CVE-2008-1292

2008-03-24T13:44:00.000-04:00

2009-08-20T01:14:20.337-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380 CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=212288 GENTOO GLSA-200803-29 CONFIRM http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD BID 28055 VUPEN ADV-2008-0734 ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading (1) forbidden pathnames in the revision view, (2) log history that can only be reached by traversing a forbidden object, or (3) forbidden diff view path parameters.

cpe:/a:ltsp:linux_terminal_server_project:0.99 cpe:/a:ltsp:linux_terminal_server_project:2

CVE-2008-1293

2008-04-29T09:09:00.000-04:00

2018-10-03T17:53:27.277-04:00

4.8

ADJACENT_NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469462 DEBIAN DSA-1561 MLIST [oss-security] 20080311 CVE request: insecure X11 handling in ltsp MLIST [oss-security] 20080312 Re: CVE request: insecure X11 handling in ltsp BID 28960 SECTRACK 1019940 XF ltsp-ldm-weak-security(42080) UBUNTU USN-610-1 ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka display :6).

cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.2:rc1 cpe:/o:linux:linux_kernel:2.6.2:rc2 cpe:/o:linux:linux_kernel:2.6.2:rc3 cpe:/o:linux:linux_kernel:2.6.16 cpe:/o:linux:linux_kernel:2.6.16:rc1 cpe:/o:linux:linux_kernel:2.6.16:rc2 cpe:/o:linux:linux_kernel:2.6.16:rc3 cpe:/o:linux:linux_kernel:2.6.16:rc4 cpe:/o:linux:linux_kernel:2.6.16:rc5 cpe:/o:linux:linux_kernel:2.6.16:rc6 cpe:/o:linux:linux_kernel:2.6.16.1 cpe:/o:linux:linux_kernel:2.6.16.2 cpe:/o:linux:linux_kernel:2.6.16.3 cpe:/o:linux:linux_kernel:2.6.16.4 cpe:/o:linux:linux_kernel:2.6.16.5 cpe:/o:linux:linux_kernel:2.6.16.6 cpe:/o:linux:linux_kernel:2.6.16.7 cpe:/o:linux:linux_kernel:2.6.16.8 cpe:/o:linux:linux_kernel:2.6.16.9 cpe:/o:linux:linux_kernel:2.6.16.10 cpe:/o:linux:linux_kernel:2.6.16.11 cpe:/o:linux:linux_kernel:2.6.16.12 cpe:/o:linux:linux_kernel:2.6.16.13 cpe:/o:linux:linux_kernel:2.6.16.14 cpe:/o:linux:linux_kernel:2.6.16.15 cpe:/o:linux:linux_kernel:2.6.16.16 cpe:/o:linux:linux_kernel:2.6.16.17 cpe:/o:linux:linux_kernel:2.6.16.18 cpe:/o:linux:linux_kernel:2.6.16.19 cpe:/o:linux:linux_kernel:2.6.16.20 cpe:/o:linux:linux_kernel:2.6.16.21 cpe:/o:linux:linux_kernel:2.6.16.22 cpe:/o:linux:linux_kernel:2.6.16.23 cpe:/o:linux:linux_kernel:2.6.16.24 cpe:/o:linux:linux_kernel:2.6.16.25 cpe:/o:linux:linux_kernel:2.6.16.26 cpe:/o:linux:linux_kernel:2.6.16.27 cpe:/o:linux:linux_kernel:2.6.16.28 cpe:/o:linux:linux_kernel:2.6.16.29 cpe:/o:linux:linux_kernel:2.6.16.30 cpe:/o:linux:linux_kernel:2.6.16.31 cpe:/o:linux:linux_kernel:2.6.16.32 cpe:/o:linux:linux_kernel:2.6.16.33 cpe:/o:linux:linux_kernel:2.6.16.34 cpe:/o:linux:linux_kernel:2.6.16.35 cpe:/o:linux:linux_kernel:2.6.16.36 cpe:/o:linux:linux_kernel:2.6.16.37 cpe:/o:linux:linux_kernel:2.6.16.38 cpe:/o:linux:linux_kernel:2.6.16.39 cpe:/o:linux:linux_kernel:2.6.16.40 cpe:/o:linux:linux_kernel:2.6.16.41 cpe:/o:linux:linux_kernel:2.6.16.43 cpe:/o:linux:linux_kernel:2.6.16.44 cpe:/o:linux:linux_kernel:2.6.16.45 cpe:/o:linux:linux_kernel:2.6.16.46 cpe:/o:linux:linux_kernel:2.6.16.47 cpe:/o:linux:linux_kernel:2.6.16.48 cpe:/o:linux:linux_kernel:2.6.16.49 cpe:/o:linux:linux_kernel:2.6.16.50 cpe:/o:linux:linux_kernel:2.6.16.51 cpe:/o:linux:linux_kernel:2.6.16.52 cpe:/o:linux:linux_kernel:2.6.16.53 cpe:/o:linux:linux_kernel:2.6.16_rc7 cpe:/o:linux:linux_kernel:2.6.17 cpe:/o:linux:linux_kernel:2.6.17:rc1 cpe:/o:linux:linux_kernel:2.6.17:rc2 cpe:/o:linux:linux_kernel:2.6.17:rc3 cpe:/o:linux:linux_kernel:2.6.17:rc4 cpe:/o:linux:linux_kernel:2.6.17:rc5 cpe:/o:linux:linux_kernel:2.6.17:rc6 cpe:/o:linux:linux_kernel:2.6.17.1 cpe:/o:linux:linux_kernel:2.6.17.2 cpe:/o:linux:linux_kernel:2.6.17.3 cpe:/o:linux:linux_kernel:2.6.17.4 cpe:/o:linux:linux_kernel:2.6.17.5 cpe:/o:linux:linux_kernel:2.6.17.6 cpe:/o:linux:linux_kernel:2.6.17.7 cpe:/o:linux:linux_kernel:2.6.17.8 cpe:/o:linux:linux_kernel:2.6.17.9 cpe:/o:linux:linux_kernel:2.6.17.10 cpe:/o:linux:linux_kernel:2.6.17.11 cpe:/o:linux:linux_kernel:2.6.17.12 cpe:/o:linux:linux_kernel:2.6.17.13 cpe:/o:linux:linux_kernel:2.6.17.14 cpe:/o:linux:linux_kernel:2.6.18 cpe:/o:linux:linux_kernel:2.6.18:rc1 cpe:/o:linux:linux_kernel:2.6.18:rc2 cpe:/o:linux:linux_kernel:2.6.18:rc3 cpe:/o:linux:linux_kernel:2.6.18:rc4 cpe:/o:linux:linux_kernel:2.6.18:rc5 cpe:/o:linux:linux_kernel:2.6.18:rc6 cpe:/o:linux:linux_kernel:2.6.18:rc7 cpe:/o:linux:linux_kernel:2.6.18.1 cpe:/o:linux:linux_kernel:2.6.18.2 cpe:/o:linux:linux_kernel:2.6.18.3 cpe:/o:linux:linux_kernel:2.6.18.4 cpe:/o:linux:linux_kernel:2.6.18.5 cpe:/o:linux:linux_kernel:2.6.18.6 cpe:/o:linux:linux_kernel:2.6.18.7 cpe:/o:linux:linux_kernel:2.6.18.8 cpe:/o:linux:linux_kernel:2.6.19 cpe:/o:linux:linux_kernel:2.6.19:rc1 cpe:/o:linux:linux_kernel:2.6.19:rc2 cpe:/o:linux:linux_kernel:2.6.19:rc3 cpe:/o:linux:linux_kernel:2.6.19:rc4 cpe:/o:linux:linux_kernel:2.6.19.1 cpe:/o:linux:linux_kernel:2.6.19.2 cpe:/o:linux:linux_kernel:2.6.19.3 cpe:/o:linux:linux_kernel:2.6.20 cpe:/o:linux:linux_kernel:2.6.20:rc2 cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:linux:linux_kernel:2.6.20.2 cpe:/o:linux:linux_kernel:2.6.20.3 cpe:/o:linux:linux_kernel:2.6.20.4 cpe:/o:linux:linux_kernel:2.6.20.5 cpe:/o:linux:linux_kernel:2.6.20.6 cpe:/o:linux:linux_kernel:2.6.20.7 cpe:/o:linux:linux_kernel:2.6.20.8 cpe:/o:linux:linux_kernel:2.6.20.9 cpe:/o:linux:linux_kernel:2.6.20.10 cpe:/o:linux:linux_kernel:2.6.20.11 cpe:/o:linux:linux_kernel:2.6.20.12 cpe:/o:linux:linux_kernel:2.6.20.13 cpe:/o:linux:linux_kernel:2.6.20.14 cpe:/o:linux:linux_kernel:2.6.20.15 cpe:/o:linux:linux_kernel:2.6.21 cpe:/o:linux:linux_kernel:2.6.21:git1 cpe:/o:linux:linux_kernel:2.6.21:git2 cpe:/o:linux:linux_kernel:2.6.21:git3 cpe:/o:linux:linux_kernel:2.6.21:git4 cpe:/o:linux:linux_kernel:2.6.21:git5 cpe:/o:linux:linux_kernel:2.6.21:git6 cpe:/o:linux:linux_kernel:2.6.21:git7 cpe:/o:linux:linux_kernel:2.6.21:rc3 cpe:/o:linux:linux_kernel:2.6.21:rc4 cpe:/o:linux:linux_kernel:2.6.21:rc5 cpe:/o:linux:linux_kernel:2.6.21:rc6 cpe:/o:linux:linux_kernel:2.6.21:rc7 cpe:/o:linux:linux_kernel:2.6.21.1 cpe:/o:linux:linux_kernel:2.6.21.2 cpe:/o:linux:linux_kernel:2.6.21.3 cpe:/o:linux:linux_kernel:2.6.21.4

CVE-2008-1294

2008-05-02T12:05:00.000-04:00

2018-10-30T12:25:10.013-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=215000 MISC http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=9926e4c74300c4b31dee007298c6475d33369df0 CONFIRM http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 DEBIAN DSA-1565 REDHAT RHSA-2008:0612 BID 29004 UBUNTU USN-618-1 XF linux-kernel-rlimitcpu-security-bypass(42145) Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is made, which allows local users to bypass intended resource limits.

cpe:/a:gregory_kokanosky:phpmynewsletter:0.8_beta_5

CVE-2008-1295

2008-03-12T13:44:00.000-04:00

2017-09-28T21:30:38.550-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 28189 XF phpmynewsletter-archives-sql-injection(41197) EXPLOIT-DB 5231 SQL injection vulnerability in archives.php in Gregory Kokanosky (aka Greg's Place) phpMyNewsletter 0.8 beta 5 and earlier allows remote attackers to execute arbitrary SQL commands via the msg_id parameter.

cpe:/a:encaps:encapsgallery:1.11.2

CVE-2008-1296

2008-03-12T13:44:00.000-04:00

2017-08-07T21:30:02.777-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 28178 XF encapsgallery-file-xss(41164) Multiple cross-site scripting (XSS) vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary web script or HTML via the file parameter to (1) watermark.php and (2) catalog_watermark.php in core/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:ewriting:ewriting:1.2.1 cpe:/a:joomla:com_ewriting:1.2.1 cpe:/a:mambo:com_ewriting:1.2.1

CVE-2008-1297

2008-03-12T13:44:00.000-04:00

2017-09-28T21:30:38.613-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 28179 XF ewriting-cat-sql-injection(41072) EXPLOIT-DB 5226 SQL injection vulnerability in index.php in the eWriting (com_ewriting) 1.2.1 module for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action.

cpe:/a:kyantonius:hadith_module cpe:/a:php-nuke:hadith_module

CVE-2008-1298

2008-03-12T13:44:00.000-04:00

2018-10-11T16:31:36.120-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3730 MISC http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3078 BUGTRAQ 20080308 PHP-Nuke SQL injection Module "Hadith" [cat] BID 28171 XF hadith-cat-sql-injection(41092) SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter in a viewcat action to modules.php.

cpe:/a:manageengine:servicedesk_plus:7.0.0:build_7011

CVE-2008-1299

2008-03-12T13:44:00.000-04:00

2008-09-05T00:00:00.000-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2008-03-13T09:41:00.000-04:00

BID 28191 Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows allows remote attackers to inject arbitrary web script or HTML via the searchText parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:alkacon:opencms:7.0.3 cpe:/a:alkacon:opencms:7.0.4

CVE-2008-1300

2008-03-12T13:44:00.000-04:00

2018-10-11T16:31:36.763-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3731 BUGTRAQ 20080308 Alkacon OpenCms logfileViewSettings.jsp XSS, file disclosure BID 28152 XF opencms-logfileviewsettings-xss(41095) Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a different vector than CVE-2008-1045.

cpe:/a:alkacon:opencms:7.0.3 cpe:/a:alkacon:opencms:7.0.4

CVE-2008-1301

2008-03-12T13:44:00.000-04:00

2018-10-11T16:31:37.230-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3731 BUGTRAQ 20080308 Alkacon OpenCms logfileViewSettings.jsp XSS, file disclosure BID 28152 XF opencms-logfileviewsettings-info-disclosure(41096) Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter.

cpe:/a:perforce:perforce_server:2007.3_143793

CVE-2008-1302

2008-03-12T13:44:00.000-04:00

2018-10-11T16:31:37.700-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/perforces-adv.txt MISC http://aluigi.org/poc/perforces.zip SREASON 3735 BUGTRAQ 20080305 Multiple vulnerabilities in Perforce Server 2007.3/143793 BID 28108 XF perforceserver-invalid-memory-dos(41016) XF perforce-server-p4sexe-dos(41363) The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) server-DiffFile or (2) server-ReleaseFile command with a large integer value, which is used in an array initialization calculation, and leads to invalid memory access.

cpe:/a:perforce:perforce_server:2000.1 cpe:/a:perforce:perforce_server:2000.2 cpe:/a:perforce:perforce_server:2001.1 cpe:/a:perforce:perforce_server:2001.2 cpe:/a:perforce:perforce_server:2002.1 cpe:/a:perforce:perforce_server:2002.2 cpe:/a:perforce:perforce_server:2003.1 cpe:/a:perforce:perforce_server:2003.2 cpe:/a:perforce:perforce_server:2004.2 cpe:/a:perforce:perforce_server:2005.1 cpe:/a:perforce:perforce_server:2005.2 cpe:/a:perforce:perforce_server:2006.1 cpe:/a:perforce:perforce_server:2006.2 cpe:/a:perforce:perforce_server:2007.2 cpe:/a:perforce:perforce_server:2007.3 cpe:/a:perforce:perforce_server:2007.3_143793

CVE-2008-1303

2008-03-12T13:44:00.000-04:00

2018-10-11T16:31:38.513-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/perforces-adv.txt MISC http://aluigi.org/poc/perforces.zip SREASON 3735 BUGTRAQ 20080305 Multiple vulnerabilities in Perforce Server 2007.3/143793 BID 28108 XF perforceserver-multiple-commands-dos(41015) The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a missing parameter to the (1) dm-FaultFile, (2) dm-LazyCheck, (3) dm-ResolvedFile, (4) dm-OpenFile, (5) crypto, and possibly unspecified other commands, which triggers a NULL pointer dereference.

cpe:/a:wordpress:wordpress:2.3.2

CVE-2008-1304

2008-03-12T13:44:00.000-04:00

2018-10-11T16:31:39.153-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 3732 SECTRACK 1019564 BUGTRAQ 20080307 WordPress Multiple Cross-Site Scripting Vulnerabilities BID 28139 XF wordpress-users-xss(41055) XF wordpress-invites-xss(41056) Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) inviteemail parameter in an invite action to wp-admin/users.php and the (2) to parameter in a sent action to wp-admin/invites.php.

cpe:/a:chieminger:filebase_module:2.0

CVE-2008-1305

2008-03-12T13:44:00.000-04:00

2017-09-28T21:30:38.677-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 28194 XF phpbb-filebase-sql-injection(41137) EXPLOIT-DB 5236 SQL injection vulnerability in filebase.php in the Filebase mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:besavvy:savvy_content_manager

CVE-2008-1306

2008-03-12T13:44:00.000-04:00

2017-08-07T21:30:03.323-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.besavvy.com/blog/index.cfm/2008/3/11/Security-Patch BID 28200 XF savvy-searchterms-xss(41342) Multiple cross-site scripting (XSS) vulnerabilities in Savvy Content Manager (CM) allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to (1) searchresults.cfm, (2) search_results.cfm, and (3) search_results/index.cfm. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:kingsoft:antivirus_online_update_module:2007.12.29.29

CVE-2008-1307

2008-03-12T13:44:00.000-04:00

2017-09-28T21:30:38.753-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BID 28172 VUPEN ADV-2008-0857 XF kingsoft-updateocx2-bo(41088) EXPLOIT-DB 5225 Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method.

cpe:/a:sudirman_angriawan:nukec30:3.0

CVE-2008-1308

2008-03-12T13:44:00.000-04:00

2019-07-01T12:48:52.397-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3733 BUGTRAQ 20080311 PHP-Nuke Module NukeC30 sql injection BID 28197 SQL injection vulnerability in the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_catg parameter in a ViewCatg action to modules.php.

cpe:/a:realnetworks:realplayer:::enterprise cpe:/a:realnetworks:realplayer:10.0 cpe:/a:realnetworks:realplayer:10.5 cpe:/a:realnetworks:realplayer:11

CVE-2008-1309

2008-03-12T13:44:00.000-04:00

2018-10-11T16:31:40.120-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov FULLDISC 20080310 Real Networks RealPlayer ActiveX Control Heap Corruption CONFIRM http://service.real.com/realplayer/security/07252008_player/en/ CERT-VN VU#831457 BUGTRAQ 20080725 ZDI-08-047: RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability BID 28157 SECTRACK 1019576 SECTRACK 1020563 VUPEN ADV-2008-0842 VUPEN ADV-2008-2194 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-047/ XF realplayer-realaudioobjects-code-execution(41087) EXPLOIT-DB 5332 The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the (1) Console or (2) Controls property, which allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via a series of assignments of long string values, which triggers an overwrite of freed heap memory.

cpe:/a:packettrap:pt360_tool_suite:1.1.33.1.0

CVE-2008-1310

2008-03-12T13:44:00.000-04:00

2017-08-07T21:30:03.510-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20080303 DDIVRT-2008-10 PacketTrap TFTP Directory Traversal Vulnerability MISC http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-10.txt MISC http://www.emediawire.com/releases/2008/2/prweb731563.htm BID 28078 XF pt360-tftpserver-directory-traversal(40979) Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname.

cpe:/a:packettrap:pt360_tool_suite_pro:2.0.3901.0

CVE-2008-1311

2008-03-12T13:44:00.000-04:00

2018-10-11T16:31:41.417-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/packettrash-adv.txt MISC http://aluigi.org/testz/tftpx.zip SREASON 3734 BUGTRAQ 20080310 Denial of Service in PacketTrap TFTP server 2.0.3901.0 BID 28187 VUPEN ADV-2008-0811 XF pt360-tftpserver-filename-dos(41073) The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by uploading a file named (1) '|' (pipe), (2) '"' (quotation mark), or (3) "<>" (less than, greater than); or (4) a file with a long name. NOTE: the issue for vector 4 might exist because of an incomplete fix for CVE-2008-1312.

cpe:/a:packettrap:pt360_tool_suite cpe:/a:packettrap:pt360_tool_suite:1.1.33.1.0

CVE-2008-1312

2008-03-12T13:44:00.000-04:00

2017-08-07T21:30:03.620-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20080303 DDIVRT-2008-09 PacketTrap PT360 Tool Suite TFTP Denial of Service Vulnerability MISC http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-09.txt CONFIRM http://www.emediawire.com/releases/2008/2/prweb731563.htm BID 28079 XF pt360-tftpserver-unspecified-dos(41267) Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to cause a denial of service (daemon crash) via a long TFTP packet, a different vulnerability than CVE-2008-1311.

cpe:/a:bill_roberts:bloo:1.0

CVE-2008-1313

2008-03-12T13:44:00.000-04:00

2017-09-28T21:30:38.897-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 28203 XF bloo-index-sql-injection(41141) EXPLOIT-DB 5234 Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) post_id, (2) post_category_id, (3) post_year_month, and (4) static_page_id parameters; and unspecified other vectors.

cpe:/a:johannes_hass:gaestebuch_module:2.2

CVE-2008-1314

2008-03-12T13:44:00.000-04:00

2019-07-01T12:48:52.397-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://cod3rz.helloweb.eu/exploits/gaestebuch.txt BUGTRAQ 20080301 PHP-Nuke Copyright 2005 SQL BID 28063 XF gaestebuch-id-sql-injection(40975) SQL injection vulnerability in the Johannes Hass gaestebuch 2.2 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to modules.php.

cpe:/a:php-nuke:zclassifieds

CVE-2008-1315

2008-03-13T10:44:00.000-04:00

2018-10-11T16:31:42.107-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3736 MISC http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3109 BUGTRAQ 20080311 PHP-Nuke Module ZClassifieds [cat] SQL Injection BID 28211 XF zclassifieds-modules-sql-injection(41149) SQL injection vulnerability in the ZClassifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter to modules.php.

cpe:/a:qt-cute:quicktalk_forum:1.3 cpe:/a:qt-cute:quicktalk_forum:1.4 cpe:/a:qt-cute:quicktalk_forum:1.5.0.3 cpe:/a:qt-cute:quicktalk_forum:1.6

CVE-2008-1316

2008-03-13T10:44:00.000-04:00

2017-09-28T21:30:38.957-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 28215 XF quicktalkforum-id-sql-injection(41148) EXPLOIT-DB 5240 SQL injection vulnerability in qtf_ind_search_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/o:sun:solaris:10::sparc cpe:/o:sun:solaris:10::x86

CVE-2008-1317

2008-03-13T10:44:00.000-04:00

2017-08-07T21:30:03.900-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov SUNALERT 231403 BID 28214 VUPEN ADV-2008-0858 XF sun-solaris-ipc-dos(41146) Unspecified vulnerability in the Inter-Process Communication (IPC) message queue subsystem in Sun Solaris 10 allows local users to cause a denial of service (reboot) via blocked I/O message queues.

cpe:/a:mediawiki:mediawiki:1.11 cpe:/a:mediawiki:mediawiki:1.11.1

CVE-2008-1318

2008-03-13T10:44:00.000-04:00

2017-08-07T21:30:03.947-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MLIST [MediaWiki-announce] 20080307 MediaWiki 1.11.2 released (security) CONFIRM http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_11_2/phase3/RELEASE-NOTES BID 28070 SECTRACK 1019535 VUPEN ADV-2008-0732 XF mediawiki-jsoncallbacks-info-disclosure(40960) Unspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain sensitive "cross-site" information via the callback parameter in an API call for JavaScript Object Notation (JSON) formatted results.

cpe:/a:versant:versant_object_database:7.0.1 cpe:/a:versant:versant_object_database:7.0.1.3

CVE-2008-1319

2008-03-13T10:44:00.000-04:00

2018-10-11T16:31:42.573-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/versantcmd-adv.txt BUGTRAQ 20080304 Arbitrary commands execution in Versant Object Database 7.0.1.3 SREASON 3738 BUGTRAQ 20080304 Arbitrary commands execution in Versant Object Database 7.0.1.3 BID 28097 VUPEN ADV-2008-0764 XF objectdatabase-versantd-cmd-execution(40997) EXPLOIT-DB 5213 Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified VERSANT_ROOT field.

cpe:/a:asg:asg-sentry:7.0.0

CVE-2008-1320

2008-03-13T10:44:00.000-04:00

2018-10-11T16:31:43.450-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://aluigi.altervista.org/adv/asgulo-adv.txt SREASON 3737 BUGTRAQ 20080310 Multiple vulnerabilities in ASG-Sentry 7.0.0 BID 28188 VUPEN ADV-2008-0839 XF asgsentry-fxagent-bo(41082) XF asgsentry-fxialist-bo(41086) EXPLOIT-DB 5229 Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service (crash) via (1) a long request to FxIAList on TCP port 6162, or (2) an SNMP request with a long community string to FxAgent on UDP port 6161.

cpe:/a:asg-sentry:asg-sentry:7.0.0

CVE-2008-1321

2008-03-13T10:44:00.000-04:00

2018-10-11T16:31:44.357-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/asgulo-adv.txt SREASON 3737 BUGTRAQ 20080310 Multiple vulnerabilities in ASG-Sentry 7.0.0 BID 28188 VUPEN ADV-2008-0839 XF asgsentry-fxialist-weak-security(41084) EXPLOIT-DB 5229 The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote attackers to cause a denial of service (service termination) via the exit command to TCP port 6162, or have other impacts via other commands.

cpe:/a:asg-sentry:asg-sentry:7.0.0

CVE-2008-1322

2008-03-13T10:44:00.000-04:00

2018-10-11T16:31:45.217-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/asgulo-adv.txt SREASON 3737 BUGTRAQ 20080310 Multiple vulnerabilities in ASG-Sentry 7.0.0 BID 28188 VUPEN ADV-2008-0839 XF asgsentry-fcheck-dos(41080) EXPLOIT-DB 5229 The File Check Utility (fcheck.exe) in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service (CPU consumption) or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability.

cpe:/a:woltlab:burning_board_lite:2.0:beta_1

CVE-2008-1323

2008-03-13T10:44:00.000-04:00

2018-10-11T16:31:45.967-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SREASON 3739 BUGTRAQ 20080308 WoltLab Burning Board Lite 2 Beta 1 Thread Delete CSRF Vulnerability XF woltlabburningboard-index-csrf(41098) Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board Lite (wBB) 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action.

cpe:/a:leinir:travelsized_cms:0.4.1

CVE-2008-1324

2008-03-13T10:44:00.000-04:00

2018-10-11T16:31:46.310-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SREASON 3740 BUGTRAQ 20080311 travelsized cms 0.4.1 multiple local file inclusion vulnerabilities BID 28218 XF travelsized-index-file-include(41168) Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1325.

cpe:/a:leinir_turthra:uberghey_cms:0.3.1

CVE-2008-1325

2008-03-13T10:44:00.000-04:00

2018-10-11T16:31:46.700-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20080311 uberghey cms 0.3.1 multiple local file inclusion vulnerabilities BID 28217 XF uberghey-index-file-include(41151) Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1324.

cpe:/a:gallarific:gallarific

CVE-2008-1326

2008-03-13T10:44:00.000-04:00

2017-08-07T21:30:04.480-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://downloads.securityfocus.com/vulnerabilities/exploits/28163.html BID 28163 XF gallarific-search-xss(41105) Cross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:gallarific:gallarific

CVE-2008-1327

2008-03-13T10:44:00.000-04:00

2017-08-07T21:30:04.527-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://downloads.securityfocus.com/vulnerabilities/exploits/28163.html BID 28163 XF gallarific-index-users-auth-bypass(41106) Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and edit tasks via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:ca:desktop_management_suite:11.1 cpe:/a:computer_associates:arcserve_backup_laptops_and_desktops:r11.0 cpe:/a:computer_associates:arcserve_backup_laptops_and_desktops:r11.1 cpe:/a:computer_associates:arcserve_backup_laptops_and_desktops:r11.1:sp1 cpe:/a:computer_associates:arcserve_backup_laptops_and_desktops:r11.1:sp2 cpe:/a:computer_associates:arcserve_backup_laptops_and_desktops:r11.5 cpe:/a:computer_associates:desktop_management_suite:11.2::english cpe:/a:computer_associates:desktop_management_suite:11.2::localized

CVE-2008-1328

2008-04-07T14:44:00.000-04:00

2018-10-11T16:31:47.027-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SREASON 3800 BUGTRAQ 20080404 CA ARCserve Backup for Laptops and Desktops Server and CA Desktop Management Suite Multiple Vulnerabilities BID 28616 SECTRACK 1019788 VUPEN ADV-2008-1104 XF ca-arcservebackup-lgserverservice-bo(41641) CONFIRM https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173105 Buffer overflow in the LGServer service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary code via unspecified "command arguments."

CVE-2008-1329

2008-04-07T14:44:00.000-04:00

2018-10-11T16:31:47.667-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SREASON 3800 BUGTRAQ 20080404 CA ARCserve Backup for Laptops and Desktops Server and CA Desktop Management Suite Multiple Vulnerabilities BID 28616 SECTRACK 1019788 VUPEN ADV-2008-1104 XF ca-arcserverbackup-netbackup-code-execution(41642) CONFIRM https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173105 Unspecified vulnerability in the NetBackup service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary commands, related to "insufficient verification of file uploads."

cpe:/a:novell:groupwise:6.5 cpe:/a:novell:groupwise:6.5:sp1 cpe:/a:novell:groupwise:6.5:sp2 cpe:/a:novell:groupwise:6.5:sp3 cpe:/a:novell:groupwise:6.5:sp4 cpe:/a:novell:groupwise:6.5:sp5 cpe:/a:novell:groupwise:6.5:sp6 cpe:/a:novell:groupwise:6.5.2 cpe:/a:novell:groupwise:6.5.3 cpe:/a:novell:groupwise:6.5.4 cpe:/a:novell:groupwise:6.5.6 cpe:/a:novell:groupwise:6.5.7 cpe:/a:novell:groupwise:6.5_sp6_update_1 cpe:/a:novell:groupwise:7.0 cpe:/a:novell:groupwise:7.0.0:sp1 cpe:/a:novell:groupwise:7.0.0:sp2

CVE-2008-1330

2008-03-18T13:44:00.000-04:00

2017-08-07T21:30:04.713-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1019616 BID 28265 VUPEN ADV-2008-0904 XF groupwise-clientapi-security-bypass(41223) CONFIRM https://secure-support.novell.com/KanisaPlatform/Publishing/732/3263374_f.SAL_Public.html Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5 before SP6 Update 3 allows remote authenticated users to access the non-shared stored e-mail messages of another user who has shared at least one folder with the attacker.

CVE-2008-1331

2008-04-02T16:44:00.000-04:00

2019-08-14T07:29:21.090-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2019-08-12T09:50:25.387-04:00

BUGTRAQ 20080521 [DSECRG-08-020] Alcatel OmniPCX Office Remote Comand Execution BID 28758 SECTRACK 1020082 VUPEN ADV-2008-1057 CONFIRM http://www1.alcatel-lucent.com/psirt/statements/2008001/OXOrexec.htm XF omnipcx-cgiscript-info-disclosure(41560) EXPLOIT-DB 5662 cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter.

cpe:/a:asterisk:asterisk:a::business cpe:/a:asterisk:asterisk:b.1.3.2::business cpe:/a:asterisk:asterisk:b.1.3.3::business cpe:/a:asterisk:asterisk:b.2.2.0::business cpe:/a:asterisk:asterisk:b.2.2.1::business cpe:/a:asterisk:asterisk:b.2.3.1::business cpe:/a:asterisk:asterisk:b.2.3.2::business cpe:/a:asterisk:asterisk:b.2.3.3::business cpe:/a:asterisk:asterisk:b.2.3.4::business cpe:/a:asterisk:asterisk:b.2.3.5::business cpe:/a:asterisk:asterisk:b.2.3.6::business cpe:/a:asterisk:asterisk:c.1.0_beta7::business cpe:/a:asterisk:asterisk:c.1.0_beta8::business cpe:/a:asterisk:asterisk:c.1.6::business cpe:/a:asterisk:asterisk:c.1.6.1::business cpe:/a:asterisk:asterisk_appliance_developer_kit:0.2 cpe:/a:asterisk:asterisk_appliance_developer_kit:0.3 cpe:/a:asterisk:asterisk_appliance_developer_kit:0.4 cpe:/a:asterisk:asterisk_appliance_developer_kit:0.5 cpe:/a:asterisk:asterisk_appliance_developer_kit:0.6 cpe:/a:asterisk:asterisk_appliance_developer_kit:0.6.0 cpe:/a:asterisk:asterisk_appliance_developer_kit:0.7 cpe:/a:asterisk:asterisk_appliance_developer_kit:0.8 cpe:/a:asterisk:asterisk_appliance_developer_kit:1.3 cpe:/a:asterisk:asterisk_appliance_developer_kit:1.4 cpe:/a:asterisk:asterisk_business_edition:a cpe:/a:asterisk:asterisk_business_edition:b.2.5.0 cpe:/a:asterisk:asterisk_business_edition:c.1.6.1 cpe:/a:asterisk:asterisknow:1.0 cpe:/a:asterisk:asterisknow:1.0.1 cpe:/a:asterisk:open_source:1.0 cpe:/a:asterisk:open_source:1.0.0 cpe:/a:asterisk:open_source:1.0.1 cpe:/a:asterisk:open_source:1.0.2 cpe:/a:asterisk:open_source:1.0.3 cpe:/a:asterisk:open_source:1.0.3.4 cpe:/a:asterisk:open_source:1.0.4 cpe:/a:asterisk:open_source:1.0.5 cpe:/a:asterisk:open_source:1.0.6 cpe:/a:asterisk:open_source:1.0.7 cpe:/a:asterisk:open_source:1.0.8 cpe:/a:asterisk:open_source:1.0.9 cpe:/a:asterisk:open_source:1.0.11 cpe:/a:asterisk:open_source:1.0.11.1 cpe:/a:asterisk:open_source:1.0.12 cpe:/a:asterisk:open_source:1.2.0 cpe:/a:asterisk:open_source:1.2.0:beta1 cpe:/a:asterisk:open_source:1.2.0:beta2 cpe:/a:asterisk:open_source:1.2.0:rc1 cpe:/a:asterisk:open_source:1.2.0beta2 cpe:/a:asterisk:open_source:1.2.1 cpe:/a:asterisk:open_source:1.2.2 cpe:/a:asterisk:open_source:1.2.3 cpe:/a:asterisk:open_source:1.2.4 cpe:/a:asterisk:open_source:1.2.5 cpe:/a:asterisk:open_source:1.2.6 cpe:/a:asterisk:open_source:1.2.7 cpe:/a:asterisk:open_source:1.2.7.1 cpe:/a:asterisk:open_source:1.2.8 cpe:/a:asterisk:open_source:1.2.9 cpe:/a:asterisk:open_source:1.2.9.1 cpe:/a:asterisk:open_source:1.2.10 cpe:/a:asterisk:open_source:1.2.11 cpe:/a:asterisk:open_source:1.2.12 cpe:/a:asterisk:open_source:1.2.12.1 cpe:/a:asterisk:open_source:1.2.13 cpe:/a:asterisk:open_source:1.2.14 cpe:/a:asterisk:open_source:1.2.15 cpe:/a:asterisk:open_source:1.2.16 cpe:/a:asterisk:open_source:1.2.17 cpe:/a:asterisk:open_source:1.2.18 cpe:/a:asterisk:open_source:1.2.19 cpe:/a:asterisk:open_source:1.2.20 cpe:/a:asterisk:open_source:1.2.21 cpe:/a:asterisk:open_source:1.2.21.1 cpe:/a:asterisk:open_source:1.2.22 cpe:/a:asterisk:open_source:1.2.23 cpe:/a:asterisk:open_source:1.2.24 cpe:/a:asterisk:open_source:1.2.25 cpe:/a:asterisk:open_source:1.2.26 cpe:/a:asterisk:open_source:1.2.26.1 cpe:/a:asterisk:open_source:1.2.26.2 cpe:/a:asterisk:open_source:1.4.0 cpe:/a:asterisk:open_source:1.4.0:beta2 cpe:/a:asterisk:open_source:1.4.0:beta3 cpe:/a:asterisk:open_source:1.4.0:beta4 cpe:/a:asterisk:open_source:1.4.1 cpe:/a:asterisk:open_source:1.4.10 cpe:/a:asterisk:open_source:1.4.10.1 cpe:/a:asterisk:open_source:1.4.11 cpe:/a:asterisk:open_source:1.4.12 cpe:/a:asterisk:open_source:1.4.12.1 cpe:/a:asterisk:open_source:1.4.13 cpe:/a:asterisk:open_source:1.4.14 cpe:/a:asterisk:open_source:1.4.15 cpe:/a:asterisk:open_source:1.4.16 cpe:/a:asterisk:open_source:1.4.16.1 cpe:/a:asterisk:open_source:1.4.16.2 cpe:/a:asterisk:open_source:1.4.17 cpe:/a:asterisk:open_source:1.4.18 cpe:/a:asterisk:open_source:1.4.19:rc-2 cpe:/a:asterisk:open_source:1.4.19:rc3 cpe:/a:asterisk:s800i:1.0 cpe:/a:asterisk:s800i:1.0.1 cpe:/a:asterisk:s800i:1.0.2 cpe:/a:asterisk:s800i:1.0.3 cpe:/a:asterisk:s800i:1.0.3.3 cpe:/a:asterisk:s800i:1.1.0 cpe:/a:asterisk:s800i:1.1.0.1

CVE-2008-1332

2008-03-19T20:44:00.000-04:00

2018-10-11T16:31:49.107-04:00

8.8

NETWORK

MEDIUM

NONE

COMPLETE

NONE

http://nvd.nist.gov CONFIRM http://downloads.digium.com/pub/security/AST-2008-003.html SUSE SUSE-SR:2008:010 GENTOO GLSA-200804-13